Lucene search
K

4367 matches found

OSV
OSV
added 2007/12/12 10:10 p.m.2 views

DEBIAN-CVE-2007-5007

Stack-based buffer overflow in the irfetchseq function in balsa before 2.3.20 might allow remote IMAP servers to execute arbitrary code via a long response to a FETCH command...

6.8CVSS8.4AI score0.03893EPSS
Exploits1References1
OSV
OSV
added 2007/11/13 10:46 p.m.2 views

DEBIAN-CVE-2007-5934

The LOB functionality in PEAR MDB2 before 2.5.0a1 interprets a request to store a URL string as a request to retrieve and store the contents of the URL, which might allow remote attackers to use MDB2 as an indirect proxy or obtain sensitive information via a URL into a form field in an MDB2...

4.3CVSS6.7AI score0.01621EPSS
Exploits0References1
Cvelist
Cvelist
added 2007/09/20 8:0 p.m.29 views

CVE-2007-5007

Stack-based buffer overflow in the irfetchseq function in balsa before 2.3.20 might allow remote IMAP servers to execute arbitrary code via a long response to a FETCH command...

7.8AI score0.03893EPSS
Exploits1References12
Debian CVE
Debian CVE
added 2007/09/20 8:0 p.m.20 views

CVE-2007-5007

Stack-based buffer overflow in the irfetchseq function in balsa before 2.3.20 might allow remote IMAP servers to execute arbitrary code via a long response to a FETCH command...

6.8CVSS7.7AI score0.03893EPSS
Exploits1
OpenVAS
OpenVAS
added 2007/07/31 12:0 a.m.21 views

SLAD Run

This script connects to SLAD on a remote host to run remote scanners. To work properly, this script requires to be provided with a valid SSH login by means of an SSH key with pass- phrase if the SSH public key is passphrase-protected, or a password to log in. OpenVAS Vulnerability Test Fetch...

0.2AI score
Exploits0
OpenVAS
OpenVAS
added 2007/07/31 12:0 a.m.12 views

SLAD Fetch Results

This script connects to SLAD on a remote host to fetch the result from scripts started earlier. To work properly, this script requires to be provided with a valid SSH login by means of an SSH key with pass- phrase if the SSH public key is passphrase-protected, or a password to log in. OpenVAS...

7.1AI score
Exploits0
Prion
Prion
added 2007/07/09 4:30 p.m.21 views

Design/Logic Flaw

Unspecified vulnerability in the fetch function in MDB2.php in PEAR Structures-DataGrid-DataSource-MDB2 0.1.9 and earlier allows attackers to "manipulate the generated sorting queries."...

5CVSS7AI score0.00982EPSS
Exploits0References3Affected Software1
Cvelist
Cvelist
added 2007/07/09 4:0 p.m.26 views

CVE-2007-3628

Unspecified vulnerability in the fetch function in MDB2.php in PEAR Structures-DataGrid-DataSource-MDB2 0.1.9 and earlier allows attackers to "manipulate the generated sorting queries."...

6.5AI score0.00982EPSS
Exploits0References3
CVE
CVE
added 2007/07/09 4:0 p.m.47 views

CVE-2007-3628

CVE-2007-3628 affects PEAR Structures-DataGrid-DataSource-MDB2 up to version 0.1.9, specifically the fetch function in MDB2.php. The vulnerability allows attackers to manipulate generated sorting queries. The connected documents confirm the affected component and the general impact, but do not pr...

5CVSS6.5AI score0.00982EPSS
Exploits0References3Affected Software1
Tenable Nessus
Tenable Nessus
added 2007/02/18 12:0 a.m.26 views

SUSE-SA:2007:014: bind

The remote host is missing the patch for the advisory SUSE-SA:2007:014 bind. Two security problems were fixed in the ISC BIND nameserver version 9.3.4, which are addressed by this advisory: CVE-2007-0493: If recursion is enabled, a remote attacker can dereference a freed fetch context causing the...

7.8CVSS5.6AI score0.43355EPSS
Exploits1
Exploit DB
Exploit DB
added 2007/02/15 12:0 a.m.35 views

ZebraFeeds 1.0 - 'zf_path' Remote File Inclusion

To ConTacT mE @ wWw.Asb-May.net/bb ScRiPt:-http://cazalet.org/zebrafeeds/releases/zebrafeeds-current.zip Discovered By:- ThE dE@Th aggregator.php:- requireonce$zfpath . 'includes/feed.php'; requireonce$zfpath . 'includes/view.php'; requireonce$zfpath . 'includes/template.php'; requireonce$zfpath...

7.4AI score
Exploits0
Tenable Nessus
Tenable Nessus
added 2007/02/09 12:0 a.m.37 views

Fedora Core 6 : bind-9.3.4-1.fc6 (2007-147)

Updated to version 9.3.4 which contains two security bugfixes - Serialise validation of type ANY responses. RT 16555 - It was possible to dereference a freed fetch context. RT 16584 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security...

7.8CVSS5.3AI score0.43355EPSS
Exploits1References3
seebug.org
seebug.org
added 2007/01/28 12:0 a.m.17 views

ISC BIND远程Fetch上下文拒绝服务漏洞

ISC BIND是一款开放源代码的Internet域名名字系统实现。 ISC BIND存在可能引用释放的Fetch上下问存在问题,远程攻击者可以利用漏洞对应用程序进行拒绝服务攻击。 目前没有解决方案提供。 ISC BIND 9.5 a1 ISC BIND 9.4 rc1 ISC BIND 9.4 b4 ISC BIND 9.4 b3 ISC BIND 9.4 b2 ISC BIND 9.4 b1 ISC BIND 9.4 a6 ISC BIND 9.4 a5 ISC BIND 9.4 a4 ISC BIND 9.4 a3 ISC BIND 9.4 a2 ISC BIND 9.4 a1 I...

7AI score
Exploits0
OSV
OSV
added 2007/01/25 8:28 p.m.3 views

DEBIAN-CVE-2007-0493

Use-after-free vulnerability in ISC BIND 9.3.0 up to 9.3.3, 9.4.0a1 up to 9.4.0a6, 9.4.0b1 up to 9.4.0b4, 9.4.0rc1, and 9.5.0a1 Bind Forum only allows remote attackers to cause a denial of service named daemon crash via unspecified vectors that cause named to "dereference a freed fetch context."...

7.8CVSS6.9AI score0.12079EPSS
Exploits1References1
Positive Technologies
Positive Technologies
added 2007/01/25 12:0 a.m.4 views

PT-2007-1953 · Isc +1 · Isc Bind +1

Name of the Vulnerable Software and Affected Versions: ISC BIND versions 9.3.0 through 9.3.3 ISC BIND versions 9.4.0a1 through 9.4.0a6 ISC BIND versions 9.4.0b1 through 9.4.0b4 ISC BIND version 9.4.0rc1 ISC BIND version 9.5.0a1 Description: The issue allows remote attackers to cause a denial of...

7.8CVSS7.6AI score0.43355EPSS
Exploits2References60
FreeBSD
FreeBSD
added 2006/09/26 12:0 a.m.20 views

dokuwiki -- multiple vulnerabilities

Secunia reports: Some vulnerabilities have been reported in DokuWiki, which can be exploited by malicious people to cause a DoS Denial of Service or potentially compromise a vulnerable system. Input passed to the "w" and "h" parameters in lib/exec/fetch.php is not properly sanitised before being...

6.9AI score
Exploits0References4
RedHat Linux
RedHat Linux
added 2006/05/09 11:39 a.m.7 views

security flaw

Multiple vulnerabilities in libtiff before 3.8.1 allow context-dependent attackers to cause a denial of service via a TIFF image that triggers errors in 1 the TIFFFetchAnyArray function in a tifdirread.c; 2 certain "codec cleanup methods" in b tiflzw.c, c tifpixarlog.c, and d tifzip.c; 3 and...

4CVSS5.8AI score0.0865EPSS
Exploits1References4
OSV
OSV
added 2006/04/25 11:2 p.m.2 views

DEBIAN-CVE-2006-2025

Integer overflow in the TIFFFetchData function in tifdirread.c for libtiff before 3.8.1 allows context-dependent attackers to cause a denial of service and possibly execute arbitrary code via a crafted TIFF image...

6.5CVSS7.5AI score0.10524EPSS
Exploits1References1
RedHat Linux
RedHat Linux
added 2006/04/25 2:33 p.m.3 views

security flaw

Buffer overflow in the imapfetchoverview function in the IMAP functionality phpimap.c in PHP before 4.3.3 allows remote attackers to cause a denial of service segmentation fault and possibly execute arbitrary code via a long e-mail address in a 1 To or 2 From header...

5CVSS6.3AI score0.11904EPSS
Exploits1References4
Debian CVE
Debian CVE
added 2006/04/05 10:0 a.m.12 views

CVE-2006-0051

Buffer overflow in playlistimport.cpp in Kaffeine Player 0.4.2 through 0.7.1 allows user-assisted attackers to execute arbitrary code via long HTTP request headers when Kaffeine is "fetching remote playlists", which triggers the overflow in the httppeek function...

5.1CVSS7.7AI score0.03493EPSS
Exploits0
Rows per page
Query Builder