Lucene search
+L

4613 matches found

Mend
Mend
•added 2016/04/12 3:00 p.m.•4 views

CVE-2016-3171

Drupal 6.x before 6.38, when used with PHP before 5.4.45, 5.5.x before 5.5.29, or 5.6.x before 5.6.13, might allow remote attackers to execute arbitrary code via vectors related to session data truncation...

9.2CVSS0.0319EPSS
SaveExploits0References8
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2016/04/12 12:00 a.m.•8 views

CVE-2016-3171: Undefined Security Weakness

Drupal 6.x before 6.38, when used with PHP before 5.4.45, 5.5.x before 5.5.29, or 5.6.x before 5.6.13, might allow remote attackers to execute arbitrary code via vectors related to session data truncation...

8.1CVSS8.2AI score0.0319EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2016/04/12 12:00 a.m.•4 views

PT-2016-5400

Name of the Vulnerable Software and Affected Versions Drupal versions 6.x before 6.38 Description The issue might allow remote attackers to execute arbitrary code via vectors related to session data truncation when used with certain PHP versions. Recommendations For Drupal versions 6.x before 6.3...

8.1CVSS0.0319EPSS
SaveExploits0References11
Positive Technologies
Positive Technologies
•added 2016/04/08 12:00 a.m.•3 views

PT-2018-2491

Name of the Vulnerable Software and Affected Versions FreeRDP versions prior to 2.0.0-rc4 Description The issue is caused by an integer truncation leading to a heap-based buffer overflow in the update read bitmap update function, resulting in memory corruption and potentially allowing remote code...

9.8CVSS0.08156EPSS
SaveExploits1References126
OpenVAS
OpenVAS
•added 2016/03/31 12:00 a.m.•56 views

Amazon Linux: Security Advisory (ALAS-2016-672)

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

10CVSS9.5AI score0.18113EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2016/03/25 12:00 a.m.•39 views

Amazon Linux AMI : git (ALAS-2016-672)

An integer truncation flaw CVE-2016-2315 and an integer overflow flaw CVE-2016-2324, both leading to a heap-based buffer overflow, were found in the way Git processed certain path information. A remote attacker could create a specially crafted Git repository that would cause a Git client or serve...

10CVSS8.4AI score0.18113EPSS
SaveExploits0References3
Amazon
Amazon
•added 2016/03/24 12:00 a.m.•69 views

Important: git

Issue Overview: An integer truncation flaw CVE-2016-2315 and an integer overflow flaw CVE-2016-2324, both leading to a heap-based buffer overflow, were found in the way Git processed certain path information. A remote attacker could create a specially crafted Git repository that would cause a Git...

10CVSS10AI score0.18113EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
•added 2016/03/24 12:00 a.m.•30 views

Scientific Linux Security Update : git on SL6.x, SL7.x i386/x86_64 (20160323)

An integer truncation flaw and an integer overflow flaw, both leading to a heap-based buffer overflow, were found in the way Git processed certain path information. A remote attacker could create a specially crafted Git repository that would cause a Git client or server to crash or, possibly,...

10CVSS8.8AI score0.18113EPSS
SaveExploits0References3
OpenVAS
OpenVAS
•added 2016/03/24 12:00 a.m.•46 views

CentOS Update for emacs-git CESA-2016:0496 centos7

Check the version of emacs-git SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.882437";...

10CVSS8.4AI score0.18113EPSS
SaveExploits0References2
OpenVAS
OpenVAS
•added 2016/03/24 12:00 a.m.•36 views

CentOS Update for emacs-git CESA-2016:0496 centos6

Check the version of emacs-git SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.882435";...

10CVSS8.4AI score0.18113EPSS
SaveExploits0References2
RedHat Linux
RedHat Linux
•added 2016/03/23 3:58 p.m.•38 views

Integer truncation and overflow vulnerabilities in Git (CVE-2016-2315, CVE-2016-2324)

No description provided...

7.1AI score0.18113EPSS
SaveExploits0
RedHat Linux
RedHat Linux
•added 2016/03/23 1:34 p.m.•62 views

Important: Red Hat Security Advisory: git security update

Updated git packages that fix two security issues are now available for Red Hat Enterprise Linux 6 and 7. Red Hat Product Security has rated this update as having Important security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, are available f...

10CVSS7.6AI score0.18113EPSS
SaveExploits0References3
RedHat Linux
RedHat Linux
•added 2016/03/23 1:34 p.m.•52 views

git: path_name() integer truncation and overflow leading to buffer overflow

An integer truncation flaw and an integer overflow flaw, both leading to a heap-based buffer overflow, were found in the way Git processed certain path information. A remote attacker could create a specially crafted Git repository that would cause a Git client or server to crash or, possibly,...

10CVSS6.3AI score0.17312EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
•added 2016/03/23 1:34 p.m.•48 views

git: path_name() integer truncation and overflow leading to buffer overflow

An integer truncation flaw and an integer overflow flaw, both leading to a heap-based buffer overflow, were found in the way Git processed certain path information. A remote attacker could create a specially crafted Git repository that would cause a Git client or server to crash or, possibly,...

10CVSS6.3AI score0.18113EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
•added 2016/03/23 1:06 p.m.•53 views

git: path_name() integer truncation and overflow leading to buffer overflow

An integer truncation flaw and an integer overflow flaw, both leading to a heap-based buffer overflow, were found in the way Git processed certain path information. A remote attacker could create a specially crafted Git repository that would cause a Git client or server to crash or, possibly,...

10CVSS6.3AI score0.18113EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
•added 2016/03/23 1:06 p.m.•58 views

git: path_name() integer truncation and overflow leading to buffer overflow

An integer truncation flaw and an integer overflow flaw, both leading to a heap-based buffer overflow, were found in the way Git processed certain path information. A remote attacker could create a specially crafted Git repository that would cause a Git client or server to crash or, possibly,...

10CVSS6.3AI score0.17312EPSS
SaveExploits0References4
Debian
Debian
•added 2016/02/29 6:41 p.m.•63 views

[SECURITY] [DLA 444-1] php5 security update

Package : php5 Version : 5.3.3.1-7+squeeze29 CVE ID : CVE-2015-2305 CVE-2015-2348 CVE-2015-2305 Integer overflow in the regcomp implementation in the Henry Spencer BSD regex library aka rxspencer alpha3.8.g5 on 32-bit platforms, as used in NetBSD through 6.1.5 and other products, might allow...

6.8CVSS8.8AI score0.08883EPSS
SaveExploits5
Tenable Nessus
Tenable Nessus
•added 2016/02/26 12:00 a.m.•15 views

FreeBSD : drupal -- multiple vulnerabilities (59a0af97-dbd4-11e5-8fa8-14dae9d210b8)

Drupal Security Team reports : - File upload access bypass and denial of service File module - Drupal 7 and 8 - Moderately Critical - Brute force amplification attacks via XML-RPC XML-RPC server - Drupal 6 and 7 - Moderately Critical - Open redirect via path manipulation Base system - Drupal 6, 7...

5.6AI score
SaveExploits0References2
FreeBSD
FreeBSD
•added 2016/02/24 12:00 a.m.•19 views

drupal -- multiple vulnerabilities

Drupal Security Team reports: File upload access bypass and denial of service File module - Drupal 7 and 8 - Moderately Critical Brute force amplification attacks via XML-RPC XML-RPC server - Drupal 6 and 7 - Moderately Critical Open redirect via path manipulation Base system - Drupal 6, 7 and 8 ...

0.2AI score
SaveExploits0References1
Friends Of PHP
Friends Of PHP
•added 2016/02/15 6:57 p.m.•35 views

Session data truncation can lead to unserialization of user provided data

More info at https://www.drupal.org/SA-CORE-2016-001...

8.1CVSS7.2AI score0.0319EPSS
SaveExploits0Affected Software1
Rows per page
Query Builder