Lucene search
+L

185 matches found

RedhatCVE
RedhatCVE
added 2016/07/20 7:48 a.m.37 views

CVE-2016-3598

Unspecified vulnerability in Oracle Java SE 8u92 and Java SE Embedded 8u91 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Libraries, a different vulnerability than CVE-2016-3610...

9.6CVSS7.4AI score0.0669EPSS
SaveExploits0References2
UbuntuCve
UbuntuCve
added 2015/05/01 3:59 p.m.23 views

CVE-2014-3598

The Jpeg2KImagePlugin plugin in Pillow before 2.5.3 allows remote attackers to cause a denial of service via a crafted image...

5CVSS6.8AI score0.01991EPSS
SaveExploits0References3
CVE
CVE
added 2015/05/01 3:0 p.m.58 views

CVE-2014-3598

CVE-2014-3598 affects the Python Pillow library. The vulnerability is in the Jpeg2KImagePlugin and is exploitable via a crafted image, allowing a denial-of-service condition. It concerns Pillow versions before 2.5.3; upgrading to 2.5.3 or newer mitigates the issue (per linked advisories and CVE r...

5CVSS6.5AI score0.01991EPSS
SaveExploits0References2Affected Software1
Tenable Nessus
Tenable Nessus
added 2015/04/30 12:0 a.m.29 views

openSUSE Security Update : python-Pillow (openSUSE-2015-337)

python-pillow was updated to 2.7.0 to fix security issues and bugs. The following vulnerabilities were fixed : - CVE-2014-9601: Remote attackers could cause a denial of service via a compressed text chunk in a PNG image that has a large size when it is decompressed. - CVE-2014-3598: Remote...

5CVSS7AI score0.04535EPSS
SaveExploits0References4
NVD
NVD
added 2013/08/28 1:9 p.m.18 views

CVE-2013-3598

Directory traversal vulnerability in servlet/CreateTemplateServlet in SearchBlox before 7.5 build 1 allows remote attackers to overwrite arbitrary files via a .. dot dot in the name parameter...

5CVSS6.7AI score0.02171EPSS
SaveExploits0References4
CVE
CVE
added 2013/08/28 1:0 a.m.46 views

CVE-2013-3598

CVE-2013-3598 concerns a directory traversal in SearchBlox’s servlet/CreateTemplateServlet. The vulnerability, present in SearchBlox before version 7.5 build 1, occurs when the attacker supplies a name parameter containing ".." to trigger filesystem path traversal, enabling the remote overwrite o...

5CVSS7AI score0.02171EPSS
SaveExploits0References4Affected Software1
OpenVAS
OpenVAS
added 2012/10/01 12:0 a.m.51 views

Apple Safari Multiple Vulnerabilities - Oct 2012 (Mac OS X)

This host is installed with Apple Safari web browser and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbapplesafarimultvulnoct12macosx.nasl 6018 2017-04-24 09:02:24Z teissa $ Apple Safari Multiple Vulnerabilities - Oct 2012 Mac OS X Authors: Rachana Shetty Copyright:...

9.3CVSS0.3AI score0.04129EPSS
SaveExploits2References3
securityvulns
securityvulns
added 2012/09/24 12:0 a.m.190 views

APPLE-SA-2012-09-19-3 Safari 6.0.1

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 APPLE-SA-2012-09-19-3 Safari 6.0.1 Safari 6.0.1 is now available and addresses the following: Safari Available for: OS X Lion v10.7.5, OS X Lion Server v10.7.5, OS X Mountain Lion v10.8 and v10.8.1 Impact: Opening a maliciously crafted downloaded HTML...

9.3CVSS0.3AI score0.04129EPSS
SaveExploits2
NVD
NVD
added 2012/09/13 10:30 a.m.16 views

CVE-2012-3598

WebKit, as used in Apple iTunes before 10.7, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-09-12-1...

6.8CVSS7.6AI score0.02694EPSS
SaveExploits0References9
CVE
CVE
added 2012/09/13 10:0 a.m.64 views

CVE-2012-3598

CVE-2012-3598 affects WebKit as used in Apple iTunes prior to 10.7. The issue allows remote attackers to execute arbitrary code or cause a denial of service via a crafted website, via a memory corruption bug that can crash the application. The description in the primary document notes this as a d...

6.8CVSS7.8AI score0.02694EPSS
SaveExploits0References9Affected Software1
Cvelist
Cvelist
added 2012/09/13 10:0 a.m.22 views

CVE-2012-3598

WebKit, as used in Apple iTunes before 10.7, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-09-12-1...

7.6AI score0.02694EPSS
SaveExploits0References9
UbuntuCve
UbuntuCve
added 2012/09/13 12:0 a.m.23 views

CVE-2012-3598

WebKit, as used in Apple iTunes before 10.7, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-09-12-1...

6.8CVSS6.1AI score0.02694EPSS
SaveExploits0References4
OpenVAS
OpenVAS
added 2012/03/19 12:0 a.m.14 views

Fedora Update for phpPgAdmin FEDORA-2011-13748

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

4.3CVSS6.5AI score0.0253EPSS
SaveExploits0References2
OpenVAS
OpenVAS
added 2011/10/14 12:0 a.m.16 views

Fedora Update for phpPgAdmin FEDORA-2011-13805

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

4.3CVSS6.5AI score0.0253EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2011/10/13 12:0 a.m.25 views

Fedora 16 : phpPgAdmin-5.0.3-1.fc16 (2011-13748)

Update to 5.0.3, per changes described at: http://sourceforge.net/mailarchive/forum.php?threadname =4E897F6C.90905%40free.fr&forumname=phppgadmin-news which also fixes a security flaw: http://www.openwall.com/lists/oss-security/2011/10/04/1 Note that Tenable Network Security has extracted the...

4.3CVSS5.3AI score0.0253EPSS
SaveExploits0References5
OSV
OSV
added 2011/10/08 2:52 a.m.6 views

CVE-2011-3598

Multiple cross-site scripting XSS vulnerabilities in phpPgAdmin before 5.0.3 allow remote attackers to inject arbitrary web script or HTML via 1 a web page title, related to classes/Misc.php; or the 2 returnurl or 3 returndesc parameter to display.php...

5.5AI score
SaveExploits0References16
Debian CVE
Debian CVE
added 2011/10/08 1:0 a.m.47 views

CVE-2011-3598

Multiple cross-site scripting XSS vulnerabilities in phpPgAdmin before 5.0.3 allow remote attackers to inject arbitrary web script or HTML via 1 a web page title, related to classes/Misc.php; or the 2 returnurl or 3 returndesc parameter to display.php...

4.3CVSS5.6AI score0.0253EPSS
SaveExploits0
CVE
CVE
added 2011/10/08 1:0 a.m.53 views

CVE-2011-3598

CVE-2011-3598 affects phpPgAdmin prior to 5.0.3, where multiple XSS vulnerabilities exist in display.php (title, return_url, return_desc) that allow remote script/HTML injection. Impact is XSS without authentication; CVSS v2 base score 4.3 (Medium). Mitigation: upgrade to phpPgAdmin 5.0.3 or newe...

4.3CVSS5.5AI score0.0253EPSS
SaveExploits0References16Affected Software1
NVD
NVD
added 2011/01/19 4:0 p.m.27 views

CVE-2010-3598

Unspecified vulnerability in the Oracle Document Capture component in Oracle Fusion Middleware 10.1.3.4 and 10.1.3.5 allows remote attackers to affect integrity via unknown vectors related to Import Export Utility...

7.1CVSS5.7AI score0.02194EPSS
SaveExploits0References6
CVE
CVE
added 2011/01/19 3:0 p.m.144 views

CVE-2010-3598

Affected product: Oracle Document Capture component in Oracle Fusion Middleware 10.1.3.4 and 10.1.3.5. The issue is described as an unspecified vulnerability relating to the Import Export Utility that allows remote attackers to affect integrity. The Connected documents corroborate multiple CVEs (...

7.1CVSS5.9AI score0.02194EPSS
SaveExploits0References6Affected Software1
Rows per page
Query Builder