6722 matches found
CVE-2012-1182
creationtimestamp| type| source ---|---|--- 2012-10-10 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/21850 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/samba/setinfopolicyheap.rb 2025-02-06 03:13:40+00:00| seen...
CVE-2012-3716
CVE-2012-3716 : In Apple Mac OS X, the vulnerability affects OS X 10.7.x before 10.7.5 where CoreText mishandles text glyphs due to a bounds checking issue, enabling remote arbitrary code execution or a denial of service via out-of-bounds reads/writes. The published Apple advisory (APPLE-SA-2012-...
CVE-2012-3410
Stack-based buffer overflow in lib/sh/eaccess.c in GNU Bash before 4.2 patch 33 might allow local users to bypass intended restricted shell access via a long filename in /dev/fd, which is not properly handled when expanding the /dev/fd prefix...
CVE-2012-3417
The goodclient function in rquotad rquotasvc.c in Linux DiskQuota aka quota before 3.17 invokes the hostsctl function the first time without a host name, which might allow remote attackers to bypass TCP Wrappers rules in hosts.deny...
CVE-2012-0876
The XML parser xmlparse.c in expat before 2.1.0 computes hash values without restricting the ability to trigger hash collisions predictably, which allows context-dependent attackers to cause a denial of service CPU consumption via an XML file with many identifiers with the same value...
CVE-2012-2098
Algorithmic complexity vulnerability in the sorting algorithms in bzip2 compressing stream BZip2CompressorOutputStream in Apache Commons Compress before 1.4.1 allows remote attackers to cause a denial of service CPU consumption via a file with many repeating inputs...
CVE-2011-4459
Best Practical Solutions RT 3.x before 3.8.12 and 4.x before 4.0.6 does not properly disable groups, which allows remote authenticated users to bypass intended access restrictions in opportunistic circumstances by leveraging a group membership...
CVE-2012-2402
wp-admin/plugins.php in WordPress before 3.3.2 allows remote authenticated site administrators to bypass intended access restrictions and deactivate network-wide plugins via unspecified vectors...
CVE-2012-5223
creationtimestamp| type| source ---|---|--- 2012-01-27 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/18424 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/vbseoprocdeutf.rb 2025-02-06 03:13:40+00:00| seen|...
CVE-2011-3360
creationtimestamp| type| source ---|---|--- 2011-11-19 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/18125 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/misc/wiresharklua.rb 2025-02-06 03:13:40+00:00| seen|...
CVE-2011-3230
creationtimestamp| type| source ---|---|--- 2011-10-17 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/17986 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/osx/browser/safarifilepolicy.rb 2025-02-06 03:13:40+00:00| seen|...
CVE-2011-2925
CVE-2011-2925 affects Red Hat Enterprise MRG Grid 2.0 (and related Messaging/Realtime components). The root cause is that Cumin logs broker authentication credentials to its log file, allowing a local user to bypass authentication and perform actions on jobs and queues via a direct broker connect...
CVE-2011-2744
Directory traversal vulnerability in Chyrp 2.1 and earlier allows remote attackers to include and execute arbitrary local files via a ..%2F encoded dot dot slash in the action parameter to the default URI...
CVE-2011-2506
setup/lib/ConfigGenerator.class.php in phpMyAdmin 3.x before 3.3.10.2 and 3.4.x before 3.4.3.1 does not properly restrict the presence of comment closing delimiters, which allows remote attackers to conduct static code injection attacks by leveraging the ability to modify the SESSION superglobal...
CVE-2011-2175
Integer underflow in the visualread function in wiretap/visual.c in Wireshark 1.2.x before 1.2.17 and 1.4.x before 1.4.7 allows remote attackers to cause a denial of service application crash via a malformed Visual Networks file that triggers a heap-based buffer over-read...
CVE-2011-1945
The elliptic curve cryptography ECC subsystem in OpenSSL 1.0.0d and earlier, when the Elliptic Curve Digital Signature Algorithm ECDSA is used for the ECDHEECDSA cipher suite, does not properly implement curves over binary fields, which makes it easier for context-dependent attackers to determine...
CVE-2011-1589
Directory traversal vulnerability in Path.pm in Mojolicious before 1.16 allows remote attackers to read arbitrary files via a %2f..%2f encoded slash dot dot slash in a URI...
CVE-2011-1591
creationtimestamp| type| source ---|---|--- 2011-04-18 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/17185 2011-04-19 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/17195 2011-04-19 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/17186 2018-05-29...
CVE-2011-1091
libymsg.c in the Yahoo! protocol plugin in libpurple in Pidgin 2.6.0 through 2.7.10 allows 1 remote authenticated users to cause a denial of service NULL pointer dereference and application crash via a malformed YMSG notification packet, and allows 2 remote Yahoo! servers to cause a denial of...