Lucene search
K

5094 matches found

NVD
NVD
added 2008/06/02 9:30 p.m.18 views

CVE-2008-1572

Image Capture in Apple Mac OS X before 10.5 does not properly use temporary files, which allows local users to overwrite arbitrary files, and display images that are being resized by this application...

4.6CVSS5.9AI score0.00369EPSS
Exploits1References8
NVD
NVD
added 2008/06/02 9:30 p.m.21 views

CVE-2008-1571

Directory traversal vulnerability in the embedded web server in Image Capture in Apple Mac OS X before 10.5 allows remote attackers to read arbitrary files via directory traversal sequences in the URI...

5CVSS6.2AI score0.03536EPSS
Exploits1References8
Prion
Prion
added 2008/06/02 9:30 p.m.16 views

Directory traversal

Directory traversal vulnerability in the embedded web server in Image Capture in Apple Mac OS X before 10.5 allows remote attackers to read arbitrary files via directory traversal sequences in the URI...

5CVSS6.6AI score0.03536EPSS
Exploits1References8Affected Software2
Cvelist
Cvelist
added 2008/06/02 2:0 p.m.24 views

CVE-2008-1572

Image Capture in Apple Mac OS X before 10.5 does not properly use temporary files, which allows local users to overwrite arbitrary files, and display images that are being resized by this application...

5.9AI score0.00369EPSS
Exploits1References8
CVE
CVE
added 2008/06/02 2:0 p.m.54 views

CVE-2008-1572

CVE-2008-1572 concerns the Image Capture component in Apple Mac OS X prior to 10.5. The issue arises from improper handling of temporary files, allowing a local user to overwrite arbitrary files and to view images being resized by Image Capture. The vulnerability is documented in Apple’s Security...

4.6CVSS5.9AI score0.00369EPSS
Exploits1References8Affected Software2
Cvelist
Cvelist
added 2008/06/02 2:0 p.m.21 views

CVE-2008-1571

Directory traversal vulnerability in the embedded web server in Image Capture in Apple Mac OS X before 10.5 allows remote attackers to read arbitrary files via directory traversal sequences in the URI...

6.2AI score0.03536EPSS
Exploits1References8
CVE
CVE
added 2008/06/02 2:0 p.m.43 views

CVE-2008-1571

CVE-2008-1571 describes a directory traversal in Image Capture’s embedded web server on Mac OS X, enabling remote reading of local files via crafted URIs. Affected: Mac OS X v10.4.11 and Mac OS X Server v10.4.11; Mac OS X v10.5.x and later are not affected. Remediation: apply Security Update 2008...

5CVSS6.2AI score0.03536EPSS
Exploits1References8Affected Software2
securityvulns
securityvulns
added 2008/05/30 12:0 a.m.48 views

Apple Mac OS X multiple security vulnerabilities

AFP server directory traversal, Apache updates, AppKit memory corruption, Apple Pixlet Video multiple memory corruptions, Apple Type Services PDF printing fonts memory corruption, SSL information leak, multiple vulnerabilities in Graphics and Image engines on different filetypes and multimedia...

10CVSS2.8AI score0.15542EPSS
Exploits10References1Affected Software1
seebug.org
seebug.org
added 2008/05/29 12:0 a.m.54 views

Apple Mac OS X 2008-003更新修复多个安全漏洞

BUGTRAQ ID: 29412 CVECAN ID: CVE-2008-1027,CVE-2008-1028,CVE-2008-1577,CVE-2008-1575,CVE-2008-1580,CVE-2008-1030,CVE-2008-1031,CVE-2008-1032,CVE-2008-1033,CVE-2008-1034,CVE-2008-1035,CVE-2008-1036,CVE-2008-1571,CVE-2008-1572,CVE-2008-1573,CVE-2008-1574,CVE-2008-1576,CVE-2008-1578,CVE-2008-1579 Ma...

10CVSS0.4AI score0.10124EPSS
Exploits3
NVD
NVD
added 2008/04/16 10:5 a.m.16 views

CVE-2008-1815

Unspecified vulnerability in the Change Data Capture component in Oracle Database 10.1.0.5, 10.2.0.3, and 11.1.0.6 has unknown impact and remote authenticated attack vectors related to DBMSCDCUTILITY, aka DB02. NOTE: the previous information was obtained from the April 2008 CPU. Oracle has not...

5.5CVSS6.4AI score0.01264EPSS
Exploits0References10
Prion
Prion
added 2008/04/16 10:5 a.m.17 views

Sql injection

Unspecified vulnerability in the Change Data Capture component in Oracle Database 10.1.0.5, 10.2.0.3, and 11.1.0.6 has unknown impact and remote authenticated attack vectors related to DBMSCDCUTILITY, aka DB02. NOTE: the previous information was obtained from the April 2008 CPU. Oracle has not...

5.5CVSS6.9AI score0.01264EPSS
Exploits0References10Affected Software2
Cvelist
Cvelist
added 2008/04/16 10:0 a.m.24 views

CVE-2008-1815

Unspecified vulnerability in the Change Data Capture component in Oracle Database 10.1.0.5, 10.2.0.3, and 11.1.0.6 has unknown impact and remote authenticated attack vectors related to DBMSCDCUTILITY, aka DB02. NOTE: the previous information was obtained from the April 2008 CPU. Oracle has not...

6.4AI score0.01264EPSS
Exploits0References10
CVE
CVE
added 2008/04/16 10:0 a.m.94 views

CVE-2008-1815

CVE-2008-1815: Affects Oracle Database 10.1.0.5, 10.2.0.3, and 11.1.0.6 in the Change Data Capture (CDC) component. The vulnerability involves DBMS_CDC_UTILITY (DB02) with remote authenticated access; the impact is unspecified in the sources, and the exact root cause is not clearly defined. Oracl...

5.5CVSS6.4AI score0.01264EPSS
Exploits0References10Affected Software2
Fedora
Fedora
added 2008/04/09 5:24 a.m.30 views

[SECURITY] Fedora 8 Update: wireshark-1.0.0-1.fc8

Wireshark is a network traffic analyzer for Unix-ish operating systems. This package lays base for libpcap, a packet capture and filtering library, contains command-line utilities, contains plugins and documentation for wireshark. A graphical user interface is packaged separately to GTK+ package...

5CVSS1.7AI score0.50693EPSS
Exploits3
CVE
CVE
added 2008/03/18 11:0 p.m.52 views

CVE-2008-0993

CVE-2008-0993 affects Podcast Capture in Podcast Producer for Apple Mac OS X 10.5.2. The vulnerability occurs when a subtask is invoked with passwords in command line arguments, enabling local users to read those passwords from process listings. The description provided does not include specific ...

2.1CVSS8AI score0.00338EPSS
Exploits1References8Affected Software1
ALT Linux
ALT Linux
added 2008/03/10 12:0 a.m.19 views

Security fix for the ALT Linux 9 package wireshark version 0.99.8-alt1

March 10, 2008 Sir Raorn 0.99.8-alt1 - 0.99.8 + CVE-2008-1072 + CVE-2008-1071 + CVE-2008-1070 - User Guide updated - New tool rawshark1 - Traffic capture now control8led by wireshark-capture facility...

5CVSS7.1AI score0.02003EPSS
Exploits0
Metasploit
Metasploit
added 2008/03/02 4:46 a.m.10 views

Authentication Capture: POP3

This module provides a fake POP3 service that is designed to capture authentication credentials. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Authentication Capture: POP3', 'Description' = %...

7.1AI score
Exploits0
Metasploit
Metasploit
added 2008/03/02 4:46 a.m.38 views

Authentication Capture: IMAP

This module provides a fake IMAP service that is designed to capture authentication credentials. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Authentication Capture: IMAP', 'Description' = %...

0.2AI score
Exploits0
Metasploit
Metasploit
added 2008/03/02 4:46 a.m.12 views

Authentication Capture: FTP

This module provides a fake FTP service that is designed to capture authentication credentials. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Authentication Capture: FTP', 'Description' = %q...

7.1AI score
Exploits0
UbuntuCve
UbuntuCve
added 2008/01/29 12:0 a.m.32 views

CVE-2007-4770

libicu in International Components for Unicode ICU 3.8.1 and earlier attempts to process backreferences to the nonexistent capture group zero aka \0, which might allow context-dependent attackers to read from, or write to, out-of-bounds memory locations, related to corruption of REStackFrames...

6.8CVSS7.2AI score0.02819EPSS
Exploits0References2
Rows per page
Query Builder