6722 matches found
CVE-2009-0184
creationtimestamp| type| source ---|---|--- 2009-11-11 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/10009 2010-09-25 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/16634 2018-05-29 15:50:33+00:00| seen|...
SuSE9 Security Update : IBM Java5 JRE and SDK (YOU Patch Number 12336)
This update brings IBM Java 5 to Service Release 9. It fixes the following security problems : - A security vulnerability in the Java Runtime Environment JRE may allow an untrusted applet or application to list the contents of the home directory of the user running the applet or application...
CVE-2009-1386
creationtimestamp| type| source ---|---|--- 2009-06-04 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/8873 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/dos/ssl/dtlschangecipherspec.rb 2025-02-06 03:13:39+00:00| seen|...
CVE-2009-1440
Incomplete blacklist vulnerability in DownloadListCtrl.cpp in amule 2.2.4 allows remote attackers to conduct argument injection attacks into a command for mplayer via a crafted filename...
CVE-2008-4685
Use-after-free vulnerability in the dissectq931causeie function in packet-q931.c in the Q.931 dissector in Wireshark 0.10.3 through 1.0.3 allows remote attackers to cause a denial of service application crash or abort via certain packets that trigger an exception...
CVE-2008-2939
Cross-site scripting XSS vulnerability in proxyftp.c in the modproxyftp module in Apache 2.0.63 and earlier, and modproxyftp.c in the modproxyftp module in Apache 2.2.9 and earlier 2.2 versions, allows remote attackers to inject arbitrary web script or HTML via a wildcard in the last directory...
CVE-2008-2951
Open redirect vulnerability in the search script in Trac before 0.10.5 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the q parameter, possibly related to the quickjump function...
CVE-2008-2635
CVE-2008-2635 describes multiple directory traversal vulnerabilities in BitKinex 2.9.3 that allow remote FTP and WebDAV servers to create or overwrite arbitrary files via a .. sequence in responses to LIST (FTP) and PROPFIND (WebDAV). The note indicates this can be leveraged for code execution by...
CVE-2008-2227
The CVE-2008-2227 entry documents a vulnerability in the PHP-Fusion Forum Rank System 6 where remote attackers can exploit directory traversal to include and execute arbitrary local files. Affects the component path by placing a .. (dot dot) in the settings[locale] parameter for two scripts (foru...
CVE-2008-2146
wp-includes/vars.php in Wordpress before 2.2.3 does not properly extract the current path from the PATHINFO $PHPSELF, which allows remote attackers to bypass intended access restrictions for certain pages...
CVE-2008-1720
Buffer overflow in rsync 2.6.9 to 3.0.1, with extended attribute xattr support enabled, might allow remote attackers to execute arbitrary code via unknown vectors...
CVE-2007-6428
The ProcGetReservedColormapEntries function in the TOG-CUP extension in X.Org Xserver before 1.4.1 allows context-dependent attackers to read the contents of arbitrary memory locations via a request containing a 32-bit value that is improperly used as an array index...
CVE-2007-5958
X.Org Xserver before 1.4.1 allows local users to determine the existence of arbitrary files via a filename argument in the -sp option to the X program, which produces different error messages depending on whether the filename exists...
CVE-2007-6356
exiftags before 1.01 allows attackers to cause a denial of service infinite loop via recursive IFD references in the EXIF data in a JPEG image...
CVE-2007-4048
Cross-site scripting XSS vulnerability in index.php in phpSysInfo 2.5.4-dev and earlier allows remote attackers to inject arbitrary web script or HTML via the PATHINFO...
CVE-2007-3508
Integer overflow in the processenvvars function in elf/rtld.c in glibc before 2.5-rc4 might allow local users to execute arbitrary code via a large LDHWCAPMASK environment variable value. NOTE: the glibc maintainers state that they do not believe that this issue is exploitable for code execution...
CVE-2007-2650
The OLE2 parser in Clam AntiVirus ClamAV allows remote attackers to cause a denial of service resource consumption via an OLE2 file with 1 a large property size or 2 a loop in the FAT file block chain that triggers an infinite loop, as demonstrated via a crafted DOC file...