Lucene search
+L

5054 matches found

Tenable Nessus
Tenable Nessus
•added 2012/08/01 12:00 a.m.•59 views

Scientific Linux Security Update : php on SL4.x i386/x86_64 (20120130)

PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. It was found that the hashing routine used by PHP arrays was susceptible to predictable hash collisions. If an HTTP POST request to a PHP application contained many parameters whose names map to the same hash...

6.4CVSS6.8AI score0.8337EPSS
SaveExploits23References6
Tenable Nessus
Tenable Nessus
•added 2012/08/01 12:00 a.m.•34 views

Scientific Linux Security Update : t1lib on SL6.x i386/x86_64 (20120124)

The t1lib library allows you to rasterize bitmaps from PostScript Type 1 fonts. Two heap-based buffer overflow flaws were found in the way t1lib processed Adobe Font Metrics AFM files. If a specially crafted font file was opened by an application linked against t1lib, it could cause the applicati...

7.6CVSS6.3AI score0.1427EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
•added 2012/07/31 12:00 a.m.•9 views

PT-2012-4302

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 21.0.1180.57 on Mac OS X and Linux Google Chrome versions prior to 21.0.1180.60 on Windows and Chrome Frame Description The issue is an off-by-one error in the GIF decoder, allowing remote attackers to cause a...

4.3CVSS0.01183EPSS
SaveExploits0References6
OpenVAS
OpenVAS
•added 2012/07/30 12:00 a.m.•45 views

CentOS Update for t1lib CESA-2012:0062 centos6

Check for the Version of t1lib OpenVAS Vulnerability Test CentOS Update for t1lib CESA-2012:0062 centos6 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

7.6CVSS0.2AI score0.1427EPSS
SaveExploits0References2
OpenVAS
OpenVAS
•added 2012/07/30 12:00 a.m.•39 views

CentOS Update for kpathsea CESA-2012:0137 centos6

Check for the Version of kpathsea OpenVAS Vulnerability Test CentOS Update for kpathsea CESA-2012:0137 centos6 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it unde...

7.6CVSS0.1AI score0.1427EPSS
SaveExploits0References2
OpenVAS
OpenVAS
•added 2012/07/30 12:00 a.m.•37 views

CentOS Update for kernel CESA-2011:0163 centos5 x86_64

Check for the Version of kernel OpenVAS Vulnerability Test CentOS Update for kernel CESA-2011:0163 centos5 x8664 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

7.1CVSS0.6AI score0.02523EPSS
SaveExploits0References2
OpenVAS
OpenVAS
•added 2012/07/30 12:00 a.m.•31 views

CentOS Update for bind97 CESA-2011:0845 centos5 x86_64

Check for the Version of bind97 OpenVAS Vulnerability Test CentOS Update for bind97 CESA-2011:0845 centos5 x8664 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

5CVSS8.8AI score0.24638EPSS
SaveExploits1References2
OpenVAS
OpenVAS
•added 2012/07/30 12:00 a.m.•38 views

CentOS Update for kpathsea CESA-2012:0137 centos6

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

7.6CVSS5.2AI score0.1427EPSS
SaveExploits0References2
OpenVAS
OpenVAS
•added 2012/07/30 12:00 a.m.•55 views

CentOS Update for php CESA-2012:0033 centos5

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

7.5CVSS7.1AI score0.8337EPSS
SaveExploits26References2
NVD
NVD
•added 2012/07/22 5:55 p.m.•28 views

CVE-2011-3464

Off-by-one error in the pngformattedwarning function in pngerror.c in libpng 1.5.4 through 1.5.7 might allow remote attackers to cause a denial of service application crash and possibly execute arbitrary code via unspecified vectors, which trigger a stack-based buffer overflow...

7.5CVSS9AI score0.0313EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2012/07/22 5:00 p.m.•35 views

CVE-2011-3464

Off-by-one error in the pngformattedwarning function in pngerror.c in libpng 1.5.4 through 1.5.7 might allow remote attackers to cause a denial of service application crash and possibly execute arbitrary code via unspecified vectors, which trigger a stack-based buffer overflow...

9AI score0.0313EPSS
SaveExploits0References4
Mend
Mend
•added 2012/07/22 5:00 p.m.•2 views

CVE-2011-3464

Off-by-one error in the pngformattedwarning function in pngerror.c in libpng 1.5.4 through 1.5.7 might allow remote attackers to cause a denial of service application crash and possibly execute arbitrary code via unspecified vectors, which trigger a stack-based buffer overflow...

7.5CVSS0.0313EPSS
SaveExploits0References4
CVE
CVE
•added 2012/07/22 5:00 p.m.•64 views

CVE-2011-3464

CVE-2011-3464 concerns libpng 1.5.4–1.5.7, where an off-by-one error in png_formatted_warning in pngerror.c can trigger a stack-based buffer overflow, allowing a remote attacker to cause an application crash and potentially execute arbitrary code. Fed/OSS advisories indicate a fix was applied in ...

7.5CVSS8.9AI score0.0313EPSS
SaveExploits0References4Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2012/07/22 12:00 a.m.•4 views

CVE-2011-3464: Undefined Security Weakness

Off-by-one error in the pngformattedwarning function in pngerror.c in libpng 1.5.4 through 1.5.7 might allow remote attackers to cause a denial of service application crash and possibly execute arbitrary code via unspecified vectors, which trigger a stack-based buffer overflow...

7.5CVSS6.8AI score0.0313EPSS
SaveExploits0References2
OpenVAS
OpenVAS
•added 2012/07/16 12:00 a.m.•35 views

Mandriva Update for libexif MDVSA-2012:106 (libexif)

Check for the Version of libexif OpenVAS Vulnerability Test Mandriva Update for libexif MDVSA-2012:106 libexif Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it unde...

7.5CVSS0.7AI score0.07557EPSS
SaveExploits0References2
OSV
OSV
•added 2012/07/13 10:34 a.m.•9 views

ALPINE-CVE-2012-2840

Off-by-one error in the exifconvertutf16toutf8 function in exif-entry.c in the EXIF Tag Parsing Library aka libexif before 0.6.21 allows remote attackers to cause a denial of service or possibly execute arbitrary code via crafted EXIF tags in an image...

7.5CVSS8.1AI score0.05016EPSS
SaveExploits0References1
OSV
OSV
•added 2012/07/13 10:34 a.m.•12 views

DEBIAN-CVE-2012-2840

Off-by-one error in the exifconvertutf16toutf8 function in exif-entry.c in the EXIF Tag Parsing Library aka libexif before 0.6.21 allows remote attackers to cause a denial of service or possibly execute arbitrary code via crafted EXIF tags in an image...

7.5CVSS8.1AI score0.05016EPSS
SaveExploits0References1
Prion
Prion
•added 2012/07/13 10:34 a.m.•21 views

Code injection

Off-by-one error in the exifconvertutf16toutf8 function in exif-entry.c in the EXIF Tag Parsing Library aka libexif before 0.6.21 allows remote attackers to cause a denial of service or possibly execute arbitrary code via crafted EXIF tags in an image...

7.5CVSS8.4AI score0.05016EPSS
SaveExploits0References7Affected Software1
Mend
Mend
•added 2012/07/13 10:00 a.m.•3 views

CVE-2012-2840

Off-by-one error in the exifconvertutf16toutf8 function in exif-entry.c in the EXIF Tag Parsing Library aka libexif before 0.6.21 allows remote attackers to cause a denial of service or possibly execute arbitrary code via crafted EXIF tags in an image...

7.5CVSS0.05016EPSS
SaveExploits0References8
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2012/07/13 12:00 a.m.•4 views

CVE-2012-2840: Undefined Security Weakness

Off-by-one error in the exifconvertutf16toutf8 function in exif-entry.c in the EXIF Tag Parsing Library aka libexif before 0.6.21 allows remote attackers to cause a denial of service or possibly execute arbitrary code via crafted EXIF tags in an image...

7.5CVSS6.4AI score0.05016EPSS
SaveExploits0References2
Rows per page
Query Builder