Lucene search
K

2589 matches found

UbuntuCve
UbuntuCve
added 2010/04/01 4:30 p.m.31 views

CVE-2010-0842

Unspecified vulnerability in the Sound component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, 1.4.225, and 1.3.127 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the March...

7.5CVSS7.5AI score0.78394EPSS
Exploits9References2
securityvulns
securityvulns
added 2010/03/23 12:0 a.m.35 views

Pango library array index overflow

Array index overflow on font file parsing...

4.3CVSS4.8AI score0.02469EPSS
Exploits0References1Affected Software1
OpenVAS
OpenVAS
added 2010/03/22 12:0 a.m.35 views

CentOS Update for evolution28-pango CESA-2010:0140 centos4 i386

Check for the Version of evolution28-pango OpenVAS Vulnerability Test CentOS Update for evolution28-pango CESA-2010:0140 centos4 i386 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute i...

4.3CVSS6.4AI score0.02469EPSS
Exploits0References2
Prion
Prion
added 2010/03/18 5:30 p.m.17 views

Design/Logic Flaw

Array index error in the hbotlayoutbuildglyphclasses function in pango/opentype/hb-ot-layout.cc in Pango before 1.27.1 allows context-dependent attackers to cause a denial of service application crash via a crafted font file, related to building a synthetic Glyph Definition aka GDEF table by usin...

4.3CVSS6.6AI score0.02469EPSS
Exploits0References15Affected Software1
NVD
NVD
added 2010/03/18 5:30 p.m.14 views

CVE-2010-0421

Array index error in the hbotlayoutbuildglyphclasses function in pango/opentype/hb-ot-layout.cc in Pango before 1.27.1 allows context-dependent attackers to cause a denial of service application crash via a crafted font file, related to building a synthetic Glyph Definition aka GDEF table by usin...

4.3CVSS6.1AI score0.02469EPSS
Exploits0References15
Cvelist
Cvelist
added 2010/03/18 5:12 p.m.29 views

CVE-2010-0421

Array index error in the hbotlayoutbuildglyphclasses function in pango/opentype/hb-ot-layout.cc in Pango before 1.27.1 allows context-dependent attackers to cause a denial of service application crash via a crafted font file, related to building a synthetic Glyph Definition aka GDEF table by usin...

5.9AI score0.02469EPSS
Exploits0References15
Debian CVE
Debian CVE
added 2010/03/18 5:12 p.m.26 views

CVE-2010-0421

Array index error in the hbotlayoutbuildglyphclasses function in pango/opentype/hb-ot-layout.cc in Pango before 1.27.1 allows context-dependent attackers to cause a denial of service application crash via a crafted font file, related to building a synthetic Glyph Definition aka GDEF table by usin...

4.3CVSS5.9AI score0.02469EPSS
Exploits0
UbuntuCve
UbuntuCve
added 2010/03/18 12:0 a.m.24 views

CVE-2010-0421

Array index error in the hbotlayoutbuildglyphclasses function in pango/opentype/hb-ot-layout.cc in Pango before 1.27.1 allows context-dependent attackers to cause a denial of service application crash via a crafted font file, related to building a synthetic Glyph Definition aka GDEF table by usin...

4.3CVSS5.9AI score0.02469EPSS
Exploits0References2
RedHat Linux
RedHat Linux
added 2010/03/17 1:4 p.m.4 views

array index error in dtoa implementation of many products

Array index error in the 1 dtoa implementation in dtoa.c aka pdtoa.c and the 2 gdtoa aka new dtoa implementation in gdtoa/misc.c in libc, as used in multiple operating systems and products including in FreeBSD 6.4 and 7.2, NetBSD 5.0, OpenBSD 4.5, Mozilla Firefox 3.0.x before 3.0.15 and 3.5.x...

6.8CVSS7.2AI score0.28167EPSS
Exploits43References4
RedHat Linux
RedHat Linux
added 2010/03/17 12:38 p.m.2 views

array index error in dtoa implementation of many products

Array index error in the 1 dtoa implementation in dtoa.c aka pdtoa.c and the 2 gdtoa aka new dtoa implementation in gdtoa/misc.c in libc, as used in multiple operating systems and products including in FreeBSD 6.4 and 7.2, NetBSD 5.0, OpenBSD 4.5, Mozilla Firefox 3.0.x before 3.0.15 and 3.5.x...

6.8CVSS7.2AI score0.28167EPSS
Exploits43References4
RedHat Linux
RedHat Linux
added 2010/03/15 11:2 p.m.31 views

Moderate: Red Hat Security Advisory: pango security update

Updated pango and evolution28-pango packages that fix one security issue are now available for Red Hat Enterprise Linux 3, 4, and 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Pango is a library used for the layout and rendering of...

4.3CVSS5.7AI score0.02469EPSS
Exploits0References2
UbuntuCve
UbuntuCve
added 2010/02/26 6:30 p.m.23 views

CVE-2009-4652

The 1 ConnGetCipherInfo and 2 ConnUsesSSL functions in src/ngircd/conn.c in ngIRCd 13 and 14, when SSL/TLS support is present and standalone mode is disabled, allow remote attackers to cause a denial of service application crash by sending the MOTD command from another server in the same IRC...

2.6CVSS5.9AI score0.01602EPSS
Exploits1References1
Prion
Prion
added 2010/02/26 6:30 p.m.14 views

Command injection

The 1 ConnGetCipherInfo and 2 ConnUsesSSL functions in src/ngircd/conn.c in ngIRCd 13 and 14, when SSL/TLS support is present and standalone mode is disabled, allow remote attackers to cause a denial of service application crash by sending the MOTD command from another server in the same IRC...

2.6CVSS7.1AI score0.01602EPSS
Exploits1References8Affected Software1
OSV
OSV
added 2010/02/26 6:30 p.m.3 views

UBUNTU-CVE-2009-4652

The 1 ConnGetCipherInfo and 2 ConnUsesSSL functions in src/ngircd/conn.c in ngIRCd 13 and 14, when SSL/TLS support is present and standalone mode is disabled, allow remote attackers to cause a denial of service application crash by sending the MOTD command from another server in the same IRC...

2.6CVSS5.9AI score0.01602EPSS
Exploits1References2
CVE
CVE
added 2010/02/26 6:9 p.m.52 views

CVE-2009-4652

The CVE concerns ngIRCd (versions 13–14). When SSL/TLS is enabled and standalone mode is disabled, the functions Conn_GetCipherInfo and Conn_UsesSSL in src/ngircd/conn.c can allow remote attackers to trigger a denial of service (application crash) by sending the MOTD command from another server o...

2.6CVSS6.9AI score0.01602EPSS
Exploits1References8Affected Software1
Debian CVE
Debian CVE
added 2010/02/26 6:9 p.m.22 views

CVE-2009-4652

The 1 ConnGetCipherInfo and 2 ConnUsesSSL functions in src/ngircd/conn.c in ngIRCd 13 and 14, when SSL/TLS support is present and standalone mode is disabled, allow remote attackers to cause a denial of service application crash by sending the MOTD command from another server in the same IRC...

2.6CVSS6.4AI score0.01602EPSS
Exploits1
Tenable Nessus
Tenable Nessus
added 2010/02/24 12:0 a.m.44 views

Debian DSA-1988-1 : qt4-x11 - several vulnerabilities

Several vulnerabilities have been discovered in qt4-x11, a cross-platform C++ application framework. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2009-0945 Array index error in the insertItemBefore method in WebKit, as used in qt4-x11, allows remote...

9.3CVSS7.8AI score0.29098EPSS
Exploits9References25
OpenVAS
OpenVAS
added 2010/02/19 12:0 a.m.49 views

Mandriva Update for kernel MDVSA-2010:034-1 (kernel)

Check for the Version of kernel OpenVAS Vulnerability Test Mandriva Update for kernel MDVSA-2010:034-1 kernel Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under...

7.2CVSS0.8AI score0.0042EPSS
Exploits2References2
Tenable Nessus
Tenable Nessus
added 2010/02/18 12:0 a.m.58 views

SuSE9 Security Update : the Linux kernel (YOU Patch Number 12578)

This update fixes various security issues and some bugs in the SUSE Linux Enterprise 9 kernel. - The collectrxframe function in drivers/isdn/hisax/hfcusb.c in the Linux kernel allows attackers to have an unspecified impact via a crafted HDLC packet that arrives over ISDN and triggers a buffer...

7.8CVSS7AI score0.05227EPSS
Exploits8References18
OpenVAS
OpenVAS
added 2010/02/17 12:0 a.m.30 views

FFmpeg Multiple Vulnerabilities - Linux

FFmpeg is prone to multiple vulnerabilities SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

10CVSS9.8AI score0.17038EPSS
Exploits11References2
Rows per page
Query Builder