Lucene search
+L

304 matches found

Prion
Prion
•added 2010/07/06 5:17 p.m.•30 views

Authentication flaw

The Cisco Content Services Switch CSS 11500 with software 08.20.1.01 conveys authentication data through ClientCert- headers but does not delete client-supplied ClientCert- headers, which might allow remote attackers to bypass authentication via crafted header data, as demonstrated by a...

7.5CVSS7.4AI score0.01686EPSS
SaveExploits2References5Affected Software1
Prion
Prion
•added 2010/06/25 6:30 p.m.•22 views

Buffer overflow

Buffer overflow in Arcext.dll 2.16.1 and earlier in pon software Explzh 5.62 and earlier allows remote attackers to execute arbitrary code via an LZH LHA file with a crafted header that is not properly handled during expansion...

9.3CVSS8.5AI score0.05359EPSS
SaveExploits0References7Affected Software1
Cvelist
Cvelist
•added 2010/06/25 6:00 p.m.•31 views

CVE-2010-2434

Buffer overflow in Arcext.dll 2.16.1 and earlier in pon software Explzh 5.62 and earlier allows remote attackers to execute arbitrary code via an LZH LHA file with a crafted header that is not properly handled during expansion...

7.9AI score0.05359EPSS
SaveExploits0References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2010/06/25 12:00 a.m.•7 views

CVE-2010-2434: Buffer Copy without Checking Size of Input

Buffer overflow in Arcext.dll 2.16.1 and earlier in pon software Explzh 5.62 and earlier allows remote attackers to execute arbitrary code via an LZH LHA file with a crafted header that is not properly handled during expansion...

9.3CVSS6.5AI score0.05359EPSS
SaveExploits0References2
OSV
OSV
•added 2010/05/07 6:24 p.m.•8 views

DEBIAN-CVE-2010-1167

fetchmail 4.6.3 through 6.3.16, when debug mode is enabled, does not properly handle invalid characters in a multi-character locale, which allows remote attackers to cause a denial of service memory consumption and application crash via a crafted 1 message header or 2 POP3 UIDL list...

4.3CVSS8.1AI score0.02199EPSS
SaveExploits0References1
Prion
Prion
•added 2010/03/16 7:30 p.m.•12 views

Buffer overflow

Buffer overflow in BarnOwl before 1.5.1 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted CC: header...

7.5CVSS8.4AI score0.03809EPSS
SaveExploits0References4Affected Software1
UbuntuCve
UbuntuCve
•added 2010/03/16 7:30 p.m.•18 views

CVE-2010-0793

Buffer overflow in BarnOwl before 1.5.1 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted CC: header...

7.5CVSS6.2AI score0.03809EPSS
SaveExploits0References1
Debian CVE
Debian CVE
•added 2010/03/16 7:00 p.m.•49 views

CVE-2010-0793

Buffer overflow in BarnOwl before 1.5.1 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted CC: header...

7.5CVSS7.7AI score0.03809EPSS
SaveExploits0
OSV
OSV
•added 2010/02/12 9:30 p.m.•9 views

DEBIAN-CVE-2009-4274

Stack-based buffer overflow in converter/ppm/xpmtoppm.c in netpbm before 10.47.07 allows context-dependent attackers to cause a denial of service application crash or possibly execute arbitrary code via an XPM image file that contains a crafted header field associated with a large color index val...

7.5CVSS8.2AI score0.04188EPSS
SaveExploits0References1
UbuntuCve
UbuntuCve
•added 2010/02/12 12:00 a.m.•32 views

CVE-2009-4274

Stack-based buffer overflow in converter/ppm/xpmtoppm.c in netpbm before 10.47.07 allows context-dependent attackers to cause a denial of service application crash or possibly execute arbitrary code via an XPM image file that contains a crafted header field associated with a large color index val...

7.5CVSS6.4AI score0.04188EPSS
SaveExploits0References2
UbuntuCve
UbuntuCve
•added 2009/09/10 9:30 p.m.•36 views

CVE-2008-7160

The silchttpserverparse function in lib/silchttp/silchttpserver.c in the internal HTTP server in silcd in Secure Internet Live Conferencing SILC Toolkit before 1.1.9 allows remote attackers to overwrite a stack location and possibly execute arbitrary code via a crafted Content-Length header,...

5.8CVSS6.2AI score0.04026EPSS
SaveExploits0References1
seebug.org
seebug.org
•added 2008/07/16 12:00 a.m.•24 views

WinRAR 1.0 Local Buffer Overflow Exploit

No description provided by source. / WinRar local buffer overflow exploit V1.0 Coded By ATmaCA Copyright ? 2004 ProGroup Software, Inc. E-Mail:[email protected] Web:www.prohack.net Usage:\r\nexploit Target OutputPath Targets: 1 - WinXP SP1 user32.dll 0x77D718FC 2 - WinXP SP2 user32.dll...

7.1AI score
SaveExploits0
NVD
NVD
•added 2008/06/02 9:30 p.m.•21 views

CVE-2008-2426

Multiple stack-based buffer overflows in Imlib 2 aka imlib2 1.4.0 allow user-assisted remote attackers to cause a denial of service crash or possibly execute arbitrary code via 1 a PNM image with a crafted header, related to the load function in src/modules/loaders/loaderpnm.c; or 2 a crafted XPM...

9.3CVSS7.8AI score0.05748EPSS
SaveExploits1References19
OSV
OSV
•added 2008/03/20 12:44 a.m.•11 views

DEBIAN-CVE-2008-1332

Unspecified vulnerability in Asterisk Open Source 1.2.x before 1.2.27, 1.4.x before 1.4.18.1 and 1.4.19-rc3; Business Edition A.x.x, B.x.x before B.2.5.1, and C.x.x before C.1.6.2; AsteriskNOW 1.0.x before 1.0.2; Appliance Developer Kit before 1.4 revision 109393; and s800i 1.0.x before 1.1.0.2;...

8.8CVSS6.4AI score0.02327EPSS
SaveExploits1References1
NVD
NVD
•added 2007/08/14 9:17 p.m.•26 views

CVE-2007-3037

Microsoft Windows Media Player 7.1, 9, 10, and 11 allows remote attackers to execute arbitrary code via a skin file WMZ or WMD with crafted header information that causes a size mismatch between compressed and decompressed data and triggers a heap-based buffer overflow, aka "Windows Media Player...

4CVSS7.7AI score0.21825EPSS
SaveExploits1References10
NVD
NVD
•added 2007/07/21 12:30 a.m.•35 views

CVE-2007-3929

Use-after-free vulnerability in the BitTorrent support in Opera before 9.22 allows user-assisted remote attackers to execute arbitrary code via a crafted header in a torrent file, which leaves a dangling pointer to an invalid object...

9.3CVSS7.3AI score0.06466EPSS
SaveExploits0References10
Prion
Prion
•added 2007/07/21 12:30 a.m.•27 views

Design/Logic Flaw

Use-after-free vulnerability in the BitTorrent support in Opera before 9.22 allows user-assisted remote attackers to execute arbitrary code via a crafted header in a torrent file, which leaves a dangling pointer to an invalid object...

9.3CVSS7.6AI score0.06466EPSS
SaveExploits0References10Affected Software1
UbuntuCve
UbuntuCve
•added 2007/07/21 12:30 a.m.•36 views

CVE-2007-3929

Use-after-free vulnerability in the BitTorrent support in Opera before 9.22 allows user-assisted remote attackers to execute arbitrary code via a crafted header in a torrent file, which leaves a dangling pointer to an invalid object...

9.3CVSS6.3AI score0.06466EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2007/07/21 12:00 a.m.•49 views

CVE-2007-3929

Use-after-free vulnerability in the BitTorrent support in Opera before 9.22 allows user-assisted remote attackers to execute arbitrary code via a crafted header in a torrent file, which leaves a dangling pointer to an invalid object...

7.2AI score0.06466EPSS
SaveExploits0References10
CVE
CVE
•added 2007/07/21 12:00 a.m.•75 views

CVE-2007-3929

CVE-2007-3929 describes a use-after-free vulnerability in the BitTorrent support of Opera prior to 9.22. A crafted BitTorrent header can leave a dangling pointer to an invalid object, potentially enabling user-assisted remote code execution. Connected advisories indicate multiple vulnerabilities ...

9.3CVSS7.2AI score0.06466EPSS
SaveExploits0References10Affected Software1
Rows per page
Query Builder