Lucene search
+L

1088 matches found

Mend
Mend
•added 2013/06/08 10:00 a.m.•2 views

CVE-2011-4098

The fallocate implementation in the GFS2 filesystem in the Linux kernel before 3.2 relies on the page cache, which might allow local users to cause a denial of service by preallocating blocks in certain situations involving insufficient memory...

2.9CVSS0.00481EPSS
SaveExploits0References5
Debian CVE
Debian CVE
•added 2013/06/08 10:00 a.m.•48 views

CVE-2011-4098

The fallocate implementation in the GFS2 filesystem in the Linux kernel before 3.2 relies on the page cache, which might allow local users to cause a denial of service by preallocating blocks in certain situations involving insufficient memory...

1.9CVSS5.9AI score0.00481EPSS
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2013/06/08 12:00 a.m.•3 views

CVE-2011-4098: Improper Restriction of Operations within the Bounds of a Memory Buffer

The fallocate implementation in the GFS2 filesystem in the Linux kernel before 3.2 relies on the page cache, which might allow local users to cause a denial of service by preallocating blocks in certain situations involving insufficient memory...

1.9CVSS5.8AI score0.00481EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2009/07/08 12:00 a.m.•4 views

CVE-2009-2374: Undefined Security Weakness

Drupal 5.x before 5.19 and 6.x before 6.13 does not properly sanitize failed login attempts for pages that contain a sortable table, which includes the username and password in links that can be read from 1 the HTTP referer header of external web sites that are visited from those links or 2 when...

4.3CVSS5.8AI score0.01396EPSS
SaveExploits0References2
FreeBSD
FreeBSD
•added 2009/07/01 12:00 a.m.•40 views

drupal -- multiple vulnerabilities

The Drupal Security Team reports: Cross-site scripting The Forum module does not correctly handle certain arguments obtained from the URL. By enticing a suitably privileged user to visit a specially crafted URL, a malicious user is able to insert arbitrary HTML and script code into forum pages...

6.5CVSS6.4AI score0.02308EPSS
SaveExploits0References2
NVD
NVD
•added 2008/11/17 6:18 p.m.•31 views

CVE-2008-3644

Apple Safari before 3.2 does not properly prevent caching of form data for form fields that have autocomplete disabled, which allows local users to obtain sensitive information by reading the browser's page cache...

1.9CVSS5.2AI score0.00322EPSS
SaveExploits1References9
Prion
Prion
•added 2008/11/17 6:18 p.m.•29 views

Design/Logic Flaw

Apple Safari before 3.2 does not properly prevent caching of form data for form fields that have autocomplete disabled, which allows local users to obtain sensitive information by reading the browser's page cache...

1.9CVSS5.3AI score0.00322EPSS
SaveExploits1References9Affected Software1
Cvelist
Cvelist
•added 2008/11/17 6:00 p.m.•38 views

CVE-2008-3644

Apple Safari before 3.2 does not properly prevent caching of form data for form fields that have autocomplete disabled, which allows local users to obtain sensitive information by reading the browser's page cache...

5.1AI score0.00322EPSS
SaveExploits1References9
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2008/11/17 12:00 a.m.•7 views

CVE-2008-3644: Exposure of Sensitive Information to an Unauthorized Actor

Apple Safari before 3.2 does not properly prevent caching of form data for form fields that have autocomplete disabled, which allows local users to obtain sensitive information by reading the browser's page cache...

1.9CVSS5.8AI score0.00322EPSS
SaveExploits1References2
RedHat Linux
RedHat Linux
•added 2008/11/04 10:11 a.m.•13 views

kernel: splice: fix bad unlock_page() in error case

fs/splice.c in the splice subsystem in the Linux kernel before 2.6.22.2 does not properly handle a failure of the addtopagecachelru function, and subsequently attempts to unlock a page that was not locked, which allows local users to cause a denial of service kernel BUG and system crash, as...

5.5CVSS6.1AI score0.00616EPSS
SaveExploits2References4
RedHat Linux
RedHat Linux
•added 2007/03/14 5:02 a.m.•13 views

security flaw

The page cache feature in Mozilla Firefox before 1.5.0.10 and 2.x before 2.0.0.2, and SeaMonkey before 1.0.8 can generate hash collisions that cause page data to be appended to the wrong page cache, which allows remote attackers to obtain sensitive information or enable further attack vectors whe...

5.4CVSS5.9AI score0.03216EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
•added 2007/03/14 12:24 a.m.•11 views

security flaw

The page cache feature in Mozilla Firefox before 1.5.0.10 and 2.x before 2.0.0.2, and SeaMonkey before 1.0.8 can generate hash collisions that cause page data to be appended to the wrong page cache, which allows remote attackers to obtain sensitive information or enable further attack vectors whe...

5.4CVSS5.9AI score0.03216EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
•added 2007/03/02 6:27 p.m.•12 views

security flaw

The page cache feature in Mozilla Firefox before 1.5.0.10 and 2.x before 2.0.0.2, and SeaMonkey before 1.0.8 can generate hash collisions that cause page data to be appended to the wrong page cache, which allows remote attackers to obtain sensitive information or enable further attack vectors whe...

5.4CVSS5.9AI score0.03216EPSS
SaveExploits0References4
Prion
Prion
•added 2007/02/26 8:28 p.m.•22 views

Design/Logic Flaw

The page cache feature in Mozilla Firefox before 1.5.0.10 and 2.x before 2.0.0.2, and SeaMonkey before 1.0.8 can generate hash collisions that cause page data to be appended to the wrong page cache, which allows remote attackers to obtain sensitive information or enable further attack vectors whe...

5.4CVSS5.9AI score0.03216EPSS
SaveExploits0References50Affected Software4
UbuntuCve
UbuntuCve
•added 2007/02/26 8:28 p.m.•31 views

CVE-2007-0778

The page cache feature in Mozilla Firefox before 1.5.0.10 and 2.x before 2.0.0.2, and SeaMonkey before 1.0.8 can generate hash collisions that cause page data to be appended to the wrong page cache, which allows remote attackers to obtain sensitive information or enable further attack vectors whe...

5.4CVSS5.9AI score0.03216EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2007/02/26 8:00 p.m.•33 views

CVE-2007-0778

The page cache feature in Mozilla Firefox before 1.5.0.10 and 2.x before 2.0.0.2, and SeaMonkey before 1.0.8 can generate hash collisions that cause page data to be appended to the wrong page cache, which allows remote attackers to obtain sensitive information or enable further attack vectors whe...

5.7AI score0.03216EPSS
SaveExploits0References50
CVE
CVE
•added 2007/02/26 8:00 p.m.•99 views

CVE-2007-0778

CVE-2007-0778 affects Mozilla Firefox (and related Gecko-based browsers like SeaMonkey) prior to 1.5.0.10 / 2.x before 2.0.0.2, and SeaMonkey before 1.0.8. The vulnerability stems from the page cache implementation, where hash collisions can cause page data to be appended to the wrong cache entry...

5.4CVSS5.7AI score0.03216EPSS
SaveExploits0References50Affected Software2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2007/02/26 12:00 a.m.•5 views

CVE-2007-0778: Exposure of Sensitive Information to an Unauthorized Actor

The page cache feature in Mozilla Firefox before 1.5.0.10 and 2.x before 2.0.0.2, and SeaMonkey before 1.0.8 can generate hash collisions that cause page data to be appended to the wrong page cache, which allows remote attackers to obtain sensitive information or enable further attack vectors whe...

5.4CVSS5.8AI score0.03216EPSS
SaveExploits0References2
RedHat Linux
RedHat Linux
•added 2007/02/23 9:06 p.m.•15 views

security flaw

The page cache feature in Mozilla Firefox before 1.5.0.10 and 2.x before 2.0.0.2, and SeaMonkey before 1.0.8 can generate hash collisions that cause page data to be appended to the wrong page cache, which allows remote attackers to obtain sensitive information or enable further attack vectors whe...

5.4CVSS5.9AI score0.03216EPSS
SaveExploits0References4
Prion
Prion
•added 2007/01/09 2:28 a.m.•29 views

Code injection

Unspecified vulnerability in Drupal before 4.6.11, and 4.7 before 4.7.5, when MySQL is used, allows remote authenticated users to cause a denial of service by poisoning the page cache via unspecified vectors, which triggers erroneous 404 HTTP errors for pages that exist...

3.5CVSS6.5AI score0.01276EPSS
SaveExploits1References7Affected Software1
Rows per page
Query Builder