28619 matches found
CVE-2012-6123
Chicken before 4.8.0 does not properly handle NUL bytes in certain strings, which allows an attacker to conduct "poisoned NUL byte attack."...
CVE-2012-6122
Buffer overflow in the thread scheduler in Chicken before 4.8.0.1 allows attackers to cause a denial of service crash by opening a file descriptor with a large integer value...
CVE-2012-6125
CVE-2012-6125 applies to CHICKEN Scheme prior to 4.8.0, where hash table collision handling enables algorithmic complexity attacks that cause O(n) symbol-table lookups. The consumer-facing effect is resource-heavy lookups potentially impacting availability and response under crafted input. Severa...
CVE-2012-6124
CVE-2012-6124 concerns Chicken before 4.8.0 on 64‑bit platforms, where a casting error in the random number generator causes it to return a constant value. The vendor notes that this function isn’t used for security purposes. Connected sources (PT-2019-6812/6811) indicate the fix is to upgrade to...
CVE-2012-6123
Chicken before 4.8.0 does not properly handle NUL bytes in certain strings, which allows an attacker to conduct "poisoned NUL byte attack."...
CVE-2012-6123
CVE-2012-6123 pertains to the Chicken Scheme interpreter. Versions prior to 4.8.0 fail to properly handle NUL bytes in certain strings, enabling a “poisoned NUL byte” attack. The vulnerability’s practical impact is a flaw in input/string handling that could be exploited by an attacker, with the N...
CVE-2012-6122
Buffer overflow in the thread scheduler in Chicken before 4.8.0.1 allows attackers to cause a denial of service crash by opening a file descriptor with a large integer value...
CVE-2012-6122
CVE-2012-6122 is a buffer overflow in the thread scheduler of the Chicken Scheme runtime. The flaw allows an attacker to trigger a crash/DoS by opening a file descriptor with a large integer value. The issue affects Chicken releases up to and including 4.8.0.1, with related follow-ons noted (CVE-...
CVE-2013-2012
The CVE-2013-2012 entry affects autojump prior to 21.5.8. Local privilege escalation is possible when a Trojan horse named custom_install in the current working directory is exploited, granting elevated privileges to local users. The vulnerability is due to improper handling of a directory in the...
CVE-2012-0046
creationtimestamp| type| source ---|---|--- 2019-10-29 21:31:05+00:00| seen| https://t.me/cibsecurity/7744 2024-01-29 14:41:48+00:00| seen| https://t.me/ctinow/175270...
CVE-2012-1187
creationtimestamp| type| source ---|---|--- 2019-10-29 21:31:05+00:00| seen| https://t.me/cibsecurity/7743 2024-01-29 14:41:49+00:00| seen| https://t.me/ctinow/175271...
CVE-2012-2945
creationtimestamp| type| source ---|---|--- 2019-10-29 21:31:04+00:00| seen| https://t.me/cibsecurity/7742 2024-01-29 14:41:50+00:00| seen| https://t.me/ctinow/175272...
CVE-2012-0694
SugarCRM CE = 6.3.1 contains scripts that use "unserialize" with user controlled input which allows remote attackers to execute arbitrary PHP code...
CVE-2012-0694
CVE-2012-0694 affects SugarCRM Community Edition
CVE-2012-0046
mediawiki allows deleted text to be exposed...
CVE-2012-2945
Hadoop 1.0.3 contains a symlink vulnerability...
DEBIAN-CVE-2012-0046
mediawiki allows deleted text to be exposed...
CVE-2012-0046
mediawiki allows deleted text to be exposed...