Lucene search
+L

5972 matches found

Positive Technologies
Positive Technologies
•added 2014/03/11 12:00 a.m.•6 views

PT-2014-1128

Name of the Vulnerable Software and Affected Versions Microsoft Internet Explorer versions 10 through 11 Description The issue is related to a use-after-free error due to insufficient validation of user-input data when handling the DOM tree, allowing remote attackers to execute arbitrary code or...

9.3CVSS0.1269EPSS
SaveExploits1References7
osv_debian
osv_debian
•added 2013/12/13 6:55 p.m.•17 views

DEBIAN-CVE-2013-6048

The getgrouptree function in lib/Munin/Master/HTMLConfig.pm in Munin before 2.0.18 allows remote nodes to cause a denial of service infinite loop and memory consumption in the munin-html process via crafted multigraph data...

5CVSS6.4AI score0.02502EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2013/12/13 12:00 a.m.•5 views

PT-2013-1074

Name of the Vulnerable Software and Affected Versions Munin versions prior to 2.0.18 Description The issue allows remote nodes to cause a denial of service, resulting in an infinite loop and memory consumption in the munin-html process. This is achieved via crafted multigraph data sent to the get...

5CVSS0.02502EPSS
SaveExploits0References19
Positive Technologies
Positive Technologies
•added 2013/12/09 12:00 a.m.•9 views

PT-2013-1414

Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 0.10 Description The issue is related to the smacker decode header tree function in libavcodec/smacker.c, which can be exploited by remote attackers using crafted Smacker data. Recommendations For versions prior to 0.1...

6.8CVSS0.02378EPSS
SaveExploits0References8
NVD
NVD
•added 2013/12/07 12:55 a.m.•19 views

CVE-2013-6635

Use-after-free vulnerability in the editing implementation in Blink, as used in Google Chrome before 31.0.1650.63, allows remote attackers to cause a denial of service or possibly have unspecified other impact via JavaScript code that triggers removal of a node during processing of the DOM tree,...

6.8CVSS7.1AI score0.01582EPSS
SaveExploits0References13
Prion
Prion
•added 2013/12/07 12:55 a.m.•31 views

Design/Logic Flaw

Use-after-free vulnerability in the editing implementation in Blink, as used in Google Chrome before 31.0.1650.63, allows remote attackers to cause a denial of service or possibly have unspecified other impact via JavaScript code that triggers removal of a node during processing of the DOM tree,...

6.8CVSS7.7AI score0.01582EPSS
SaveExploits0References13Affected Software1
Cvelist
Cvelist
•added 2013/12/07 12:00 a.m.•54 views

CVE-2013-6635

Use-after-free vulnerability in the editing implementation in Blink, as used in Google Chrome before 31.0.1650.63, allows remote attackers to cause a denial of service or possibly have unspecified other impact via JavaScript code that triggers removal of a node during processing of the DOM tree,...

7AI score0.01582EPSS
SaveExploits0References13
CVE
CVE
•added 2013/12/07 12:00 a.m.•90 views

CVE-2013-6635

CVE-2013-6635 is a use-after-free in the editing code path of Chromium/Blink (as shipped in Google Chrome prior to 31.0.1650.63). The connected openSUSE advisories confirm this issue within the Chromium browser and show the fix as part of a Chromium 31.0.1650.63 stable update. Remediation per ope...

6.8CVSS7.1AI score0.01582EPSS
SaveExploits0References13Affected Software1
Debian CVE
Debian CVE
•added 2013/12/07 12:00 a.m.•55 views

CVE-2013-6635

Use-after-free vulnerability in the editing implementation in Blink, as used in Google Chrome before 31.0.1650.63, allows remote attackers to cause a denial of service or possibly have unspecified other impact via JavaScript code that triggers removal of a node during processing of the DOM tree,...

6.8CVSS9.4AI score0.01582EPSS
SaveExploits0
Mageia
Mageia
•added 2013/11/30 9:33 p.m.•86 views

Updated busybox package fixes security vulnerability

It was found that the mdev BusyBox utility could create certain directories within /dev with world-writable permissions. A local unprivileged user could use this flaw to manipulate portions of the /dev directory tree CVE-2013-1813...

7.2CVSS2AI score0.00623EPSS
SaveExploits5References2
OpenVAS
OpenVAS
•added 2013/11/21 12:00 a.m.•39 views

RedHat Update for augeas RHSA-2013:1537-02

Check for the Version of augeas OpenVAS Vulnerability Test RedHat Update for augeas RHSA-2013:1537-02 Authors: System Generated Check Copyright: Copyright C 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the ter...

3.7CVSS0.2AI score0.00446EPSS
SaveExploits1References2
RedHat Linux
RedHat Linux
•added 2013/11/20 4:35 p.m.•18 views

wireshark: crash in STUN dissector (wnpa-sec-2012-21)

The dissectstunmessage function in epan/dissectors/packet-stun.c in the STUN dissector in Wireshark 1.4.x before 1.4.15, 1.6.x before 1.6.10, and 1.8.x before 1.8.2 does not properly interact with key-destruction behavior in a certain tree library, which allows remote attackers to cause a denial ...

3.3CVSS5.8AI score0.01913EPSS
SaveExploits1References4
UbuntuCve
UbuntuCve
•added 2013/11/13 3:55 p.m.•64 views

CVE-2013-6623

The SVG implementation in Blink, as used in Google Chrome before 31.0.1650.48, allows remote attackers to cause a denial of service out-of-bounds read by leveraging the use of tree order, rather than transitive dependency order, for layout...

4.3CVSS7.2AI score0.01448EPSS
SaveExploits0References4
Prion
Prion
•added 2013/11/13 3:55 p.m.•31 views

Out-of-bounds

The SVG implementation in Blink, as used in Google Chrome before 31.0.1650.48, allows remote attackers to cause a denial of service out-of-bounds read by leveraging the use of tree order, rather than transitive dependency order, for layout...

4.3CVSS6.6AI score0.01448EPSS
SaveExploits0References9Affected Software1
Cvelist
Cvelist
•added 2013/11/13 3:00 p.m.•42 views

CVE-2013-6623

The SVG implementation in Blink, as used in Google Chrome before 31.0.1650.48, allows remote attackers to cause a denial of service out-of-bounds read by leveraging the use of tree order, rather than transitive dependency order, for layout...

5.9AI score0.01448EPSS
SaveExploits0References9
Debian CVE
Debian CVE
•added 2013/11/13 3:00 p.m.•42 views

CVE-2013-6623

The SVG implementation in Blink, as used in Google Chrome before 31.0.1650.48, allows remote attackers to cause a denial of service out-of-bounds read by leveraging the use of tree order, rather than transitive dependency order, for layout...

4.3CVSS9.4AI score0.01448EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
•added 2013/11/13 12:00 a.m.•57 views

Fedora 18 : kernel-3.11.7-100.fc18 (2013-20748)

The 3.11.7 stable update contains a number of important fixes across the tree Various bug and CVE fixes The 3.11.6 stable update contains a number of fixes across the tree. The 3.11.5 stable update contains a number of important fixes across the tree. Note that Tenable Network Security has...

7.1CVSS6.8AI score0.09408EPSS
SaveExploits2References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2013/11/13 12:00 a.m.•5 views

CVE-2013-6623: Improper Restriction of Operations within the Bounds of a Memory Buffer

The SVG implementation in Blink, as used in Google Chrome before 31.0.1650.48, allows remote attackers to cause a denial of service out-of-bounds read by leveraging the use of tree order, rather than transitive dependency order, for layout...

4.3CVSS5.8AI score0.01448EPSS
SaveExploits0References2
zdt
zdt
•added 2013/10/15 12:00 a.m.•104 views

MS13-080 Microsoft Internet Explorer CDisplayPointer Use-After-Free

This Metasploit module exploits a vulnerability found in Microsoft Internet Explorer. It was originally found being exploited in the wild targeting Japanese and Korean IE8 users on Windows XP, around the same time frame as CVE-2013-3893, except this was kept out of the public eye by multiple...

9.3CVSS7.2AI score0.87639EPSS
SaveExploits23
Metasploit
Metasploit
•added 2013/10/08 12:00 a.m.•120 views

MS13-080 Microsoft Internet Explorer CDisplayPointer Use-After-Free

This module exploits a vulnerability found in Microsoft Internet Explorer. It was originally found being exploited in the wild targeting Japanese and Korean IE8 users on Windows XP, around the same time frame as CVE-2013-3893, except this was kept out of the public eye by multiple research...

6.2AI score
SaveExploits0
Rows per page
Query Builder