Lucene search
+L

9940 matches found

NVD
NVD
•added 2010/06/17 4:30 p.m.•37 views

CVE-2010-1376

Multiple format string vulnerabilities in Network Authorization in Apple Mac OS X 10.6 before 10.6.4 allow remote attackers to execute arbitrary code or cause a denial of service application crash via format string specifiers in a 1 afp, 2 cifs, or 3 smb URL...

6.8CVSS7.7AI score0.03222EPSS
SaveExploits0References6
Prion
Prion
•added 2010/06/17 4:30 p.m.•40 views

Format string

Multiple format string vulnerabilities in Network Authorization in Apple Mac OS X 10.6 before 10.6.4 allow remote attackers to execute arbitrary code or cause a denial of service application crash via format string specifiers in a 1 afp, 2 cifs, or 3 smb URL...

6.8CVSS8.2AI score0.03222EPSS
SaveExploits0References6Affected Software2
CVE
CVE
•added 2010/06/17 4:00 p.m.•81 views

CVE-2010-1376

CVE-2010-1376 involves multiple format string vulnerabilities in Apple Mac OS X 10.6’s Network Authorization. According to the connected sources, the flaw resides in how format string specifiers are processed for AFP/CIFS/SMB URLs, potentially allowing a remote attacker to execute arbitrary code ...

6.8CVSS7.6AI score0.03222EPSS
SaveExploits0References6Affected Software2
Cvelist
Cvelist
•added 2010/06/17 4:00 p.m.•54 views

CVE-2010-1376

Multiple format string vulnerabilities in Network Authorization in Apple Mac OS X 10.6 before 10.6.4 allow remote attackers to execute arbitrary code or cause a denial of service application crash via format string specifiers in a 1 afp, 2 cifs, or 3 smb URL...

7.8AI score0.03222EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2010/06/17 12:00 a.m.•12 views

CVE-2010-1376: Use of Externally-Controlled Format String

Multiple format string vulnerabilities in Network Authorization in Apple Mac OS X 10.6 before 10.6.4 allow remote attackers to execute arbitrary code or cause a denial of service application crash via format string specifiers in a 1 afp, 2 cifs, or 3 smb URL...

6.8CVSS7.8AI score0.03222EPSS
SaveExploits0References2
NVD
NVD
•added 2010/06/15 2:30 p.m.•30 views

CVE-2010-2271

Format string vulnerability in authcfg.cgi in Accoria Web Server aka Rock Web Server 1.4.7 allows remote attackers to have an unspecified impact via format string specifiers in the path aka Password File parameter...

7.5CVSS6.8AI score0.0141EPSS
SaveExploits1References2
Prion
Prion
•added 2010/06/15 2:30 p.m.•31 views

Format string

Format string vulnerability in authcfg.cgi in Accoria Web Server aka Rock Web Server 1.4.7 allows remote attackers to have an unspecified impact via format string specifiers in the path aka Password File parameter...

7.5CVSS7.3AI score0.0141EPSS
SaveExploits1References2Affected Software1
Cvelist
Cvelist
•added 2010/06/14 7:00 p.m.•44 views

CVE-2010-2271

Format string vulnerability in authcfg.cgi in Accoria Web Server aka Rock Web Server 1.4.7 allows remote attackers to have an unspecified impact via format string specifiers in the path aka Password File parameter...

6.8AI score0.0141EPSS
SaveExploits1References2
CVE
CVE
•added 2010/06/14 7:00 p.m.•65 views

CVE-2010-2271

CVE-2010-2271 concerns the Accoria Web Server (aka Rock Web Server) version 1.4.7, where a format string vulnerability exists in the file/auth module: authcfg.cgi. The root cause is improper handling of user-supplied format string specifiers in the Password File path parameter, which could allow ...

7.5CVSS7AI score0.0141EPSS
SaveExploits1References2Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2010/06/14 12:00 a.m.•10 views

CVE-2010-2271: Use of Externally-Controlled Format String

Format string vulnerability in authcfg.cgi in Accoria Web Server aka Rock Web Server 1.4.7 allows remote attackers to have an unspecified impact via format string specifiers in the path aka Password File parameter...

7.5CVSS5.9AI score0.0141EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
•added 2010/06/11 12:00 a.m.•54 views

Debian DSA-2058-1 : glibc, eglibc - multiple vulnerabilities

Several vulnerabilities have been discovered in the GNU C Library aka glibc and its derivatives. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2008-1391, CVE-2009-4880, CVE-2009-4881 Maksymilian Arciemowicz discovered that the GNU C library did not...

7.5CVSS6.9AI score0.18795EPSS
SaveExploits6References12
Check Point Advisories
Check Point Advisories
•added 2010/06/10 12:00 a.m.•46 views

HP OpenView Network Node Manager ovet_demandpoll.exe Code Execution (CVE-2010-1550)

HP OpenView product consists of a suite of network and system management software applications developed by HP. It includes several optional modules and components, such as OpenView Quality Manager, OpenView Performance Insight, and OpenView Network Node Manager. A remote code execution...

10CVSS7.4AI score0.10927EPSS
SaveExploits0
osv_cve
osv_cve
•added 2010/06/01 8:30 p.m.•26 views

CVE-2009-4881

Integer overflow in the vstrfmonl function in stdlib/strfmonl.c in the strfmon implementation in the GNU C Library aka glibc or libc6 before 2.10.1 allows context-dependent attackers to cause a denial of service application crash via a crafted format string, as demonstrated by the...

6.3AI score0.02025EPSS
SaveExploits0References6
osv_debian
osv_debian
•added 2010/06/01 8:30 p.m.•14 views

DEBIAN-CVE-2009-4880

Multiple integer overflows in the strfmon implementation in the GNU C Library aka glibc or libc6 2.10.1 and earlier allow context-dependent attackers to cause a denial of service memory consumption or application crash via a crafted format string, as demonstrated by a crafted first argument to th...

5CVSS6.7AI score0.11222EPSS
SaveExploits2References1
osv_cve
osv_cve
•added 2010/06/01 8:30 p.m.•25 views

CVE-2009-4880

Multiple integer overflows in the strfmon implementation in the GNU C Library aka glibc or libc6 2.10.1 and earlier allow context-dependent attackers to cause a denial of service memory consumption or application crash via a crafted format string, as demonstrated by a crafted first argument to th...

6.2AI score0.11222EPSS
SaveExploits2References14
osv_debian
osv_debian
•added 2010/06/01 8:30 p.m.•16 views

DEBIAN-CVE-2009-4881

Integer overflow in the vstrfmonl function in stdlib/strfmonl.c in the strfmon implementation in the GNU C Library aka glibc or libc6 before 2.10.1 allows context-dependent attackers to cause a denial of service application crash via a crafted format string, as demonstrated by the...

5CVSS7AI score0.02025EPSS
SaveExploits0References1
Prion
Prion
•added 2010/06/01 8:30 p.m.•39 views

Integer overflow

Multiple integer overflows in the strfmon implementation in the GNU C Library aka glibc or libc6 2.10.1 and earlier allow context-dependent attackers to cause a denial of service memory consumption or application crash via a crafted format string, as demonstrated by a crafted first argument to th...

5CVSS6.2AI score0.18795EPSS
SaveExploits5References13Affected Software1
Prion
Prion
•added 2010/06/01 8:30 p.m.•38 views

Integer overflow

Integer overflow in the vstrfmonl function in stdlib/strfmonl.c in the strfmon implementation in the GNU C Library aka glibc or libc6 before 2.10.1 allows context-dependent attackers to cause a denial of service application crash via a crafted format string, as demonstrated by the...

5CVSS6.5AI score0.18795EPSS
SaveExploits3References6Affected Software1
CVE
CVE
•added 2010/06/01 8:00 p.m.•105 views

CVE-2009-4881

CVE-2009-4881 is a glibc (GNU C Library) vulnerability describing an integer overflow in the __vstrfmon_l function of strfmon_l.c, prior to glibc-2.10.1. The connected advisories (Gentoo GLSA-201011-01, openSUSE/SUSE updates) group it with several related glibc flaws (CVE-2008-1391, 2010-0296, 20...

5CVSS6.4AI score0.02025EPSS
SaveExploits0References6Affected Software1
Cvelist
Cvelist
•added 2010/06/01 8:00 p.m.•51 views

CVE-2009-4881

Integer overflow in the vstrfmonl function in stdlib/strfmonl.c in the strfmon implementation in the GNU C Library aka glibc or libc6 before 2.10.1 allows context-dependent attackers to cause a denial of service application crash via a crafted format string, as demonstrated by the...

6.2AI score0.02025EPSS
SaveExploits0References6
Rows per page
Query Builder