Lucene search
+L

103 matches found

NVD
NVD
added 2012/03/08 10:55 p.m.17 views

CVE-2011-2873

WebKit, as used in Apple iOS before 5.1 and iTunes before 10.6, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-03-07-1 and...

9.3CVSS7.7AI score0.04136EPSS
Exploits0References11
CVE
CVE
added 2012/03/08 10:0 p.m.56 views

CVE-2011-2873

WebKit (as used in Apple iOS before 5.1 and iTunes before 10.6) is vulnerable to remote code execution or memory corruption via a crafted web site. The issue, described for CVE-2011-2873, is a WebKit memory-corruption/DoS vulnerability distinct from other WebKit issues. Connected documents do not...

9.3CVSS7.8AI score0.04136EPSS
Exploits0References11Affected Software1
CVE
CVE
added 2010/08/26 8:0 p.m.59 views

CVE-2010-2873

Adobe Shockwave Player is affected by CVE-2010-2873 and related CVEs due to improper validation of offset values in rcsL RIFF chunks within Director files (.DIR/.DCR). This leads to heap memory corruption and can allow remote code execution or a denial of service when a crafted movie is processed...

9.3CVSS7.6AI score0.06246EPSS
Exploits0References7Affected Software1
securityvulns
securityvulns
added 2010/08/26 12:0 a.m.80 views

Security update available for Shockwave Player

Security update available for Shockwave Player Release date: August 24, 2010 Vulnerability identifier: APSB10-20 CVE number:CVE-2010-2863, CVE-2010-2864, CVE-2010-2865, CVE-2010-2866, CVE-2010-2867, CVE-2010-2868, CVE-2010-2869, CVE-2010-2870, CVE-2010-2871, CVE-2010-2872, CVE-2010-2873,...

10CVSS2.9AI score0.13014EPSS
Exploits0
securityvulns
securityvulns
added 2010/08/26 12:0 a.m.60 views

ZDI-10-162: Adobe Shockwave Director rcsL Chunk Remote Code Execution Vulnerability

ZDI-10-162: Adobe Shockwave Director rcsL Chunk Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-10-162 August 24, 2010 -- CVE ID: CVE-2010-2873 -- CVSS: 10, AV:N/AC:L/Au:N/C:C/I:C/A:C -- Affected Vendors: Adobe -- Affected Products: Adobe Shockwave Player --...

9.3CVSS0.4AI score0.06246EPSS
Exploits0
CVE
CVE
added 2009/09/28 6:20 p.m.62 views

CVE-2009-2873

Cisco IOS Software CVE-2009-2873 affects IOS 12.0–12.4 when IP-based tunnels and Cisco Express Forwarding are enabled. Malformed packets can trigger a DoS, causing a device reload. Root cause: processing of certain tunnel/CEF traffic leads to reload; attack vector is remote. Remediation: Cisco-id...

7.1CVSS6.6AI score0.01684EPSS
Exploits0References7Affected Software1
OpenVAS
OpenVAS
added 2009/03/31 12:0 a.m.9 views

Fedora Core 9 FEDORA-2009-2873 (drupal-cck)

The remote host is missing an update to drupal-cck announced via advisory FEDORA-2009-2873. OpenVAS Vulnerability Test $Id: fcore20092873.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-2873 drupal-cck Authors: Thomas Reinke Copyright: Copyright c...

7.4AI score
Exploits0
OpenVAS
OpenVAS
added 2009/03/31 12:0 a.m.15 views

Fedora Core 9 FEDORA-2009-2873 (drupal-cck)

The remote host is missing an update to drupal-cck announced via advisory FEDORA-2009-2873. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by...

7.4AI score
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2009/03/22 12:0 a.m.20 views

Fedora 9 : drupal-cck-6.x.2.2-1.fc9 (2009-2873)

Fixes DRUPAL-SA-CONTRIB-2009-013 - XSS issue: http://drupal.org/node/406520 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introduci...

5.4AI score
Exploits0References2
CVE
CVE
added 2008/06/26 5:0 p.m.37 views

CVE-2008-2873

The CVE-2008-2873 issue affects sHibby sHop versions 2.2 and earlier. The vulnerability arises from storing sensitive data under the web root with insufficient access control, enabling remote attackers to retrieve the database via a direct request to Db/urun.mdb. Documents consistently describe t...

5CVSS6.3AI score0.02587EPSS
Exploits0References3Affected Software1
Tenable Nessus
Tenable Nessus
added 2007/06/18 12:0 a.m.24 views

CentOS 4 / 5 : spamassassin (CESA-2007:0492)

Updated spamassassin packages that fix a security issue are now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. SpamAssassin provides a way to reduce unsolicited commercial email spam from incomin...

1.9CVSS7.9AI score0.0034EPSS
Exploits0References6
securityvulns
securityvulns
added 2007/06/14 12:0 a.m.42 views

[Full-disclosure] rPSA-2007-0119-1 spamassassin

rPath Security Advisory: 2007-0119-1 Published: 2007-06-13 Products: rPath Linux 1 Rating: Minor Exposure Level Classification: Indirect User Deterministic Denial of Service Updated Versions: spamassassin=/conary.rpath.com@rpl:devel//1/3.2.1-0.1-1 References: https://vulners.com/cve/CVE-2007-2873...

1.9CVSS8.9AI score0.0034EPSS
Exploits0
Tenable Nessus
Tenable Nessus
added 2007/06/14 12:0 a.m.54 views

Fedora Core 5 : spamassassin-3.1.9-1.fc5.1 (2007-584)

Local symlink vulnerability. Fedora is not vulnerable in any default or common configurations. Read upstream's announcement for details. http://spamassassin.apache.org/advisories/CVE-2007-2873.txt Note that Tenable Network Security has extracted the preceding description block directly from the...

5.1CVSS8.1AI score0.74703EPSS
Exploits12References3
Oracle linux
Oracle linux
added 2007/06/13 12:0 a.m.32 views

Moderate: spamassassin security update

3.1.9-1 - 3.1.9 CVE-2007-2873...

1.9CVSS1.4AI score0.0034EPSS
Exploits0
OSV
OSV
added 2007/06/11 11:30 p.m.4 views

CVE-2007-2873

SpamAssassin 3.1.x, 3.2.0, and 3.2.1 before 20070611, when running as root in unusual configurations using vpopmail or virtual users, allows local users to cause a denial of service corrupt arbitrary files via a symlink attack on a file that is used by spamd...

1.9CVSS6.2AI score0.0034EPSS
Exploits0References10
CVE
CVE
added 2007/06/11 11:0 p.m.63 views

CVE-2007-2873

CVE-2007-2873 arises in SpamAssassin 3.1.x, 3.2.0, and 3.2.1 (before 20070611) when SpamAssassin runs as root in unusual configurations using vpopmail or virtual users. A local attacker can exploit a symlink to cause a denial of service by corrupting arbitrary files used by spamd. The available c...

1.9CVSS6.1AI score0.0034EPSS
Exploits0References10Affected Software1
NVD
NVD
added 2006/06/06 8:6 p.m.12 views

CVE-2006-2873

Cross-site scripting XSS vulnerability in hava.asp in Enigma Haber 4.2 allows remote attackers to inject arbitrary web script or HTML via the il parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

4.3CVSS5.6AI score0.01696EPSS
Exploits1References5
CVE
CVE
added 2006/06/06 8:3 p.m.43 views

CVE-2006-2873

CVE-2006-2873 describes a Cross‑site Scripting (XSS) vulnerability in the Enigma Haber 4.2 web application, specifically in the file hava.asp, exploitable via the il parameter. The vulnerability allows remote attackers to inject arbitrary web script or HTML. The description notes that provenance ...

4.3CVSS5.6AI score0.01696EPSS
Exploits1References5Affected Software1
securityvulns
securityvulns
added 2005/12/22 12:0 a.m.65 views

[Full-disclosure] MDKSA-2005:235 - Updated kernel packages fix numerous vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDKSA-2005:235 http://www.mandriva.com/security/ Package : kernel Date : December 21, 2005 Affected: 2006.0 Problem Description: Multiple vulnerabilities in the Linux 2.6 kernel have been discovered and corrected in th...

5CVSS7.1AI score0.03542EPSS
Exploits1
CVE
CVE
added 2005/09/09 4:0 a.m.68 views

CVE-2005-2873

Technical details for CVE-2005-2873 are not provided in the connected documents. Available sources reference related CVEs and kernel updates but do not specify affected product/version, root cause, or remediation for this CVE.

2.1CVSS5.6AI score0.00389EPSS
Exploits0References8Affected Software1
Rows per page
Query Builder