Lucene search
+L

7305 matches found

ATTACKERKB
ATTACKERKB
added 2009/09/13 10:30 p.m.2 views

CVE-2007-6731

Extended Module Player XMP 2.5.1 and earlier allow remote attackers to execute arbitrary code via an OXM file with a negative value, which bypasses a check in 1 testoxm and 2 decrunchoxm functions in misc/oxm.c, leading to a buffer overflow...

10CVSS6.5AI score0.14074EPSS
SaveExploits2References4
UbuntuCve
UbuntuCve
added 2009/09/13 10:30 p.m.25 views

CVE-2007-6731

Extended Module Player XMP 2.5.1 and earlier allow remote attackers to execute arbitrary code via an OXM file with a negative value, which bypasses a check in 1 testoxm and 2 decrunchoxm functions in misc/oxm.c, leading to a buffer overflow...

10CVSS6.4AI score0.14074EPSS
SaveExploits2References1
OSV
OSV
added 2009/09/13 10:30 p.m.15 views

CVE-2007-6732

Multiple buffer overflows in the dttload function in loaders/dttload.c Extended Module Player XMP 2.5.1 and earlier allow remote attackers to execute arbitrary code via unspecified vectors related to an untrusted length value and the 1 pofs and 2 plen arrays...

7.9AI score
SaveExploits0References3
CVE
CVE
added 2009/09/13 10:0 p.m.44 views

CVE-2007-6731

CVE-2007-6731 affects Extended Module Player (XMP) up to version 2.5.1 and earlier. The vulnerability arises in the OXM loader: a negative value in an OXM file bypasses checks in test_oxm and decrunch_oxm in misc/oxm.c, causing a buffer overflow. This leads to remote code execution risks as descr...

10CVSS7.7AI score0.14074EPSS
SaveExploits2References3Affected Software1
Cvelist
Cvelist
added 2009/09/13 10:0 p.m.29 views

CVE-2007-6731

Extended Module Player XMP 2.5.1 and earlier allow remote attackers to execute arbitrary code via an OXM file with a negative value, which bypasses a check in 1 testoxm and 2 decrunchoxm functions in misc/oxm.c, leading to a buffer overflow...

7.6AI score0.14074EPSS
SaveExploits2References3
Oracle linux
Oracle linux
added 2009/09/08 12:0 a.m.25 views

gdm security and bug fix update

1:2.16.0-56 - Resolves: 239818 181302 - Fix tcp wrappers detection on 64-bit 1:2.16.0-55 Resolves: 196054 - Fix docs subpackage Requires 1:2.16.0-53 Resolves: 196054 - Add docs subpackage 1:2.16.0-52 Resolves: 226931 - Add teIN translations 1:2.16.0-51 Resolves: 441971 - Make ctrl-alt-backspace a...

6.8CVSS1.2AI score0.01841EPSS
SaveExploits0
RedHat Linux
RedHat Linux
added 2009/09/02 8:0 a.m.6 views

kernel: ext4: make_indexed_dir() missing validation

The makeindexeddir function in fs/ext4/namei.c in the Linux kernel 2.6.27 before 2.6.27.19 and 2.6.28 before 2.6.28.7 does not validate a certain reclen field, which allows local users to cause a denial of service OOPS by attempting to mount a crafted ext4 filesystem...

4.9CVSS6.1AI score0.0075EPSS
SaveExploits1References4
NVD
NVD
added 2009/07/29 5:30 p.m.19 views

CVE-2009-2644

Race condition in the Solaris Auditing subsystem in Sun Solaris 9 and 10 and OpenSolaris before snv121, when extended file attributes are used, allows local users to cause a denial of service panic via vectors related to "pathnames for invalid fds."...

4.9CVSS6.1AI score0.00269EPSS
SaveExploits0References7
Prion
Prion
added 2009/07/29 5:30 p.m.19 views

Race condition

Race condition in the Solaris Auditing subsystem in Sun Solaris 9 and 10 and OpenSolaris before snv121, when extended file attributes are used, allows local users to cause a denial of service panic via vectors related to "pathnames for invalid fds."...

4.9CVSS6.7AI score0.00269EPSS
SaveExploits0References7Affected Software2
OpenVAS
OpenVAS
added 2009/05/05 12:0 a.m.20 views

HP-UX Update for Netscape Directory Server (NDS) HPSBUX02324

Check for the Version of Netscape Directory Server NDS OpenVAS Vulnerability Test HP-UX Update for Netscape Directory Server NDS HPSBUX02324 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can...

9CVSS0.1402EPSS
SaveExploits1References2
OpenVAS
OpenVAS
added 2009/05/05 12:0 a.m.22 views

HP-UX Update for Netscape Directory Server (NDS) HPSBUX02324

Check for the Version of Netscape Directory Server NDS OpenVAS Vulnerability Test HP-UX Update for Netscape Directory Server NDS HPSBUX02324 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can...

9CVSS0.1402EPSS
SaveExploits1References2
OpenVAS
OpenVAS
added 2009/05/05 12:0 a.m.17 views

HP-UX Update for HP Secure Shell HPSBUX02287

Check for the Version of HP Secure Shell OpenVAS Vulnerability Test HP-UX Update for HP Secure Shell HPSBUX02287 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

7.5CVSS0.1AI score0.02374EPSS
SaveExploits0References2
OpenVAS
OpenVAS
added 2009/05/05 12:0 a.m.38 views

HP-UX Update for Apache With PHP HPSBUX02332

Check for the Version of Apache With PHP OpenVAS Vulnerability Test HP-UX Update for Apache With PHP HPSBUX02332 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

6.9CVSS0.2AI score0.08878EPSS
SaveExploits4References2
OpenVAS
OpenVAS
added 2009/05/05 12:0 a.m.70 views

HP-UX Update for Apache With PHP HPSBUX02332

Check for the Version of Apache With PHP OpenVAS Vulnerability Test HP-UX Update for Apache With PHP HPSBUX02332 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

6.9CVSS0.2AI score0.08878EPSS
SaveExploits4References2
OpenVAS
OpenVAS
added 2009/05/05 12:0 a.m.24 views

HP-UX Update for HP Secure Shell HPSBUX02287

Check for the Version of HP Secure Shell OpenVAS Vulnerability Test HP-UX Update for HP Secure Shell HPSBUX02287 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

7.5CVSS0.2AI score0.02374EPSS
SaveExploits0References2
Cent OS
Cent OS
added 2009/05/01 12:2 a.m.46 views

security update

CentOS Errata and Security Advisory CESA-2009:0297-03 In accordance with the Red Hat Enterprise Linux Errata Support Policy, the 7 years life-cycle of Red Hat Enterprise Linux 2.1 will end on May 31 2009. After that date, Red Hat will discontinue the technical support services, bugfix, enhancemen...

6.8AI score
SaveExploits0References8
CVE
CVE
added 2009/04/24 2:0 p.m.62 views

CVE-2009-1409

The CVE-2009-1409 entry describes an SQL injection in e107 (versions up to 0.7.15 and earlier) affecting usersettings.php when Extended User Fields is enabled and magic_quotes_gpc is disabled. An attacker can craft the hide parameter to execute arbitrary SQL commands remotely. The description spe...

5.1CVSS8.5AI score0.00948EPSS
SaveExploits1References5Affected Software1
Cvelist
Cvelist
added 2009/04/24 2:0 p.m.25 views

CVE-2009-1409

SQL injection vulnerability in usersettings.php in e107 0.7.15 and earlier, when "Extended User Fields" is enabled and magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the hide parameter, a different vector than CVE-2005-4224 and CVE-2008-5320...

8.1AI score0.00948EPSS
SaveExploits1References5
securityvulns
securityvulns
added 2009/04/23 12:0 a.m.56 views

[security bulletin] HPSBMA02414 SSRT080185 rev.1 - HP Storage Essentials Running Secure NaviCLI, Remote Unauthorized Access, Gain Extended Privileges

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c01633084 Version: 1 HPSBMA02414 SSRT080185 rev.1 - HP Storage Essentials Running Secure NaviCLI, Remote Unauthorized Access, Gain Extended Privileges NOTICE: The information in this Security...

6.5CVSS0.6AI score0.01345EPSS
SaveExploits1
NVD
NVD
added 2009/04/21 3:30 p.m.22 views

CVE-2009-0715

Unspecified vulnerability in Secure NaviCLI in HP Storage Essentials 6.0.2 through 6.0.4 allows remote authenticated users to obtain "access" or "extended privileges" via unknown vectors...

6.5CVSS6AI score0.01345EPSS
SaveExploits1References5
Rows per page
Query Builder