Lucene search
K

197 matches found

Tenable Nessus
Tenable Nessus
added 2013/05/08 12:0 a.m.74 views

FreeBSD : nginx -- multiple vulnerabilities (efaa4071-b700-11e2-b1b9-f0def16c5c1b)

The nginx project reports : A stack-based buffer overflow might occur in a worker process process while handling a specially crafted request, potentially resulting in arbitrary code execution. CVE-2013-2028 A security problem related to CVE-2013-2028 was identified, affecting some previous nginx...

7.5CVSS6.1AI score0.93039EPSS
Exploits18References5
FreeBSD
FreeBSD
added 2013/05/07 12:0 a.m.41 views

nginx -- multiple vulnerabilities

The nginx project reports: A stack-based buffer overflow might occur in a worker process process while handling a specially crafted request, potentially resulting in arbitrary code execution. CVE-2013-2028 A security problem related to CVE-2013-2028 was identified, affecting some previous nginx...

7.5CVSS7.4AI score0.93039EPSS
Exploits18References2
NVD
NVD
added 2012/04/17 9:55 p.m.17 views

CVE-2012-1180

Use-after-free vulnerability in nginx before 1.0.14 and 1.1.x before 1.1.17 allows remote HTTP servers to obtain sensitive information from process memory via a crafted backend response, in conjunction with a client request...

5CVSS5.7AI score0.04101EPSS
Exploits1References21
UbuntuCve
UbuntuCve
added 2012/04/17 9:55 p.m.32 views

CVE-2012-1180

Use-after-free vulnerability in nginx before 1.0.14 and 1.1.x before 1.1.17 allows remote HTTP servers to obtain sensitive information from process memory via a crafted backend response, in conjunction with a client request...

5CVSS5.8AI score0.04101EPSS
Exploits1References1
Cvelist
Cvelist
added 2012/04/17 9:0 p.m.31 views

CVE-2012-1180

Use-after-free vulnerability in nginx before 1.0.14 and 1.1.x before 1.1.17 allows remote HTTP servers to obtain sensitive information from process memory via a crafted backend response, in conjunction with a client request...

5.7AI score0.04101EPSS
Exploits1References21
Amazon
Amazon
added 2012/04/05 12:0 a.m.35 views

Medium: nginx

Issue Overview: Use-after-free vulnerability in nginx before 1.0.14 and 1.1.x before 1.1.17 allows remote HTTP servers to obtain sensitive information from process memory via a crafted backend response, in conjunction with a client request. Affected Packages: nginx Issue Correction: Run yum updat...

5CVSS6.4AI score0.04101EPSS
Exploits1
securityvulns
securityvulns
added 2011/10/20 12:0 a.m.212 views

Multiple HTTP servers DoS

Range: header processing can lead to memory exhaustion...

7.8CVSS1.4AI score0.90456EPSS
Exploits19References3Affected Software1
OpenVAS
OpenVAS
added 2010/11/16 12:0 a.m.17 views

Fedora Update for perl-libwww-perl FEDORA-2010-15532

Check for the Version of perl-libwww-perl OpenVAS Vulnerability Test Fedora Update for perl-libwww-perl FEDORA-2010-15532 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or...

6.8CVSS6.4AI score0.01131EPSS
Exploits0References2
Fedora
Fedora
added 2010/11/02 10:18 p.m.25 views

[SECURITY] Fedora 13 Update: perl-libwww-perl-5.837-2.fc13

The libwww-perl collection is a set of Perl modules which provides a simple and consistent application programming interface to the World-Wide Web. The ma in focus of the library is to provide classes and functions that allow you to write WWW clients. The library also contain modules that are of...

6.8CVSS6.4AI score0.01131EPSS
Exploits0
Fedora
Fedora
added 2010/11/02 10:14 p.m.28 views

[SECURITY] Fedora 14 Update: perl-libwww-perl-5.837-2.fc14

The libwww-perl collection is a set of Perl modules which provides a simple and consistent application programming interface to the World-Wide Web. The ma in focus of the library is to provide classes and functions that allow you to write WWW clients. The library also contain modules that are of...

6.8CVSS6.4AI score0.01131EPSS
Exploits0
NVD
NVD
added 2010/02/18 5:30 p.m.30 views

CVE-2010-0556

browser/login/loginprompt.cc in Google Chrome before 4.0.249.89 populates an authentication dialog with credentials that were stored by Password Manager for a different web site, which allows user-assisted remote HTTP servers to obtain sensitive information via a URL that requires authentication,...

4.3CVSS5.8AI score0.00314EPSS
Exploits0References12
CVE
CVE
added 2010/02/18 5:0 p.m.65 views

CVE-2010-0556

CVE-2010-0556 describes a cross-origin weakness in Google Chrome’s Password Manager where credentials stored for one site could be populated into an authentication dialog triggered by a third-party page (demonstrated via IMG src). Affected versions include Chrome 3.0.195.38 and 4.0.249.78; Chrome...

4.3CVSS5.8AI score0.00314EPSS
Exploits0References12Affected Software1
Cvelist
Cvelist
added 2010/02/18 5:0 p.m.35 views

CVE-2010-0556

browser/login/loginprompt.cc in Google Chrome before 4.0.249.89 populates an authentication dialog with credentials that were stored by Password Manager for a different web site, which allows user-assisted remote HTTP servers to obtain sensitive information via a URL that requires authentication,...

5.7AI score0.00314EPSS
Exploits0References12
Debian CVE
Debian CVE
added 2010/02/18 5:0 p.m.25 views

CVE-2010-0556

Removed by vendor...

4.3CVSS6.7AI score0.00314EPSS
Exploits0
Fedora
Fedora
added 2009/12/03 4:56 a.m.33 views

[SECURITY] Fedora 11 Update: wget-1.12-2.fc11

GNU Wget is a file retrieval utility which can use either the HTTP or FTP protocols. Wget features include the ability to work in the background while you are logged out, recursive retrieval of directories, file name wildcard matching, remote file timestamp storage and comparison, use of Rest wit...

6.8CVSS1AI score0.01831EPSS
Exploits1
Fedora
Fedora
added 2009/12/03 4:56 a.m.29 views

[SECURITY] Fedora 12 Update: wget-1.12-2.fc12

GNU Wget is a file retrieval utility which can use either the HTTP or FTP protocols. Wget features include the ability to work in the background while you are logged out, recursive retrieval of directories, file name wildcard matching, remote file timestamp storage and comparison, use of Rest wit...

6.8CVSS1AI score0.01831EPSS
Exploits1
Prion
Prion
added 2009/06/23 9:30 p.m.15 views

Buffer overflow

Buffer overflow in the browser kernel in Google Chrome before 2.0.172.33 allows remote HTTP servers to cause a denial of service application crash or possibly execute arbitrary code via a crafted response...

9.3CVSS8.3AI score0.00858EPSS
Exploits2References8Affected Software1
NVD
NVD
added 2009/06/23 9:30 p.m.25 views

CVE-2009-2121

Buffer overflow in the browser kernel in Google Chrome before 2.0.172.33 allows remote HTTP servers to cause a denial of service application crash or possibly execute arbitrary code via a crafted response...

9.3CVSS7.7AI score0.00858EPSS
Exploits2References8
ThreatPost
ThreatPost
added 2009/06/23 11:47 a.m.10 views

Google Fixes Critical Flaw in Chrome Browser

Google has released a new version of its Chrome browser, which includes a fix for a serious buffer overflow vulnerability. The vulnerability in Chrome lies in the way that the browser handles certain responses from HTTP servers. Version 2.0.172.33 of Chrome is available now, although Google is no...

2AI score
Exploits0References4
OpenVAS
OpenVAS
added 2009/04/09 12:0 a.m.25 views

Mandriva Update for apache MDVSA-2008:195 (apache)

Check for the Version of apache OpenVAS Vulnerability Test Mandriva Update for apache MDVSA-2008:195 apache Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under t...

5CVSS0.2AI score0.6456EPSS
Exploits5References2
Rows per page
Query Builder