Lucene search
+L

79 matches found

nessus
nessus
added 2012/02/10 12:0 a.m.41 views

FreeBSD : chromium -- multiple vulnerabilities (fe1976c2-5317-11e1-9e99-00262d5ed8ee)

Google Chrome Releases reports : 73478 Low CVE-2011-3953: Avoid clipboard monitoring after paste event. Credit to Daniel Cheng of the Chromium development community. 92550 Low CVE-2011-3954: Crash with excessive database usage. Credit to Collin Payne. 93106 High CVE-2011-3955: Crash aborting an...

9.3CVSS8.3AI score0.02368EPSS
Exploits0References22
ubuntucve
ubuntucve
added 2012/02/09 4:10 a.m.26 views

CVE-2011-3971

Use-after-free vulnerability in Google Chrome before 17.0.963.46 allows user-assisted remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to mousemove events...

6.8CVSS7.3AI score0.01522EPSS
Exploits0References2
cve
cve
added 2012/02/09 2:0 a.m.68 views

CVE-2011-3971

CVE-2011-3971 describes a use-after-free in Google Chrome prior to version 17.0.963.46. The vulnerability, triggered by mousemove-related vectors, allows user-assisted remote attackers to cause a denial of service and possibly other impacts. Affected software is Google Chrome before 17.0.963.46; ...

6.8CVSS7AI score0.01522EPSS
Exploits0References9Affected Software1
debiancve
debiancve
added 2012/02/09 2:0 a.m.26 views

CVE-2011-3971

Removed by vendor...

6.8CVSS9.4AI score0.01522EPSS
Exploits0
cvelist
cvelist
added 2012/02/09 2:0 a.m.28 views

CVE-2011-3971

Use-after-free vulnerability in Google Chrome before 17.0.963.46 allows user-assisted remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to mousemove events...

6.8AI score0.01522EPSS
Exploits0References9
packetstorm
packetstorm
added 2011/02/10 12:0 a.m.53 views

Internet Explorer CSS Recursive Import Use After Free

$Id: ms11003iecssimport.rb 11730 2011-02-08 23:31:44Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

9.3CVSS6.5AI score0.81663EPSS
Exploits9
canvas
canvas
added 2010/12/22 9:0 p.m.53 views

Immunity Canvas: MS11_003

Name| ms11003 ---|--- CVE| CVE-2010-3971 Exploit Pack| CANVAS Description| IE7 recursive import css vulnerability Notes| CVE Name: CVE-2010-3971 MSADV: MS11-003 Repeatability: Infinite...

9.3CVSS3.7AI score0.81663EPSS
Exploits9
cve
cve
added 2010/12/22 8:0 p.m.101 views

CVE-2010-3971

CVE-2010-3971 stems from a use-after-free in the mshtml.dll CSS parser (CSharedStyleSheet::Notify) when encountering a recursive CSS @import. The vulnerability affects Internet Explorer versions that used mshtml (notably IE6–IE8) and can allow remote code execution or a crash via memory corruptio...

9.3CVSS7.7AI score0.81663EPSS
Exploits9References16Affected Software1
saint
saint
added 2010/12/22 12:0 a.m.56 views

Microsoft Internet Explorer CSS Import Use-After-Free Code Execution

Added: 12/22/2010 CVE: CVE-2010-3971 BID: 45246 OSVDB: 69796 Background Internet Explorer is an HTML web browser which comes by default on Microsoft operating systems. Cascading Style Sheets CSS is a simple mechanism for adding style to web documents. Problem Microsoft Internet Explorer is...

9.3CVSS6.3AI score0.81663EPSS
Exploits9
nvd
nvd
added 2009/11/18 11:30 p.m.13 views

CVE-2009-3971

SQL injection vulnerability in the jTips comjtips component 1.0.7 and 1.0.9 for Joomla! allows remote attackers to execute arbitrary SQL commands via the season parameter in a ladder action to index.php...

7.5CVSS8.4AI score0.00961EPSS
Exploits1References3
cve
cve
added 2009/11/18 11:0 p.m.38 views

CVE-2009-3971

CVE-2009-3971 affects Joomla! via the jTips (com_jtips) component, versions 1.0.7 and 1.0.9. The vulnerability is an SQL injection in the season parameter used in a ladder action to index.php, allowing remote attackers to execute arbitrary SQL commands. Educational/exploit details are not provide...

7.5CVSS8.4AI score0.00961EPSS
Exploits1References3Affected Software1
circl
circl
added 2009/08/24 12:0 a.m.4 views

CVE-2009-3971

creationtimestamp| type| source ---|---|--- 2009-08-24 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/9504...

7.5CVSS5.8AI score0.00961EPSS
Exploits1References1
nvd
nvd
added 2008/09/11 1:13 a.m.14 views

CVE-2008-3971

Heap-based buffer overflow in the openmanfile function in callbacks.c in gmanedit 0.4.1 allows remote attackers to execute arbitrary code via a crafted man page, which is not properly handled during utf8 conversion. NOTE: another overflow was reported using a configuration file, but that vector...

9.3CVSS8AI score0.0569EPSS
Exploits1References7
osv
osv
added 2008/09/11 1:13 a.m.5 views

CVE-2008-3971

Heap-based buffer overflow in the openmanfile function in callbacks.c in gmanedit 0.4.1 allows remote attackers to execute arbitrary code via a crafted man page, which is not properly handled during utf8 conversion. NOTE: another overflow was reported using a configuration file, but that vector...

8.3AI score
Exploits0References7
ubuntucve
ubuntucve
added 2008/09/11 1:13 a.m.29 views

CVE-2008-3971

Heap-based buffer overflow in the openmanfile function in callbacks.c in gmanedit 0.4.1 allows remote attackers to execute arbitrary code via a crafted man page, which is not properly handled during utf8 conversion. NOTE: another overflow was reported using a configuration file, but that vector...

9.3CVSS6.5AI score0.0569EPSS
Exploits1References1
cvelist
cvelist
added 2008/09/10 3:0 p.m.26 views

CVE-2008-3971

Heap-based buffer overflow in the openmanfile function in callbacks.c in gmanedit 0.4.1 allows remote attackers to execute arbitrary code via a crafted man page, which is not properly handled during utf8 conversion. NOTE: another overflow was reported using a configuration file, but that vector...

8AI score0.0569EPSS
Exploits1References7
cve
cve
added 2007/07/25 5:0 p.m.42 views

CVE-2007-3971

CVE-2007-3971 affects ESET NOD32 Antivirus before 2.2289. The vulnerability is an integer overflow in the ASPACK packed file parser that can trigger an infinite loop, enabling remote attackers to cause CPU and disk consumption (DoS). The provided documents do not specify a remediation or patch ve...

5CVSS6.8AI score0.03167EPSS
Exploits1References11Affected Software1
nvd
nvd
added 2005/12/03 7:3 p.m.22 views

CVE-2005-3971

Cross-site scripting XSS vulnerability in the login form in Citrix MetaFrame Secure Access Manager 2.0 through 2.2 and NFuse Elite 1.0 allows remote attackers to inject arbitrary web script or HTML via the username field...

4.3CVSS5.7AI score0.01405EPSS
Exploits0References7
cve
cve
added 2005/12/03 7:0 p.m.56 views

CVE-2005-3971

CVE-2005-3971 affects Citrix MetaFrame Secure Access Manager 2.0–2.2 and NFuse Elite 1.0. It is a cross-site scripting (XSS) vulnerability in the login form that allows remote attackers to inject arbitrary web script or HTML via the username field. The connected sources document this vulnerabilit...

4.3CVSS5.9AI score0.01405EPSS
Exploits0References7Affected Software2
Rows per page
Query Builder