Lucene search
+L

3440 matches found

OSV
OSV
added 2006/05/18 10:2 a.m.4 views

DEBIAN-CVE-2006-2440

Heap-based buffer overflow in the libMagick component of ImageMagick 6.0.6.2 might allow attackers to execute arbitrary code via an image index array that triggers the overflow during filename glob expansion by the ExpandFilenames function...

7.5CVSS8.3AI score0.02863EPSS
SaveExploits0References1
UbuntuCve
UbuntuCve
added 2006/05/18 10:2 a.m.38 views

CVE-2006-2440

Heap-based buffer overflow in the libMagick component of ImageMagick 6.0.6.2 might allow attackers to execute arbitrary code via an image index array that triggers the overflow during filename glob expansion by the ExpandFilenames function...

7.5CVSS6.5AI score0.02863EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2006/05/18 10:0 a.m.40 views

CVE-2006-2440

Heap-based buffer overflow in the libMagick component of ImageMagick 6.0.6.2 might allow attackers to execute arbitrary code via an image index array that triggers the overflow during filename glob expansion by the ExpandFilenames function...

7.5AI score0.02863EPSS
SaveExploits0References8
Debian CVE
Debian CVE
added 2006/05/18 10:0 a.m.44 views

CVE-2006-2440

Heap-based buffer overflow in the libMagick component of ImageMagick 6.0.6.2 might allow attackers to execute arbitrary code via an image index array that triggers the overflow during filename glob expansion by the ExpandFilenames function...

7.5CVSS7.6AI score0.02863EPSS
SaveExploits0
RedHat Linux
RedHat Linux
added 2006/03/07 3:15 p.m.5 views

local to local copy uses shell expansion twice

scp in OpenSSH 4.2p1 allows attackers to execute arbitrary commands via filenames that contain shell metacharacters or spaces, which are expanded twice...

4.6CVSS6.9AI score0.00474EPSS
SaveExploits1References4
CVE
CVE
added 2006/02/01 2:0 a.m.99 views

CVE-2005-4685

The CVE-2005-4685 entry describes a cookie handling flaw in Firefox/Mozilla where, if the DNS resolver uses a non-root domain in its search list, a cookie can be associated with multiple domains or stolen for an expanded hostname. Exploitation involves a user-entered hostname being expanded via t...

6.4CVSS6.6AI score0.01182EPSS
SaveExploits0References3Affected Software2
CVE
CVE
added 2006/02/01 2:0 a.m.62 views

CVE-2005-4684

The vulnerability CVE-2005-4684 affects Konqueror and is caused by the DNS resolver handling a non-root domain in its search list, enabling a cookie to be associated with multiple domains or an attacker to steal cookies for an expanded hostname. The evidence in connected documents confirms the is...

6.4CVSS6.6AI score0.01409EPSS
SaveExploits0References3Affected Software1
Tenable Nessus
Tenable Nessus
added 2006/01/24 12:0 a.m.37 views

Fedora Core 4 : openssh-4.2p1-fc4.10 (2006-056)

This is a minor security update which fixes double shell expansion in local to local and remote to remote copy with scp. It also fixes a few other minor non-security issues. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory...

4.6CVSS6.6AI score0.00474EPSS
SaveExploits1References2
UbuntuCve
UbuntuCve
added 2005/12/31 5:0 a.m.26 views

CVE-2005-4685

Firefox and Mozilla can associate a cookie with multiple domains when the DNS resolver has a non-root domain in its search list, which allows remote attackers to trick a user into accepting a cookie for a hostname formed via search-list expansion of the hostname entered by the user, or steal a...

6.4CVSS5.8AI score0.01182EPSS
SaveExploits0References1
OSV
OSV
added 2005/12/31 5:0 a.m.8 views

DEBIAN-CVE-2005-4746

Multiple buffer overflows in FreeRADIUS 1.0.3 and 1.0.4 allow remote attackers to cause denial of service crash via 1 the rlmsqlcounter module or 2 unknown vectors "while expanding %t"...

7.8CVSS7.1AI score0.02349EPSS
SaveExploits0References1
myhack58
myhack58
added 2005/11/19 12:0 a.m.31 views

To xp_cmdshell March-vulnerability warning-the black bar safety net

To xpcmdshell March - Using MSSQLDatastore expansion madeserviceis the management right In MSSQL having sysadmin permission to the user through the xpcmdshell stored extensions to the system permissions to execute arbitrary system commands, and therefore most of the security attention of the...

8.9AI score
SaveExploits0
securityvulns
securityvulns
added 2005/08/26 12:0 a.m.35 views

Quake 2 Lithium Mod V 1.24 Macro Expansion Vuln?

Well I ran quake 2 using Lithium mod V 1.24 under OllyDBG and it seems that the lithium II mod for quake 2 latest PATCH 3.20 is parsing the '' in nicks. My well crafted nickname '999fffff' is being pushed onto the stack as 004144A1 |. 68 E821AF00 PUSH QUAKE2.00AF21E8 ; ASCII "0.000000 0.000000...

0.3AI score
SaveExploits0
Cvelist
Cvelist
added 2005/08/18 4:0 a.m.19 views

CVE-2004-2415

Davenport before 0.9.10 allows attackers to cause a denial of service resource consumption via 1 a very large XML file or 2 entity expansion attacks...

6.6AI score0.01549EPSS
SaveExploits0References7
NVD
NVD
added 2005/05/02 4:0 a.m.24 views

CVE-2005-0001

Race condition in the page fault handler fault.c for Linux kernel 2.2.x to 2.2.7, 2.4 to 2.4.29, and 2.6 to 2.6.10, when running on multiprocessor machines, allows local users to execute arbitrary code via concurrent threads that share the same virtual memory space and simultaneously request stac...

6.9CVSS6.8AI score0.00499EPSS
SaveExploits0References24
UbuntuCve
UbuntuCve
added 2005/05/02 4:0 a.m.33 views

CVE-2005-0001

Race condition in the page fault handler fault.c for Linux kernel 2.2.x to 2.2.7, 2.4 to 2.4.29, and 2.6 to 2.6.10, when running on multiprocessor machines, allows local users to execute arbitrary code via concurrent threads that share the same virtual memory space and simultaneously request stac...

6.9CVSS6.3AI score0.00499EPSS
SaveExploits0References2
NVD
NVD
added 2004/12/31 5:0 a.m.18 views

CVE-2004-2415

Davenport before 0.9.10 allows attackers to cause a denial of service resource consumption via 1 a very large XML file or 2 entity expansion attacks...

5CVSS6.6AI score0.01549EPSS
SaveExploits0References7
exploitpack
exploitpack
added 2004/12/15 12:0 a.m.15 views

2Fax 3.0 Tab Expansion - Remote Buffer Overflow

2Fax 3.0 Tab Expansion - Remote Buffer Overflow source: https://www.securityfocus.com/bid/11980/info 2fax is prone to a buffer overflow vulnerability. This issue is exposed when the software performs tab expansion operations while converting files. Since files may originate from an external or...

1.2AI score
SaveExploits0
Exploit DB
Exploit DB
added 2004/12/15 12:0 a.m.25 views

2Fax 3.0 Tab Expansion - Remote Buffer Overflow

source: https://www.securityfocus.com/bid/11980/info 2fax is prone to a buffer overflow vulnerability. This issue is exposed when the software performs tab expansion operations while converting files. Since files may originate from an external or untrusted source, this issue is considered remote ...

5.8AI score
SaveExploits0
securityvulns
securityvulns
added 2004/09/27 12:0 a.m.39 views

CoD United Offensive boom boom

An update for the Call of Duty bug http://aluigi.altervista.org/adv/codboom-adv.txt The 15th September 2004 has been officially released the expansion pack called United Offensive. It is an expansion pack but uses a new executable that unfortunally has not been fixed for the shutdown bug I report...

1.4AI score
SaveExploits0
RedHat Linux
RedHat Linux
added 2004/09/15 3:20 p.m.8 views

security flaw

Buffer overflow in Apache 2.0.50 and earlier allows local users to gain apache privileges via a .htaccess file that causes the overflow during expansion of environment variables...

7.8CVSS5.8AI score0.01607EPSS
SaveExploits0References4
Rows per page
Query Builder