Lucene search
+L

109 matches found

CVE
CVE
added 2010/03/09 8:0 p.m.49 views

CVE-2010-0958

CVE-2010-0958 describes a directory traversal vulnerability in Tribisur (versions 2.1, 2.0 and earlier) affecting the file modules/hayoo/index.php when magic_quotes_gpc is disabled. Attackers could use directory traversal sequences in the theme parameter to include and execute arbitrary files. Th...

6.8CVSS7.5AI score0.01872EPSS
Exploits1References4Affected Software1
Circl
Circl
added 2010/03/08 12:0 a.m.6 views

CVE-2010-0958

creationtimestamp| type| source ---|---|--- 2010-03-08 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/11655...

6.8CVSS5.8AI score0.01872EPSS
Exploits1References1
CVE
CVE
added 2009/06/19 4:0 p.m.54 views

CVE-2009-0958

Apple iPhone OS 1.0–2.2.1 and iPhone OS for iPod touch 1.1–2.2.1 store an exception for a hostname after the user accepts an untrusted Exchange certificate, causing the certificate to be accepted in future use and enabling remote Exchange servers to obtain sensitive information such as credential...

4.3CVSS5.8AI score0.00944EPSS
Exploits0References7Affected Software1
OpenVAS
OpenVAS
added 2009/02/17 12:0 a.m.25 views

Fedora Update for kernel FEDORA-2008-0958

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

5CVSS6.6AI score0.0214EPSS
Exploits2References2
CVE
CVE
added 2008/05/29 4:0 p.m.36 views

CVE-2008-0958

The CVE-2008-0958 issue affects Online Media Technologies’ NCTSoft NCTAudioGrabber2 ActiveX control (NCTAudioGrabber2.dll). It describes multiple stack-based buffer overflows when handling certain properties, allowing a remote attacker to execute arbitrary code by convincing a user to view a mali...

9.3CVSS7.8AI score0.07729EPSS
Exploits1References9Affected Software1
Cvelist
Cvelist
added 2008/05/29 4:0 p.m.16 views

CVE-2008-0958

Multiple stack-based buffer overflows in the Online Media Technologies NCTSoft NCTAudioGrabber2 ActiveX control in NCTAudioGrabber2.dll allow remote attackers to execute arbitrary code via unspecified vectors...

7.8AI score0.07729EPSS
Exploits1References9
OpenVAS
OpenVAS
added 2008/01/17 12:0 a.m.22 views

Debian: Security Advisory (DSA-1286-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS6.7AI score0.13529EPSS
Exploits8References3
OpenVAS
OpenVAS
added 2008/01/17 12:0 a.m.34 views

Debian: Security Advisory (DSA-1304-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.4CVSS6.1AI score0.13529EPSS
Exploits4References3
Tenable Nessus
Tenable Nessus
added 2007/06/27 12:0 a.m.262 views

RHEL 4 : kernel (RHSA-2007:0488)

Updated kernel packages that fix several security issues and bugs in the Red Hat Enterprise Linux 4 kernel are now available. This security advisory has been rated as having important security impact by the Red Hat Security Response Team. The Linux kernel handles the basic functions of the...

7.5CVSS5.4AI score0.03473EPSS
Exploits0References19
Tenable Nessus
Tenable Nessus
added 2007/06/18 12:0 a.m.62 views

Debian DSA-1304-1 : kernel-source-2.6.8 - several vulnerabilities

CVE-2006-6060 CVE-2006-6106 CVE-2006-6535 CVE-2007-0958 CVE-2007-1357 CVE-2007-1592 Several local and remote vulnerabilities have been discovered in the Linux kernel that may lead to a denial of service or the execution of arbitrary code. This update also fixes a regression in the smbfs subsystem...

9.4CVSS6AI score0.13529EPSS
Exploits4References36
Debian
Debian
added 2007/06/16 10:57 a.m.134 views

[SECURITY] [DSA 1304-1] New Linux kernel 2.6.8 packages fix several vulnerabilities

-------------------------------------------------------------------------- Debian Security Advisory DSA 1304-1 [email protected] http://www.debian.org/security/ Dann Frazier June 16th, 2007 http://www.debian.org/security/faq -...

9.4CVSS6.5AI score0.13529EPSS
Exploits4
Debian
Debian
added 2007/05/02 7:37 p.m.124 views

[SECURITY] [DSA 1286-1] New Linux 2.6.18 packages fix several vulnerabilities

-------------------------------------------------------------------------- Debian Security Advisory DSA 1286-1 [email protected] http://www.debian.org/security/ Dann Frazier May 2nd, 2007 http://www.debian.org/security/faq -...

7.8CVSS7.5AI score0.13529EPSS
Exploits8
RedHat Linux
RedHat Linux
added 2007/03/14 5:22 a.m.38 views

Important: Red Hat Security Advisory: kernel security and bug fix update

Updated kernel packages that fix security issues and bugs in the Red Hat Enterprise Linux 5 kernel are now available. This update has been rated as having important security impact by the Red Hat Security Response Team. The Linux kernel handles the basic functions of the operating system. These n...

6.9CVSS5.9AI score0.00615EPSS
Exploits8References4
CVE
CVE
added 2007/02/15 6:0 p.m.89 views

CVE-2007-0958

CVE-2007-0958 : In Linux kernel 2.6.x before 2.6.20, local users can read unreadable binaries by abusing the PT_INTERP interpreter mechanism, triggering a core dump. This is a local-privilege issue; the described impact is to read binaries via core-dump behavior. According to the changelog refere...

2.1CVSS7AI score0.00394EPSS
Exploits0References20Affected Software1
Cvelist
Cvelist
added 2007/02/15 6:0 p.m.29 views

CVE-2007-0958

Linux kernel 2.6.x before 2.6.20 allows local users to read unreadable binaries by using the interpreter PTINTERP functionality and triggering a core dump, a variant of CVE-2004-1073...

7AI score0.00394EPSS
Exploits0References20
Packet Storm
Packet Storm
added 2006/03/11 12:0 a.m.41 views

EV0089.txt

New eVuln Advisory: FreeForum PHP Code Execution & Multiple XSS Vulnerabilities http://evuln.com/vulns/89/summary.html --------------------Summary---------------- eVuln ID: EV0089 CVE: CVE-2006-0957 CVE-2006-0958 Vendor: ZoneO-Soft Vendor's Web Site: http://soft.zoneo.net/ Software: FreeForum...

7.5CVSS6.6AI score0.01709EPSS
Exploits1
CVE
CVE
added 2006/03/02 11:0 p.m.51 views

CVE-2006-0958

FreeForum by ZoneO-Soft (vendor: ZoneO-Soft) prior to version 1.2.1 is affected. CVE-2006-0958 stems from unsanitized inputs in func.inc.php, allowing cross-site scripting via the name and subject parameters. Related linked advisory EV0089 also describes a PHP code execution path through unvalida...

4.3CVSS5.7AI score0.01342EPSS
Exploits1References7Affected Software1
CVE
CVE
added 2005/04/03 5:0 a.m.49 views

CVE-2005-0958

The CVE-2005-0958 entry relates to a format-string vulnerability in the log_do function (log.c) of mtftpd 0.0.3 when the statistics option is enabled. This condition can allow remote attackers to achieve arbitrary code execution via the CWD command. Affected component: mtftpd 0.0.3; vulnerable co...

7.5CVSS8.1AI score0.04434EPSS
Exploits1References4Affected Software1
NVD
NVD
added 2004/11/03 5:0 a.m.36 views

CVE-2004-0958

phpvariables.c in PHP before 5.0.2 allows remote attackers to read sensitive memory contents via 1 GET, 2 POST, or 3 COOKIE GPC variables that end in an open bracket character, which causes PHP to calculate an incorrect string length...

5CVSS6.4AI score0.0973EPSS
Exploits0References8
UbuntuCve
UbuntuCve
added 2004/11/03 5:0 a.m.33 views

CVE-2004-0958

phpvariables.c in PHP before 5.0.2 allows remote attackers to read sensitive memory contents via 1 GET, 2 POST, or 3 COOKIE GPC variables that end in an open bracket character, which causes PHP to calculate an incorrect string length...

5CVSS6AI score0.0973EPSS
Exploits0References1
Rows per page
Query Builder