Lucene search
+L

3415 matches found

Zero Day Initiative
Zero Day Initiative
added 2008/02/11 12:00 a.m.41 views

Novell Client NWSPOOL.DLL EnumPrinters Stack Overflow Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on systems with vulnerable installations of the Novell Netware Client. Authentication is not required to exploit this vulnerability. The specific flaw exists in nwspool.dll which is responsible for handling RPC requests through...

10CVSS4.9AI score0.23186EPSS
SaveExploits6References1
myhack58
myhack58
added 2008/01/13 12:00 a.m.26 views

Catch broilers simple method-vulnerability warning-the black bar safety net

Now you hands should have their own horsepcshare generate room endof the bar,if the test horse??? This test would not have said,We have to really go catch a chicken before. Want to catch the chicken,must be to let someone else computer running your own horse. The issue came out,everyone is new...

SaveExploits0
UbuntuCve
UbuntuCve
added 2007/12/18 1:46 a.m.39 views

CVE-2007-6283

Red Hat Enterprise Linux 5 and Fedora install the Bind /etc/rndc.key file with world-readable permissions, which allows local users to perform unauthorized named commands, such as causing a denial of service by stopping named...

4.9CVSS6.8AI score0.00421EPSS
SaveExploits0References1
NVD
NVD
added 2007/12/18 1:46 a.m.30 views

CVE-2007-6283

Red Hat Enterprise Linux 5 and Fedora install the Bind /etc/rndc.key file with world-readable permissions, which allows local users to perform unauthorized named commands, such as causing a denial of service by stopping named...

4.9CVSS8AI score0.00421EPSS
SaveExploits0References7
OSV
OSV
added 2007/12/03 8:46 p.m.5 views

DEBIAN-CVE-2006-7226

Perl-Compatible Regular Expression PCRE library before 6.7 does not properly calculate the compiled memory allocation for regular expressions that involve a quantified "subpattern containing a named recursion or subroutine reference," which allows context-dependent attackers to cause a denial of...

4.3CVSS6.8AI score0.01604EPSS
SaveExploits0References1
Debian CVE
Debian CVE
added 2007/12/03 8:00 p.m.43 views

CVE-2006-7226

Perl-Compatible Regular Expression PCRE library before 6.7 does not properly calculate the compiled memory allocation for regular expressions that involve a quantified "subpattern containing a named recursion or subroutine reference," which allows context-dependent attackers to cause a denial of...

4.3CVSS6.1AI score0.01604EPSS
SaveExploits0
RedHat Linux
RedHat Linux
added 2007/11/29 3:06 p.m.13 views

pcre miscalculation of memory requirements for repeated subpattern containing a named recursion or subroutine reference

Perl-Compatible Regular Expression PCRE library before 6.7 does not properly calculate the compiled memory allocation for regular expressions that involve a quantified "subpattern containing a named recursion or subroutine reference," which allows context-dependent attackers to cause a denial of...

4.3CVSS5.8AI score0.01604EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
added 2007/11/29 2:50 p.m.10 views

pcre miscalculation of memory requirements for repeated subpattern containing a named recursion or subroutine reference

Perl-Compatible Regular Expression PCRE library before 6.7 does not properly calculate the compiled memory allocation for regular expressions that involve a quantified "subpattern containing a named recursion or subroutine reference," which allows context-dependent attackers to cause a denial of...

4.3CVSS5.8AI score0.01604EPSS
SaveExploits0References4
OSV
OSV
added 2007/11/14 9:46 p.m.5 views

DEBIAN-CVE-2006-7227

Integer overflow in Perl-Compatible Regular Expression PCRE library before 6.7 allows context-dependent attackers to execute arbitrary code via a regular expression containing a large number of named subpatterns namecount or long subpattern names maxnamesize, which triggers a buffer overflow. NOT...

6.8CVSS8.4AI score0.03503EPSS
SaveExploits0References1
Debian CVE
Debian CVE
added 2007/11/14 9:00 p.m.34 views

CVE-2005-4872

Perl-Compatible Regular Expression PCRE library before 6.2 does not properly count the number of named capturing subpatterns, which allows context-dependent attackers to cause a denial of service crash via a regular expression with a large number of named subpatterns, which triggers a buffer...

4.3CVSS6.3AI score0.02321EPSS
SaveExploits0
RedHat Linux
RedHat Linux
added 2007/11/10 4:20 a.m.9 views

pcre incorrect memory requirement computation

Perl-Compatible Regular Expression PCRE library before 6.2 does not properly count the number of named capturing subpatterns, which allows context-dependent attackers to cause a denial of service crash via a regular expression with a large number of named subpatterns, which triggers a buffer...

4.3CVSS6.1AI score0.02321EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
added 2007/11/10 4:20 a.m.11 views

pcre integer overflow

Integer overflow in Perl-Compatible Regular Expression PCRE library before 6.7 allows context-dependent attackers to execute arbitrary code via a regular expression containing a large number of named subpatterns namecount or long subpattern names maxnamesize, which triggers a buffer overflow. NOT...

6.8CVSS6.5AI score0.03503EPSS
SaveExploits0References4
Prion
Prion
added 2007/10/16 12:17 a.m.29 views

Default configuration

libgssapi before 0.6-13.7, as used by the ISC BIND named daemon in SUSE Linux Enterprise Server 10 SP 1, terminates upon an initialization error, which allows remote attackers to cause a denial of service daemon exit via a GSS-TSIG request. NOTE: this issue probably affects other daemons that...

7.8CVSS7.1AI score0.02603EPSS
SaveExploits0References5Affected Software1
UbuntuCve
UbuntuCve
added 2007/10/16 12:17 a.m.51 views

CVE-2007-5471

libgssapi before 0.6-13.7, as used by the ISC BIND named daemon in SUSE Linux Enterprise Server 10 SP 1, terminates upon an initialization error, which allows remote attackers to cause a denial of service daemon exit via a GSS-TSIG request. NOTE: this issue probably affects other daemons that...

7.8CVSS6AI score0.02603EPSS
SaveExploits0References1
NVD
NVD
added 2007/10/16 12:17 a.m.31 views

CVE-2007-5471

libgssapi before 0.6-13.7, as used by the ISC BIND named daemon in SUSE Linux Enterprise Server 10 SP 1, terminates upon an initialization error, which allows remote attackers to cause a denial of service daemon exit via a GSS-TSIG request. NOTE: this issue probably affects other daemons that...

7.8CVSS6.6AI score0.02603EPSS
SaveExploits0References5
CVE
CVE
added 2007/10/16 12:00 a.m.66 views

CVE-2007-5471

CVE-2007-5471 affects libgssapi before 0.6-13.7 used by the ISC BIND named daemon in SUSE Linux Enterprise Server 10 SP1. The library terminates on an initialization error, allowing remote attackers to cause a denial of service (daemon exit) via a GSS-TSIG request. The issue probably affects othe...

7.8CVSS6.6AI score0.02603EPSS
SaveExploits0References5Affected Software1
Tenable Nessus
Tenable Nessus
added 2007/08/02 12:00 a.m.24 views

FreeBSD : FreeBSD -- Predictable query ids in named(8) (3de342fb-40be-11dc-aeac-02e0185f8d72)

When named8 is operating as a recursive DNS server or sending NOTIFY requests to slave DNS servers, named8 uses a predictable query id. Impact : An attacker who can see the query id for some requests sent by named8 is likely to be able to perform DNS cache poisoning by predicting the query id for...

4.3CVSS6.5AI score0.1309EPSS
SaveExploits1References2
FreeBSD
FreeBSD
added 2007/07/24 12:00 a.m.36 views

FreeBSD -- Predictable query ids in named(8)

Problem Description: When named8 is operating as a recursive DNS server or sending NOTIFY requests to slave DNS servers, named8 uses a predictable query id. Impact: An attacker who can see the query id for some requests sent by named8 is likely to be able to perform DNS cache poisoning by...

4.3CVSS7.8AI score0.1309EPSS
SaveExploits1
Saint
Saint
added 2007/05/24 12:00 a.m.85 views

Microsoft Excel Named Graph record buffer overflow

Added: 05/24/2007 CVE: CVE-2007-0215 BID: 23760 OSVDB: 34393 Background Microsoft Excel, part of the Microsoft Office product suite, is a spreadsheet application for Windows platforms. Problem A buffer overflow vulnerability in Microsoft Excel allows command execution when a user opens a speciall...

7.6CVSS6.7AI score0.31546EPSS
SaveExploits4
Saint
Saint
added 2007/05/24 12:00 a.m.76 views

Microsoft Excel Named Graph record buffer overflow

Added: 05/24/2007 CVE: CVE-2007-0215 BID: 23760 OSVDB: 34393 Background Microsoft Excel, part of the Microsoft Office product suite, is a spreadsheet application for Windows platforms. Problem A buffer overflow vulnerability in Microsoft Excel allows command execution when a user opens a speciall...

7.6CVSS6.8AI score0.31546EPSS
SaveExploits4
Rows per page
Query Builder