Lucene search
+L

266 matches found

Debian CVE
Debian CVE
added 2015/02/20 11:00 a.m.48 views

CVE-2015-0881

CRLF injection vulnerability in Squid before 3.1.1 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via a crafted header in a response...

4.3CVSS6.8AI score0.04507EPSS
SaveExploits0
OpenVAS
OpenVAS
added 2015/01/22 12:00 a.m.40 views

RabbitMQ Server < 3.4.0 Security Bypass Vulnerability - Active Check

RabbitMQ Server is prone to a security bypass vulnerability. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:vmware:rabbitmq";...

5CVSS6.5AI score0.01393EPSS
SaveExploits0References1
UbuntuCve
UbuntuCve
added 2015/01/20 3:59 p.m.26 views

CVE-2014-9494

RabbitMQ before 3.4.0 allows remote attackers to bypass the loopbackusers restriction via a crafted X-Forwareded-For header...

5CVSS5.9AI score0.01393EPSS
SaveExploits0References2
Debian CVE
Debian CVE
added 2015/01/20 3:00 p.m.29 views

CVE-2014-9494

RabbitMQ before 3.4.0 allows remote attackers to bypass the loopbackusers restriction via a crafted X-Forwareded-For header...

5CVSS6.3AI score0.01393EPSS
SaveExploits0
OSV
OSV
added 2014/12/09 12:00 a.m.6 views

UBUNTU-CVE-2014-8501

The bfdXXiswapaouthdrin function in bfd/peXXigen.c in GNU binutils 2.24 and earlier allows remote attackers to cause a denial of service out-of-bounds write and possibly have other unspecified impact via a crafted NumberOfRvaAndSizes field in the AOUT header in a PE executable...

7.5CVSS7AI score0.0516EPSS
SaveExploits1References5
OSV
OSV
added 2014/09/08 2:55 p.m.8 views

AZL-7331 CVE-2014-3618 affecting package procmail for versions less than 3.22-53

Heap-based buffer overflow in formisc.c in formail in procmail 3.22 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted email header, related to "unbalanced quotes."...

7.5CVSS7.4AI score0.08525EPSS
SaveExploits1References1
OSV
OSV
added 2014/09/08 2:55 p.m.5 views

DEBIAN-CVE-2014-3618

Heap-based buffer overflow in formisc.c in formail in procmail 3.22 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted email header, related to "unbalanced quotes."...

7.5CVSS7.7AI score0.08525EPSS
SaveExploits1References1
OSV
OSV
added 2014/09/04 12:00 a.m.6 views

UBUNTU-CVE-2014-3618

Heap-based buffer overflow in formisc.c in formail in procmail 3.22 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted email header, related to "unbalanced quotes."...

7.5CVSS7.3AI score0.08525EPSS
SaveExploits1References4
ATTACKERKB
ATTACKERKB
added 2014/06/13 2:55 p.m.6 views

CVE-2013-3843

Stack-based buffer overflow in the mkrequestheaderprocess function in mkrequest.c in Monkey HTTP Daemon monkeyd before 1.2.1 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted HTTP header...

6.8CVSS6.4AI score0.20179EPSS
SaveExploits3References8
Tenable Nessus
Tenable Nessus
added 2014/02/27 12:00 a.m.27 views

Cisco 9900 Series IP Phone Crafted Header Unregister Vulnerability

According to its self-reported version, the version of the Cisco Unified IP Phone software running on the remote device does not properly process SIP headers. By sending a specially crafted SIP header to the device, a remote attacker may be able to cause the phone to unregister, resulting in a...

5.4CVSS5.5AI score0.02663EPSS
SaveExploits0References2
Cisco
Cisco
added 2014/01/10 9:18 p.m.24 views

Cisco 9900 Series IP Phone Crafted Header Unregister Vulnerability

A vulnerability in Session Initiation Protocol SIP header processing of Cisco fourth-generation IP phones could allow an unauthenticated, remote attacker to cause the IP phone to unregister. The vulnerability is due to improper SIP header processing. An attacker could exploit this vulnerability b...

5.4CVSS6.1AI score0.02663EPSS
SaveExploits0References1
NVD
NVD
added 2013/12/09 6:55 p.m.18 views

CVE-2013-7027

The ieee80211radiotapiteratorinit function in net/wireless/radiotap.c in the Linux kernel before 3.11.7 does not check whether a frame contains any data outside of the header, which might allow attackers to cause a denial of service buffer over-read via a crafted header...

6.1CVSS5.8AI score0.01485EPSS
SaveExploits1References19
OSV
OSV
added 2013/12/09 6:55 p.m.6 views

CVE-2013-7027

The ieee80211radiotapiteratorinit function in net/wireless/radiotap.c in the Linux kernel before 3.11.7 does not check whether a frame contains any data outside of the header, which might allow attackers to cause a denial of service buffer over-read via a crafted header...

7.1AI score
SaveExploits0References20
Prion
Prion
added 2013/12/09 6:55 p.m.19 views

Design/Logic Flaw

The ieee80211radiotapiteratorinit function in net/wireless/radiotap.c in the Linux kernel before 3.11.7 does not check whether a frame contains any data outside of the header, which might allow attackers to cause a denial of service buffer over-read via a crafted header...

6.1CVSS6.5AI score0.01485EPSS
SaveExploits1References19Affected Software1
UbuntuCve
UbuntuCve
added 2013/12/09 12:00 a.m.30 views

CVE-2013-7027

The ieee80211radiotapiteratorinit function in net/wireless/radiotap.c in the Linux kernel before 3.11.7 does not check whether a frame contains any data outside of the header, which might allow attackers to cause a denial of service buffer over-read via a crafted header...

6.1CVSS6.8AI score0.01485EPSS
SaveExploits1References18
OpenVAS
OpenVAS
added 2013/10/03 12:00 a.m.31 views

Squid Accept-Language Header DoS Vulnerability (SQUID-2013:1)

Squid is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:squid-cache:squid";...

7.8CVSS6.2AI score0.18307EPSS
SaveExploits0References5
OSV
OSV
added 2013/09/16 7:14 p.m.8 views

UBUNTU-CVE-2013-4233

Integer overflow in the abcsetparts function in loadabc.cpp in libmodplug 0.8.8.4 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code via a crafted P header in an ABC file, which triggers a heap-based buffer overflow...

6.8CVSS6.5AI score0.04083EPSS
SaveExploits1References2
Cvelist
Cvelist
added 2013/09/16 7:00 p.m.44 views

CVE-2013-4233

Integer overflow in the abcsetparts function in loadabc.cpp in libmodplug 0.8.8.4 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code via a crafted P header in an ABC file, which triggers a heap-based buffer overflow...

7.7AI score0.04083EPSS
SaveExploits1References5
Tenable Nessus
Tenable Nessus
added 2013/06/27 12:00 a.m.33 views

Symantec Mail Security for Exchange / Domino RAR and CAB Multiple Vulnerabilities

The remote host is running a version of the Symantec Mail Security for Exchange / Domino that is affected by multiple vulnerabilities : - A heap overflow vulnerability exists that can be triggered when the scanning engine processes a specially crafted CAB file, possibly leading to arbitrary code...

9.3CVSS5.9AI score0.05957EPSS
SaveExploits1References5
Prion
Prion
added 2013/05/08 12:09 p.m.25 views

Authentication flaw

GroundWork Monitor Enterprise 6.7.0 performs authentication on the basis of the HTTP Referer header, which allows remote attackers to obtain administrative privileges or access files via a crafted header...

7.5CVSS7.3AI score0.03211EPSS
SaveExploits0References4Affected Software1
Rows per page
Query Builder