61 matches found
CVE-2013-2218
Double free vulnerability in the virConnectListAllInterfaces method in interface/interfacebackendnetcf.c in libvirt 1.0.6 allows remote attackers to cause a denial of service libvirtd crash via a filtering flag that causes an interface to be skipped, as demonstrated by the "virsh iface-list...
Design/Logic Flaw
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2013-2218. Reason: This candidate is a reservation duplicate of CVE-2013-2218. Notes: All CVE users should reference CVE-2013-2218 instead of this candidate. All references and descriptions in this candidate have been removed to...
CVE-2013-2229
CVE-2013-2229 is rejected and not an active vulnerability entry.
CVE-2013-2218
creationtimestamp| type| source ---|---|--- 2013-07-01 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/38622...
CVE-2011-2218
CVE-2011-2218 concerns Novell GroupWise 8.0 clients using the GWIA component. The vulnerability allows remote attackers to cause a denial of service (daemon crash) on affected systems running GroupWise 8.0 before HP3 via unknown vectors. The description does not specify concrete exploit details o...
GroupWise Internet Agent < 8.0.2 HP3 Multiple Vulnerabilities
The version of Novell GroupWise Internet Agent running on the remote host is earlier than 8.0.2 HP3. Such versions are potentially affected by multiple issues : - Multiple denial of service issues exist because the application does not adequately verify user-supplied inputs. CVE-2011-2218,...
Debian DSA-2218-1 : vlc - heap-based buffer overflow
Aliz Hammond discovered that the MP4 decoder plugin of VLC, a multimedia player and streamer, is vulnerable to a heap-based buffer overflow. This has been introduced by a wrong data type being used for a size calculation. An attacker could use this flaw to trick a victim into opening a specially...
CVE-2010-2218
CVE-2010-2218 affects Adobe Flash Media Server (FMS) older than 3.0.6 and older than 3.5.4, where a JS method issue can cause a denial of service. The NVD description notes a DoS via unspecified vectors; Red Hat/NVD entries corroborate the same affected versions and impact. OpenVAS notes that the...
Adobe Flash Media server < 3.0.6 / 3.5.4 Multiple Vulnerabilities (APSB10-19)
Binary data 5624.prm...
CVE-2009-2218
Multiple PHP remote file inclusion vulnerabilities affect phpCollegeExchange 0.1.5c when register_globals is enabled. The flaws allow an attacker to trigger arbitrary PHP code execution by supplying a URL in the home parameter to several PHP scripts (i_head.php, i_nav.php, user_new_2.php, house/m...
CVE-2008-2218
CVE-2008-2218 describes a buffer overflow in the Multimedia PC Client of Nortel’s Multimedia Communication Server (MCS) , specifically in affected releases prior to Maintenance Release 3.5.8.3 and 4.0.25.3 . The issue allows a remote attacker to cause a denial of service (crash) by sending a floo...
CVE-2007-2218
Unspecified vulnerability in the Windows Schannel Security Package for Microsoft Windows 2000 SP4, XP SP2, and Server 2003 SP1 and SP2, allows remote servers to execute arbitrary code or cause a denial of service via crafted digital signatures that are processed during an SSL handshake...
CVE-2007-2218
CVE-2007-2218 maps to a heap corruption/remote code execution vulnerability in the Windows Schannel security package. MS07-031 describes an issue where server-sent digital signatures are not adequately checked during the SSL handshake, allowing a remote attacker to execute code (browser or app us...
MS07-031: Vulnerability in the Windows Schannel Security Package Could Allow Remote Code Execution (935840)
The remote host is running a version of Windows that has a bug in the SSL/TLS server-key exchange handling routine that may allow an attacker to execute arbitrary code on the remote host by luring a user on the remote host into visiting a rogue website. On Windows 2000 and 2003 this vulnerability...
CVE-2002-2218
CRLF injection in Haakon Nilsen SIPS: the setUserValue function in sipssys/code/site.inc.php is vulnerable via a CRLF sequence in a key value. The impact is stated as unknown, with possible privilege escalation or modification of critical configuration. No explicit exploit details or patch/mitiga...
Secunia Resaerch: Internet Explorer Exception Handling Memory Corruption Vulnerability
====================================================================== Secunia Research 14/06/2006 Internet Explorer Exception Handling Memory Corruption Vulnerability ====================================================================== Table of Contents Affected...
CVE-2006-2218
Microsoft Internet Explorer (IE) on Windows platforms is affected by CVE-2006-2218, an Exception Handling Memory Corruption vulnerability that could allow remote code execution when a user visits a specially crafted web page. The issue is triggered by how IE handles exceptional conditions in nest...
CVE-2005-2218
The CVE describes a DevFS (FreeBSD 5.x) flaw where insufficient parameter checking for the node type during device creation allows a user inside a jail to expose hidden device nodes. This can let jailed processes access restricted host devices, potentially leading to information leakage and privi...
CVE-2004-2218
SQL injection vulnerability in pmwh.php in PHPMyWebHosting 0.3.4 and earlier allows remote attackers to modify SQL statements via the password parameter...
CVE-2004-2218
SQL injection vulnerability in PHPMyWebHosting, affecting 0.3.4 and earlier, via pmwh.php, where the password parameter allows remote attackers to modify SQL statements. Connected sources also describe exploitation via malformed login input (username) enabling arbitrary SQL execution against the ...