Lucene search
+L

143 matches found

Ubuntu
Ubuntu
added 2013/05/14 8:13 p.m.58 views

USN-1822-1: Firefox vulnerabilities

Multiple memory safety issues were discovered in Firefox. If the user were tricked into opening a specially crafted page, an attacker could possibly exploit these to cause a denial of service via application crash, or potentially execute code with the privileges of the user invoking Firefox...

10CVSS7.8AI score0.10893EPSS
SaveExploits5References1
Tenable Nessus
Tenable Nessus
added 2012/12/19 12:00 a.m.29 views

Ubuntu 12.10 : linux vulnerability (USN-1671-1)

A flaw was discovered in the Linux kernel's handling of new hot-plugged memory. An unprivileged local user could exploit this flaw to cause a denial of service by crashing the system. Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu securit...

4CVSS6.4AI score0.00387EPSS
SaveExploits1References2
Cvelist
Cvelist
added 2012/10/08 11:00 p.m.35 views

CVE-2012-1671

Directory traversal vulnerability in index.php in phpPaleo 4.8b155 and earlier allows remote attackers to include and execute arbitrary local files via a .. dot dot in the lang parameter...

6.9AI score0.02573EPSS
SaveExploits7References6
CVE
CVE
added 2012/10/08 11:00 p.m.73 views

CVE-2012-1671

CVE-2012-1671 concerns a directory traversal vulnerability in the phpPaleo application. The issue affects phpPaleo 4.8b155 and earlier, where an attacker can abuse the lang parameter in index.php to cause Local File Inclusion, potentially enabling arbitrary local code execution. The connected doc...

6.8CVSS7AI score0.02573EPSS
SaveExploits7References6Affected Software1
OpenVAS
OpenVAS
added 2012/09/11 12:00 a.m.26 views

Slackware Advisory SSA:2008-116-01 kdelibs

The remote host is missing an update as announced via advisory SSA:2008-116-01. OpenVAS Vulnerability Test $Id: esoftslkssa200811601.nasl 6598 2017-07-07 09:36:44Z cfischer $ Description: Auto-generated from the corresponding slackware advisory Authors: Thomas Reinke Copyright: Copyright c 2012...

4.6CVSS0.8AI score0.00626EPSS
SaveExploits2
Check Point Advisories
Check Point Advisories
added 2012/04/16 12:00 a.m.49 views

Protection against Black Hole Toolkit v1.2.3 Java Array Exploits (CVE-2009-1671; CVE-2012-0507)

A buffer overflow vulnerability has been reported in Sun Java SE Runtime Environment...

6.9AI score0.98113EPSS
SaveExploits15
securityvulns
securityvulns
added 2012/04/09 12:00 a.m.77 views

'phpPaleo' Local File Inclusion (CVE-2012-1671)

'phpPaleo' Local File Inclusion CVE-2012-1671 Mark Stanislav - [email protected] I. DESCRIPTION --------------------------------------- A vulnerability exists in index.php for language handling that allows for local file inclusion using a null-byte attack on the 'lang' GET parameter. II...

6.8CVSS5.9AI score0.02573EPSS
SaveExploits7
zdt
zdt
added 2012/04/04 12:00 a.m.32 views

phpPaleo Local File Inclusion (CVE-2012-1671)

Exploit for php platform in category web applications 'phpPaleo' Local File Inclusion CVE-2012-1671 Mark Stanislav - email protected I. DESCRIPTION --------------------------------------- A vulnerability exists in index.php for language handling that allows for local file inclusion using a...

7.1AI score0.02573EPSS
SaveExploits7
Packet Storm
Packet Storm
added 2012/04/04 12:00 a.m.44 views

phpPaleo 4.8b156 Local File Inclusion

'phpPaleo' Local File Inclusion CVE-2012-1671 Mark Stanislav - [email protected] I. DESCRIPTION --------------------------------------- A vulnerability exists in index.php for language handling that allows for local file inclusion using a null-byte attack on the 'lang' GET parameter. II...

6.8CVSS6.5AI score0.02573EPSS
SaveExploits7
Exploit DB
Exploit DB
added 2012/04/04 12:00 a.m.64 views

phpPaleo - Local File Inclusion

'phpPaleo' Local File Inclusion CVE-2012-1671 Mark Stanislav - [email protected] I. DESCRIPTION --------------------------------------- A vulnerability exists in index.php for language handling that allows for local file inclusion using a null-byte attack on the 'lang' GET parameter. II...

6.8CVSS5.2AI score0.02573EPSS
SaveExploits7
Circl
Circl
added 2012/04/04 12:00 a.m.11 views

CVE-2012-1671

creationtimestamp| type| source ---|---|--- 2012-04-04 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/18701...

6.8CVSS5.7AI score0.02573EPSS
SaveExploits7References1
exploitpack
exploitpack
added 2012/04/04 12:00 a.m.48 views

phpPaleo - Local File Inclusion

phpPaleo - Local File Inclusion 'phpPaleo' Local File Inclusion CVE-2012-1671 Mark Stanislav - [email protected] I. DESCRIPTION --------------------------------------- A vulnerability exists in index.php for language handling that allows for local file inclusion using a null-byte attack on...

6.8CVSS6.5AI score0.02573EPSS
SaveExploits7
OpenVAS
OpenVAS
added 2011/08/09 12:00 a.m.64 views

CentOS Update for kernel CESA-2009:1671 centos4 i386

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

7.8CVSS6.2AI score0.12461EPSS
SaveExploits5References2
CVE
CVE
added 2011/04/10 1:00 a.m.50 views

CVE-2011-1671

CVE-2011-1671 describes a Cross-site Scripting (XSS) vulnerability in Tracks versions 1.7.2, 2.0RC2, and 2.0devel, triggered in the code path app/controllers/todos_controller.rb when accessing PATH_INFO under /todos/tag/. The issue allows remote attackers to inject arbitrary web script or HTML. T...

4.3CVSS5.9AI score0.01973EPSS
SaveExploits2References8Affected Software1
CVE
CVE
added 2010/08/02 8:00 p.m.46 views

CVE-2010-1671

CVE-2010-1671 affects hsolinkcontrol in hsolink 1.0.118. The issue is a local-privilege escalation caused by improper handling of shell metacharacters in command-line arguments, demonstrated by the second argument in a down action. Impact is local privilege gain; remediation/fix details are not p...

7.2CVSS6.4AI score0.00322EPSS
SaveExploits0References4Affected Software1
OpenVAS
OpenVAS
added 2009/12/30 12:00 a.m.48 views

CentOS Security Advisory CESA-2009:1671 (kernel)

The remote host is missing updates to kernel announced in advisory CESA-2009:1671. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR GPL-3.0-on...

7.8CVSS6.9AI score0.12461EPSS
SaveExploits5References3
OpenVAS
OpenVAS
added 2009/12/30 12:00 a.m.52 views

RedHat Security Advisory RHSA-2009:1671

The remote host is missing updates announced in advisory RHSA-2009:1671. The kernel packages contain the Linux kernel, the core of any Linux operating system. This update fixes the following security issues: a flaw was found in the Realtek r8169 Ethernet driver in the Linux kernel. pciunmapsingle...

7.8CVSS7.1AI score0.12461EPSS
SaveExploits5References2
Tenable Nessus
Tenable Nessus
added 2009/12/27 12:00 a.m.42 views

openSUSE Security Update : cups (cups-1671)

A use-after-free problem in cupsd allowed remote attackers to crash the cups server CVE-2009-3553. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update cups-1671. The text description of this plugi...

7.5CVSS7.5AI score0.03913EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
added 2009/12/27 12:00 a.m.39 views

openSUSE Security Update : cups (cups-1671)

A use-after-free problem in cupsd allowed remote attackers to crash the cups server CVE-2009-3553. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update cups-1671. The text description of this plugi...

7.5CVSS7.5AI score0.03913EPSS
SaveExploits1References2
Cvelist
Cvelist
added 2009/05/18 6:00 p.m.46 views

CVE-2009-1671

Multiple buffer overflows in the Deployment Toolkit ActiveX control in deploytk.dll 6.0.130.3 in Sun Java SE Runtime Environment aka JRE 6 Update 13 allow remote attackers to execute arbitrary code via a long string argument to the 1 setInstallerType, 2 setAdditionalPackages, 3 compareVersion, 4...

7.7AI score0.10343EPSS
SaveExploits2References3
Rows per page
Query Builder