Lucene search
+L

3137 matches found

Check Point Advisories
Check Point Advisories
added 2009/10/04 12:0 a.m.17 views

Apple Mac OS X Installer Package Filename Format String (CVE-2007-0465)

Apple Computer Mac OS X is the operating system shipped with Apple Macintosh computers. The Installer component is an application included in Mac OS X systems which extracts and installs applications from installation packages. The installer provides features which allow developers to customize...

7.6CVSS7AI score0.1833EPSS
SaveExploits2
OpenVAS
OpenVAS
added 2009/09/29 12:0 a.m.22 views

SILC Client Channel Name Format String Vulnerability

SILC Client is prone to a format string vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS6.2AI score0.04529EPSS
SaveExploits0References2
OpenVAS
OpenVAS
added 2009/09/29 12:0 a.m.30 views

SILC Client Nickname Field Format String Vulnerability

This host has SILC Client/Toolkit installed, and is prone to Format String vulnerability. OpenVAS Vulnerability Test $Id: secpodsilcprdtsnicknameformatstringvuln.nasl 5122 2017-01-27 12:16:00Z teissa $ SILC Client Nickname Field Format String Vulnerability Authors: Nikita MR Copyright: Copyright ...

7.5CVSS0.6AI score0.04827EPSS
SaveExploits0References3
OpenVAS
OpenVAS
added 2009/09/29 12:0 a.m.19 views

SILC Client < 1.1.8 Nickname Field Format String Vulnerability

SILC Client/Toolkit is prone to a format string vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS5.6AI score0.04827EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2009/09/24 12:0 a.m.33 views

SuSE9 Security Update : mailman (YOU Patch Number 11243)

This update of mailman fixes the following security issues : - A malicious user could visit a specially crafted URI and inject an apparent log message into Mailman's error log which might induce an unsuspecting administrator to visit a phishing site. This has been blocked. Thanks to Moritz Nauman...

7.5CVSS4.9AI score0.06821EPSS
SaveExploits2References6
securityvulns
securityvulns
added 2009/09/04 12:0 a.m.34 views

silc format string vulnerability

Multiple format string vulnerabilities on different messages parsing...

7.5CVSS2.9AI score0.04827EPSS
SaveExploits0References1Affected Software1
Debian
Debian
added 2009/09/02 6:20 p.m.31 views

[SECURITY] [DSA 1877-1] New mysql-dfsg-5.0 packages fix arbitrary code execution

------------------------------------------------------------------------ Debian Security Advisory DSA-1877-1 [email protected] http://www.debian.org/security/ Sebastien Delafond September 02, 2009 http://www.debian.org/security/faq -...

8.5CVSS6.8AI score0.10586EPSS
SaveExploits3
Prion
Prion
added 2009/08/25 10:30 a.m.23 views

Format string

Format string vulnerability in MemeCode Software i.Scribe 1.88 through 2.00 before Beta9 allows remote SMTP servers to cause a denial of service crash and possibly execute arbitrary code via format string specifiers in a server response, which is not properly handled "when displaying the signon...

9.3CVSS8.3AI score0.04893EPSS
SaveExploits2References6Affected Software1
Cvelist
Cvelist
added 2009/08/25 10:0 a.m.34 views

CVE-2008-7074

Format string vulnerability in MemeCode Software i.Scribe 1.88 through 2.00 before Beta9 allows remote SMTP servers to cause a denial of service crash and possibly execute arbitrary code via format string specifiers in a server response, which is not properly handled "when displaying the signon...

7.7AI score0.04893EPSS
SaveExploits2References6
CVE
CVE
added 2009/08/25 10:0 a.m.50 views

CVE-2008-7074

CVE-2008-7074 describes a format string vulnerability in MemeCode Software i.Scribe (versions 1.88 through 2.00 before Beta9) that is triggered by format specifiers in the signon message of server responses. The issue can be exploited by remote SMTP servers to cause a denial of service (crash) an...

9.3CVSS8AI score0.04893EPSS
SaveExploits2References6Affected Software1
NVD
NVD
added 2009/08/21 11:30 a.m.18 views

CVE-2009-2916

Format string vulnerability in the CNSAddTxt function in logs.dll in 2K Games Vietcong 2 1.10 and earlier might allow remote attackers to execute arbitrary code via format string specifiers in the nickname...

9.3CVSS7.7AI score0.03372EPSS
SaveExploits0References4
CVE
CVE
added 2009/08/21 10:0 a.m.56 views

CVE-2009-2916

The CVE-2009-2916 vulnerability affects 2K Games Vietcong 2 up to version 1.10, in the logs.dll CNS_AddTxt function. The underlying issue is a format string vulnerability in the nickname handling, enabling remote code execution. Exploitation is described as remote and network-based, with no authe...

9.3CVSS7.9AI score0.03372EPSS
SaveExploits0References4Affected Software1
Cvelist
Cvelist
added 2009/08/21 10:0 a.m.30 views

CVE-2009-2916

Format string vulnerability in the CNSAddTxt function in logs.dll in 2K Games Vietcong 2 1.10 and earlier might allow remote attackers to execute arbitrary code via format string specifiers in the nickname...

7.7AI score0.03372EPSS
SaveExploits0References4
CVE
CVE
added 2009/08/06 4:0 p.m.59 views

CVE-2009-2191

CVE-2009-2191 is a format-string vulnerability in Mac OS X Login Window (affecting 10.4.11 and 10.5 up to 10.5.7; fixed in 10.5.8 via Security Update 2009-003). The issue arises from format specifiers in an application name, which can lead to arbitrary code execution or an application crash. Publ...

7.5CVSS7.5AI score0.04167EPSS
SaveExploits1References8Affected Software2
Cvelist
Cvelist
added 2009/08/06 4:0 p.m.31 views

CVE-2009-2191

Format string vulnerability in Login Window in Apple Mac OS X 10.4.11 and 10.5 before 10.5.8 allows attackers to execute arbitrary code or cause a denial of service application crash via format string specifiers in an application name...

7.3AI score0.04167EPSS
SaveExploits1References8
Tenable Nessus
Tenable Nessus
added 2009/07/21 12:0 a.m.28 views

openSUSE Security Update : wireshark (wireshark-539)

wireshark: fixed crashes while reading capture files containing NetScreen data CVE-2009-0599, Tektronix K12 capture files CVE-2009-0600 and and a format string vulnerability CVE-2009-0601. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin...

5CVSS5.3AI score0.02625EPSS
SaveExploits2References4
Prion
Prion
added 2009/07/20 8:0 p.m.20 views

Format string

Format string vulnerability in Armed Assault aka ArmA 1.14 and earlier, and 1.16 beta, and Armed Assault II 1.02 and earlier allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via format string specifiers in the 1 nickname and 2 datafile fields in a joi...

10CVSS8.3AI score0.04407EPSS
SaveExploits1References2Affected Software2
CVE
CVE
added 2009/07/20 7:25 p.m.46 views

CVE-2009-2548

This CVE (CVE-2009-2548) affects Armed Assault (ArmA) 1.14 and earlier, 1.16 beta, and Armed Assault II 1.02 and earlier. The issue is a format-string vulnerability in join-request handling where format specifiers in the nickname and datafile fields are improperly processed during error logging, ...

10CVSS8AI score0.04407EPSS
SaveExploits1References2Affected Software2
Cvelist
Cvelist
added 2009/07/20 7:25 p.m.32 views

CVE-2009-2548

Format string vulnerability in Armed Assault aka ArmA 1.14 and earlier, and 1.16 beta, and Armed Assault II 1.02 and earlier allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via format string specifiers in the 1 nickname and 2 datafile fields in a joi...

7.8AI score0.04407EPSS
SaveExploits1References2
Check Point Advisories
Check Point Advisories
added 2009/07/17 12:0 a.m.1 views

Update Protection against Sun MySQL mysql_log Format String Vulnerability

A format string vulnerability exists in Sun Microsystems MySQL database server, a popular open-source implementation of a relational database. The flaw is due to insufficient input validation when processing database commands. Remote authenticated attackers could exploit this vulnerability by...

6.6AI score
SaveExploits0
Rows per page
Query Builder