Lucene search
+L

58 matches found

Debian CVE
Debian CVE
added 2016/08/07 10:0 a.m.54 views

CVE-2016-5769

Removed by vendor...

9.8CVSS8.9AI score0.08361EPSS
SaveExploits0
CVE
CVE
added 2016/08/07 10:0 a.m.279 views

CVE-2016-5769

CVE-2016-5769: In the PHP mcrypt extension (mcrypt.c), multiple integer overflows enable a crafted length value to cause a heap-based buffer overflow and crash or potentially other impact. Affected: PHP releases prior to 5.5.37, 5.6.x prior to 5.6.23, and 7.x prior to 7.0.8, with the vulnerabilit...

9.8CVSS9.8AI score0.08361EPSS
SaveExploits0References13Affected Software1
Tenable Nessus
Tenable Nessus
added 2016/08/03 12:0 a.m.78 views

Ubuntu 14.04 LTS / 16.04 LTS : PHP vulnerabilities (USN-3045-1)

The remote Ubuntu 14.04 LTS / 16.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-3045-1 advisory. It was discovered that PHP incorrectly handled certain SplMinHeap::compare operations. A remote attacker could use this issue to cause PHP to...

9.8CVSS8AI score0.50427EPSS
SaveExploits26References26
Ubuntu
Ubuntu
added 2016/08/02 3:44 p.m.131 views

USN-3045-1: PHP vulnerabilities

It was discovered that PHP incorrectly handled certain SplMinHeap::compare operations. A remote attacker could use this issue to cause PHP to crash, resulting in a denial of service, or possibly execute arbitrary code. This issue only affected Ubuntu 12.04 LTS and Ubuntu 14.04 LTS. CVE-2015-4116 ...

9.8CVSS8AI score0.50427EPSS
SaveExploits26
Amazon
Amazon
added 2016/08/01 12:0 a.m.76 views

Medium: php55, php56

Issue Overview: A stack consumption vulnerability in GD in PHP allows remote attackers to cause a denial of service via a crafted imagefilltoborder call. CVE-2015-8874 An integer overflow, leading to a heap-based buffer overflow was found in the imagecreatefromgd2 function of PHP's gd extension. ...

9.8CVSS9.2AI score0.50427EPSS
SaveExploits11
Debian
Debian
added 2016/07/14 7:50 p.m.74 views

[SECURITY] [DSA 3618-1] php5 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3618-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff July 14, 2016 https://www.debian.org/security/faq -...

9.8CVSS9.2AI score0.15484EPSS
SaveExploits9
OpenVAS
OpenVAS
added 2016/07/08 12:0 a.m.59 views

openSUSE: Security Advisory for php5 (openSUSE-SU-2016:1761-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS7.2AI score0.15484EPSS
SaveExploits10References1
Mageia
Mageia
added 2016/07/05 3:47 p.m.67 views

Updated php packages fix security vulnerability

php-mbstring phpmbregexeregreplaceexec - double free CVE-2016-5768. php-mcrypt heap Overflow due to integer overflows CVE-2016-5769. php-SPL int/sizet confusion in SplFileObject::fread CVE-2016-5770. php-SPL Use After Free Vulnerability in PHP's GC algorithm and unserialize CVE-2016-5771. php-WDD...

9.8CVSS1.7AI score0.15484EPSS
SaveExploits9References2
RedhatCVE
RedhatCVE
added 2016/06/29 7:48 a.m.37 views

CVE-2016-5769

Multiple integer overflows in mcrypt.c in the mcrypt extension in PHP before 5.5.37, 5.6.x before 5.6.23, and 7.x before 7.0.8 allow remote attackers to cause a denial of service heap-based buffer overflow and application crash or possibly have unspecified other impact via a crafted length value,...

9.8CVSS6.8AI score0.08361EPSS
SaveExploits0References1
CVE
CVE
added 2015/08/16 11:0 p.m.60 views

CVE-2015-5769

CVE-2015-5769 affects Apple iOS (MSVDX Driver) prior to 8.4.1. A denial-of-service via a crafted video could crash the device; fix implemented in iOS 8.4.1 (improved memory handling for MSVDX Driver).

7.1CVSS5.9AI score0.02261EPSS
SaveExploits0References4Affected Software1
Cvelist
Cvelist
added 2015/08/16 11:0 p.m.19 views

CVE-2015-5769

The MSVDX driver in Apple iOS before 8.4.1 allows remote attackers to cause a denial of service device crash via a crafted video...

5.8AI score0.02261EPSS
SaveExploits0References4
CVE
CVE
added 2014/09/09 10:0 a.m.32 views

CVE-2014-5769

CVE-2014-5769 affects the Mobiscope Local (aka ehs.mobiscope.kernel) Android app version 1.05. The underlying issue is that the app does not verify X.509 certificates when connecting to SSL servers, enabling potential man-in-the-middle attackers to spoof servers and access sensitive information v...

5.4CVSS6AI score0.00271EPSS
SaveExploits0References3Affected Software1
CVE
CVE
added 2013/10/16 3:0 p.m.61 views

CVE-2013-5769

CVE-2013-5769 affects Oracle Siebel CRM 8.1.1, specifically the Siebel Core - EAI component (Web Services). The vulnerability allows remote authenticated users to impact availability via HTTP-based attacks on the Web Services subcomponent, summarized as an authenticated network DoS (partial). The...

4CVSS5.6AI score0.01007EPSS
SaveExploits0References1Affected Software1
Tenable Nessus
Tenable Nessus
added 2011/02/09 12:0 a.m.11 views

Generic Protocol Detection

Binary data 5769.prm...

7.3AI score
SaveExploits0
OpenVAS
OpenVAS
added 2009/06/05 12:0 a.m.16 views

Fedora Core 11 FEDORA-2009-5769 (ocsinventory)

The remote host is missing an update to ocsinventory announced via advisory FEDORA-2009-5769. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C ...

5CVSS6.4AI score0.01558EPSS
SaveExploits0References2
CVE
CVE
added 2008/12/30 8:0 p.m.73 views

CVE-2008-5769

CVE-2008-5769 concerns Kerio MailServer prior to 6.6.2, with multiple cross-site scripting (XSS) vulnerabilities. The flaws allow remote attackers to inject arbitrary web script or HTML via the folder parameter to mailCompose.php or the daytime parameter to calendarEdit.php. The NVD/OpenVAS recor...

4.3CVSS5.7AI score0.01223EPSS
SaveExploits0References6Affected Software1
CVE
CVE
added 2007/12/06 3:0 p.m.51 views

CVE-2007-5769

CVE-2007-5769 describes a double‑free vulnerability in the getreply function of netkit‑ftp’s ftp.c (netkit‑ftp 0.17 20040614 and later). This can allow a remote FTP server to trigger a denial of service (application crash) and possibly other impact via FTP protocol behavior. The issue is tied to ...

10CVSS6.9AI score0.01694EPSS
SaveExploits1References4Affected Software1
CVE
CVE
added 2006/11/06 11:0 p.m.41 views

CVE-2006-5769

CVE-2006-5769 has XSS vulnerabilities in admin.tool CMS 3 and earlier. The affected component is the admin.tool CMS frontend/backend where the (1) fSid and (2) fSrcBegriffe parameters can be injected to execute arbitrary web script or HTML in unspecified vectors. The NVD entry lists a MEDIUM base...

4.3CVSS6AI score0.01095EPSS
SaveExploits0References4Affected Software1
Rows per page
Query Builder