6722 matches found
CVE-2016-3115
Multiple CRLF injection vulnerabilities in session.c in sshd in OpenSSH before 7.2p2 allow remote authenticated users to bypass intended shell-command restrictions via crafted X11 forwarding data, related to the 1 doauthenticated1 and 2 sessionx11req functions...
CVE-2016-0006
creationtimestamp| type| source ---|---|--- 2016-01-25 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/39311 2026-07-29 12:01:10+00:00| seen| Telegram/-09yViB9XDNhXfNiM3JYeUTRircCt8N67Gw9UNQdqPCA 2026-07-30 00:01:48+00:00| seen| Telegram/-09yViB9XDNhXfNiM3JYeUTRircCt8N67Gw9UNQdqPCA...
CVE-2015-8635
creationtimestamp| type| source ---|---|--- 2016-01-11 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/39220...
CVE-2016-1498
Cross-site scripting XSS vulnerability in the OCS discovery provider component in ownCloud Server before 7.0.12, 8.0.x before 8.0.10, 8.1.x before 8.1.5, and 8.2.x before 8.2.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors involving a URL...
CVE-2015-7435
CVE-2015-7435 affects IBM Tivoli Common Reporting (TCR) used with Cognos BI; a leading-space in the BackURL field can bypass the Cognos Application Firewall (CAF). Affected versions include TCR 2.1 (before IF14) and 2.1.1 (before IF22), 2.1.1.2 (before IF9), and 3.1.0.0–3.1.2 (as used in Cognos B...
CVE-2015-8420
creationtimestamp| type| source ---|---|--- 2015-12-18 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/39044...
CVE-2015-8729
creationtimestamp| type| source ---|---|--- 2015-12-16 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/39001...
CVE-2015-7110
The CVE-2015-7110 entry concerns Apple OS X Disk Images handling prior to 10.11.2 and tvOS prior to 9.1. A crafted disk image can trigger memory corruption in the Disk Images component, allowing local users to gain privileges or cause a denial of service. Affected software/versions are explicitly...
CVE-2015-8365
The smkadecodeframe function in libavcodec/smacker.c in FFmpeg before 2.6.5, 2.7.x before 2.7.3, and 2.8.x through 2.8.2 does not verify that the data size is consistent with the number of channels, which allows remote attackers to cause a denial of service out-of-bounds array access or possibly...
CVE-2015-6589
creationtimestamp| type| source ---|---|--- 2015-09-29 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/38351...
CVE-2015-5840
CVE-2015-5840 affects Apple iOS (pre-9) with the removefile( ) checkint division routines. The root cause is an overflow fault in the division routines used by removefile’s data processing, allowing a crafted input to trigger a denial-of-service (app crash). Connected docs corroborate the same is...
CVE-2015-3332
A certain backport in the TCP Fast Open implementation for the Linux kernel before 3.18 does not properly maintain a count value, which allow local users to cause a denial of service system crash via the Fast Open feature, as demonstrated by visiting the chrome://flags/enable-tcp-fast-open URL wh...
CVE-2015-3415
The sqlite3VdbeExec function in vdbe.c in SQLite before 3.8.9 does not properly implement comparison operators, which allows context-dependent attackers to cause a denial of service invalid free operation or possibly have unspecified other impact via a crafted CHECK clause, as demonstrated by...
CVE-2015-1421
Use-after-free vulnerability in the sctpassocupdate function in net/sctp/associola.c in the Linux kernel before 3.18.8 allows remote attackers to cause a denial of service slab corruption and panic or possibly have unspecified other impact by triggering an INIT collision that leads to improper...
CVE-2014-3571
OpenSSL before 0.9.8zd, 1.0.0 before 1.0.0p, and 1.0.1 before 1.0.1k allows remote attackers to cause a denial of service NULL pointer dereference and application crash via a crafted DTLS message that is processed with a different read operation for the handshake header than for the handshake bod...
CVE-2004-2771
The expand function in fio.c in Heirloom mailx 12.5 and earlier and BSD mailx 8.1.2 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in an email address...
OHOCMS exposed 0day vulnerabilities-government system faced a serious threat-vulnerability warning-the black bar safety net
Recently, the Ann constant information security researcher found that the current in the domestic government, education, public security, healthcare and other sectors using a very high rate of government system“OHOCMS”multiple vulnerabilities, including arbitrary file upload, arbitrary file...
CVE-2014-9317
The decodeihdrchunk function in libavcodec/pngdec.c in FFMpeg before 2.1.6, 2.2.x through 2.3.x, and 2.4.x before 2.4.4 allows remote attackers to cause a denial of service out-of-bounds heap access and possibly have other unspecified impact via an IDAT before an IHDR in a PNG file...