Lucene search
+L

58 matches found

OSV
OSV
added 2012/04/19 9:55 p.m.8 views

CVE-2012-2396

VideoLAN VLC media player 2.0.1 allows remote attackers to cause a denial of service divide-by-zero error and application crash via a crafted MP4 file...

6.5AI score
SaveExploits0References3
UbuntuCve
UbuntuCve
added 2012/04/19 9:55 p.m.32 views

CVE-2012-2396

VideoLAN VLC media player 2.0.1 allows remote attackers to cause a denial of service divide-by-zero error and application crash via a crafted MP4 file...

4.3CVSS5.9AI score0.07291EPSS
SaveExploits2References4
CVE
CVE
added 2012/04/19 9:00 p.m.81 views

CVE-2012-2396

CVE-2012-2396 affects VideoLAN VLC media player 2.0.1. A crafted MP4 file can trigger a divide-by-zero and crash VLC, causing a denial of service. The supplied advisories reference updating VLC (e.g., Gentoo GLSA 201411-01 recommends upgrading to VLC >= 2.1.2) as remediation. No exploit detail...

4.3CVSS6.3AI score0.07291EPSS
SaveExploits2References3Affected Software1
OpenVAS
OpenVAS
added 2012/02/11 12:00 a.m.31 views

Debian: Security Advisory (DSA-2396-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.4CVSS7.7AI score0.00923EPSS
SaveExploits0References3
OpenVAS
OpenVAS
added 2012/02/11 12:00 a.m.33 views

Debian Security Advisory DSA 2396-1 (qemu-kvm)

The remote host is missing an update to qemu-kvm announced via advisory DSA 2396-1. OpenVAS Vulnerability Test $Id: deb23961.nasl 6612 2017-07-07 12:08:03Z cfischer $ Description: Auto-generated from advisory DSA 2396-1 qemu-kvm Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc...

7.4CVSS1AI score0.00923EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2012/01/31 12:00 a.m.31 views

Debian DSA-2396-1 : qemu-kvm - buffer underflow

Nicolae Mogoreanu discovered a heap overflow in the emulated e1000e network interface card of KVM, a solution for full virtualization on x86 hardware, which could result in denial of service or privilege escalation. This update also fixes a guest-triggerable memory corruption in VNC handling...

7.4CVSS7.9AI score0.00923EPSS
SaveExploits0References3
CVE
CVE
added 2010/10/13 10:00 p.m.55 views

CVE-2010-2396

CVE-2010-2396 affects Oracle Fusion Middleware, specifically the Forms component version 10.1.2.3. The vulnerability is described as an unspecified issue in the Forms component that could allow a remote attacker to affect integrity via unknown vectors. The CVSS v2 base score is 4.3 (Medium) with ...

4.3CVSS6.2AI score0.01495EPSS
SaveExploits0References2Affected Software1
Circl
Circl
added 2009/06/29 12:00 a.m.8 views

CVE-2009-2396

creationtimestamp| type| source ---|---|--- 2009-06-29 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/9043...

9.3CVSS5.8AI score0.05942EPSS
SaveExploits2References1
OpenVAS
OpenVAS
added 2008/09/24 12:00 a.m.31 views

Gentoo Security Advisory GLSA 200507-18 (mediawiki)

The remote host is missing updates announced in advisory GLSA 200507-18. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

4.3CVSS0.3AI score0.02043EPSS
SaveExploits0
CVE
CVE
added 2008/05/21 10:00 a.m.48 views

CVE-2008-2396

The CVE-2008-2396 issue affects Wajox Software microSSys CMS 1.5 and earlier. A PHP remote file inclusion vulnerability exists in index.php when register_globals is enabled, allowing an attacker to execute arbitrary PHP code by supplying a URL in an element of the PAGES array parameter. The impac...

7.5CVSS7.6AI score0.02453EPSS
SaveExploits1References4Affected Software1
CVE
CVE
added 2007/11/01 5:00 p.m.36 views

CVE-2002-2396

This CVE (CVE-2002-2396) affects Advanced TFTP (atftp) versions 0.5 and 0.6. The vulnerability is a buffer overflow in code that runs when atftp is installed with setuid or setgid, allowing a local user to potentially execute arbitrary code via a long argument to the -g option. Root cause is a bu...

7.2CVSS7.9AI score0.00418EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
added 2007/11/01 5:00 p.m.28 views

CVE-2002-2396

Buffer overflow in Advanced TFTP atftp 0.5 and 0.6, if installed setuid or setgid, may allow local users to execute arbitrary code via a long argument to the -g option...

7.5AI score0.00418EPSS
SaveExploits0References3
CVE
CVE
added 2007/07/15 9:00 p.m.57 views

CVE-2007-2396

CVE-2007-2396 concerns the JDirect support in QuickTime for Java within Apple QuickTime prior to version 7.2. The vulnerability arises because JDirect exposes dangerous interfaces that can be abused by remote attackers via crafted Java applets to achieve arbitrary code execution. Some sources exp...

9.3CVSS7.3AI score0.06876EPSS
SaveExploits1References9Affected Software1
CVE
CVE
added 2006/05/16 1:00 a.m.56 views

CVE-2006-2396

CVE-2006-2396 is a cross-site scripting (XSS) vulnerability in phpODP 1.5h that allows remote attackers to inject arbitrary web script via the browse parameter. The available records confirm the vulnerable component and the input parameter but do not provide detailed root-cause, affected versions...

5.8CVSS5.8AI score0.01952EPSS
SaveExploits2References6Affected Software1
Cvelist
Cvelist
added 2005/08/17 4:00 a.m.27 views

CVE-2004-2396

passwd 0.68 does not check the return code for the pamstart function, which has unknown impact and attack vectors that may prevent "safe and proper operation" of PAM...

6.8AI score0.00418EPSS
SaveExploits0References4
CVE
CVE
added 2005/08/17 4:00 a.m.39 views

CVE-2004-2396

The CVE-2004-2396 issue concerns passwd 0.68 failing to check the return code from pam_start, per Mandrake MDKSA-2004:045. This indicates a potential risk in PAM initialization that could affect safe and proper operation; exact impact is not quantified in the documents. The connected advisory not...

7.2CVSS6.8AI score0.00418EPSS
SaveExploits0References4
CVE
CVE
added 2005/07/27 4:00 a.m.103 views

CVE-2005-2396

CVE-2005-2396 is a publicly tracked XSS vulnerability affecting MediaWiki 1.4.6 and earlier. The root cause, as described across connected sources, is that the page move template parameter is not properly escaped, allowing remote attackers to inject arbitrary web script or HTML. The impact is tha...

4.3CVSS5.6AI score0.02043EPSS
SaveExploits0References6Affected Software1
NVD
NVD
added 2002/12/31 5:00 a.m.19 views

CVE-2002-2396

Buffer overflow in Advanced TFTP atftp 0.5 and 0.6, if installed setuid or setgid, may allow local users to execute arbitrary code via a long argument to the -g option...

7.2CVSS7.5AI score0.00418EPSS
SaveExploits0References3
Rows per page
Query Builder