Lucene search
+L

1310 matches found

Cvelist
Cvelist
added 2015/08/15 12:00 a.m.35 views

CVE-2015-2431

Microsoft Office 2007 SP3 and 2010 SP2, Live Meeting 2007 Console, Lync 2010, Lync 2010 Attendee, Lync 2013 SP1, and Lync Basic 2013 SP1 allow remote attackers to execute arbitrary code via a crafted Office Graphics Library OGL font, aka "Microsoft Office Graphics Component Remote Code Execution...

7.7AI score0.29843EPSS
SaveExploits1References3
CNVD
CNVD
added 2015/08/13 12:00 a.m.9 views

GNOME Clutter Local Security Bypass Vulnerability

GNOME Clutter is an open source graphics library GUI and a collection of CAPIs developed by the GNOME project team that uses OpenGL for graphics rendering and is cross-platform and multi-language. A local security bypass vulnerability exists in GNOME Clutter. An attacker can exploit this...

7.2CVSS6.6AI score0.005EPSS
SaveExploits1References1
Tenable Nessus
Tenable Nessus
added 2015/08/12 12:00 a.m.353 views

MS15-080 : Vulnerabilities in Microsoft Graphics Component Could Allow Remote Code Execution (3078662)

The remote Windows host is affected by multiple vulnerabilities : - Multiple remote code execution vulnerabilities exist due to the Windows Adobe Type Manager Library not properly handling specially crafted OpenType fonts. An attacker can exploit these, by using a crafted document or web page wit...

9.3CVSS8.9AI score0.37429EPSS
SaveExploits38References17
RedHat Linux
RedHat Linux
added 2015/06/25 8:43 a.m.17 views

php: missing null byte checks for paths in DOM and GD extensions

It was found that certain PHP functions did not properly handle file names containing a NULL character. A remote attacker could possibly use this flaw to make a PHP script access unexpected files and bypass intended file system access restrictions...

7.5CVSS7.2AI score0.03917EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
added 2015/05/06 12:00 a.m.16 views

The vulnerability of Google Chrome browser allows a malicious actor to trigger a service denial.

The vulnerability in Google Chrome’s GPU/Blink/webGraphicsContext3dimpl.cc WebGL implementation allows a remote attacker to cause a service failure access outside of the boundary. This can be accomplished by using a specially crafted WebGL program, which triggers a state of uncertainty...

5CVSS8AI score0.0123EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2015/04/28 12:00 a.m.14 views

The vulnerability of the OpenSUSE operating system allows malicious actors to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the xorg-x11-libs-32bit package on the OpenSUSE operating system can lead to violations of privacy, integrity, and accessibility of protected information. This vulnerability can be exploited remotely...

9.3CVSS7.1AI score0.08355EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2015/04/28 12:00 a.m.10 views

The vulnerability of the Red Hat Enterprise Linux operating system allows a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the mesa-libGL-6.5.1 package for the Red Hat Enterprise Linux operating system can lead to violations of confidentiality, integrity, and accessibility of protected information. This vulnerability can be exploited remotely...

6.8CVSS5.4AI score0.02687EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2015/04/28 12:00 a.m.11 views

The vulnerability of the OpenSUSE operating system allows malicious actors to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the Mesa-libEGL1-32bit package for the OpenSUSE operating system can lead to violations of confidentiality, integrity, and accessibility of protected information. This vulnerability can be exploited remotely...

6.8CVSS5.4AI score0.02609EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2015/04/28 12:00 a.m.10 views

The vulnerability of the OpenSUSE operating system allows malicious actors to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the Mesa-libGL-devel-32bit package on the operating system openSUSE can lead to violations of confidentiality, integrity, and accessibility of protected information. This vulnerability can be exploited remotely...

6.8CVSS5.4AI score0.02609EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2015/04/28 12:00 a.m.10 views

The vulnerability of the OpenSUSE operating system allows malicious actors to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the Mesa-libGLESv1CM1-32bit package for the openSUSE operating system can lead to violations of confidentiality, integrity, and accessibility of protected information. This vulnerability can be exploited remotely...

6.8CVSS5.4AI score0.02609EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2015/04/28 12:00 a.m.9 views

The vulnerability of the CentOS operating system allows a malicious attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the gd-2.0.33 package for the CentOS operating system can lead to violations of confidentiality, integrity, and accessibility of protected information. This vulnerability can be exploited remotely...

9.3CVSS6.5AI score0.1021EPSS
SaveExploits0References2Affected Software1
Debian
Debian
added 2015/04/08 5:24 p.m.65 views

[SECURITY] [DLA 189-1] libgd2 security update

Package : libgd2 Version : 2.0.36rc1dfsg-5+deb6u1 CVE ID : CVE-2014-2497 CVE-2014-9709 Debian Bug : 744719 Multiple vulnerabilities were discovered in libgd2, a graphics library: CVE-2014-2497 The gdImageCreateFromXpm function would try to dereference a NULL pointer when reading an XPM file with ...

5CVSS8.4AI score0.20186EPSS
SaveExploits4
securityvulns
securityvulns
added 2015/04/07 12:00 a.m.100 views

[SECURITY] [DSA 3215-1] libgd2 security update

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 - ------------------------------------------------------------------------- Debian Security Advisory DSA-3215-1 [email protected] http://www.debian.org/security/ Alessandro Ghedini April 06, 2015 http://www.debian.org/security/faq -...

5CVSS2AI score0.20186EPSS
SaveExploits4
Debian
Debian
added 2015/04/06 6:33 p.m.40 views

[SECURITY] [DSA 3215-1] libgd2 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3215-1 [email protected] http://www.debian.org/security/ Alessandro Ghedini April 06, 2015 http://www.debian.org/security/faq -...

5CVSS2.7AI score0.20186EPSS
SaveExploits4
OpenVAS
OpenVAS
added 2015/04/06 12:00 a.m.36 views

Debian Security Advisory DSA 3215-1 (libgd2 - security update)

Multiple vulnerabilities were discovered in libgd2, a graphics library: CVE-2014-2497 The gdImageCreateFromXpm function would try to dereference a NULL pointer when reading an XPM file with a special color table. This could allow remote attackers to cause a denial of service crash via crafted XPM...

5CVSS8.3AI score0.20186EPSS
SaveExploits4References1
CNVD
CNVD
added 2015/03/31 12:00 a.m.6 views

PHP GD GetCode_Denial of Service Vulnerability

PHP is a popular programming language. The GetCode function in gdgifin.c in PHP GD fails to properly handle GIF images, allowing remote attackers to exploit the vulnerability to construct malicious files that can be parsed by the user, which can be used in denial of service or arbitrary code...

5CVSS8AI score0.15425EPSS
SaveExploits1References1
OSV
OSV
added 2015/03/30 12:00 a.m.25 views

UBUNTU-CVE-2014-9709

The GetCode function in gdgifin.c in GD 2.1.1 and earlier, as used in PHP before 5.5.21 and 5.6.x before 5.6.5, allows remote attackers to cause a denial of service buffer over-read and application crash via a crafted GIF image that is improperly handled by the gdImageCreateFromGif function...

5CVSS6.8AI score0.15425EPSS
SaveExploits1References4
OSV
OSV
added 2015/03/24 4:14 p.m.17 views

SUSE-SU-2015:0835-1 Security update for gd

The graphics drawing library gd has been updated to fix one security issue: possible buffer read overflow CVE-2014-9709 Security Issues: CVE-2014-9709...

5CVSS7.8AI score0.15425EPSS
SaveExploits1References3
Tenable Nessus
Tenable Nessus
added 2015/03/24 12:00 a.m.42 views

openSUSE Security Update : seamonkey (openSUSE-2015-250)

SeaMonkey was updated to 2.33 bnc917597 - MFSA 2015-11/CVE-2015-0835/CVE-2015-0836 Miscellaneous memory safety hazards - MFSA 2015-12/CVE-2015-0833 bmo945192 Invoking Mozilla updater will load locally stored DLL files Windows only - MFSA 2015-13/CVE-2015-0832 bmo1065909 Appended period to hostnam...

7.5CVSS7.2AI score0.06029EPSS
SaveExploits0References19
Tenable Nessus
Tenable Nessus
added 2015/03/17 12:00 a.m.42 views

Mozilla Firefox < 36.0 Multiple Vulnerabilities

Binary data 8653.prm...

7.5CVSS7.4AI score0.06029EPSS
SaveExploits0References35
Rows per page
Query Builder