Lucene search
+L

125 matches found

BDU FSTEC
BDU FSTEC
added 2015/07/31 12:0 a.m.8 views

The vulnerability of the Firefox browser, which allows a hacker to influence the operation of the program

The vulnerability in the nsZipArchive.cpp component, which allows access to arbitrary memory cells of the Firefox browser, is related to errors in the code. Exploiting this vulnerability can allow a remote attacker to influence the operation of the program using a specially crafted ZIP archive...

9.3CVSS6AI score0.03767EPSS
Exploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2015/07/31 12:0 a.m.6 views

The vulnerability of the Firefox ESR browser, which allows a hacker to influence the operation of the program

The vulnerability in the nsZipArchive.cpp component, which allows access to arbitrary memory cells of the Firefox ESR browser, is related to errors in the code. Exploiting this vulnerability can allow a remote attacker to influence the behavior of the program using a specially crafted ZIP archive...

9.3CVSS6AI score0.03767EPSS
Exploits0References3Affected Software1
Zero Day Initiative
Zero Day Initiative
added 2015/06/11 12:0 a.m.52 views

(Pwn2Own) Microsoft Internet Explorer DataView Memory Corruption Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Internet Explorer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within jscript9.dll...

6.8CVSS6.3AI score0.23758EPSS
Exploits0References1
Cvelist
Cvelist
added 2015/03/16 10:0 a.m.28 views

CVE-2014-8159

The InfiniBand IB implementation in the Linux kernel package before 2.6.32-504.12.2 on Red Hat Enterprise Linux RHEL 6 does not properly restrict use of User Verbs for registration of memory regions, which allows local users to access arbitrary physical memory locations, and consequently cause a...

5.5AI score0.00441EPSS
Exploits0References27
seebug.org
seebug.org
added 2014/07/01 12:0 a.m.18 views

Apple Quicktime for Java 7 - Memory Access

No description provided by source. $Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require...

7.1AI score
Exploits0
Prion
Prion
added 2013/02/13 12:4 p.m.24 views

Race condition

Race condition in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, Windows 7 Gold and SP1, Windows 8, Windows Server 2012, and Windows RT allows local users to gain privileges, and...

4.9CVSS6.8AI score0.01466EPSS
Exploits0References3Affected Software1
Prion
Prion
added 2013/02/13 12:4 p.m.28 views

Race condition

Race condition in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges, and consequently read the contents of arbitrary kerne...

4.9CVSS6.8AI score0.01466EPSS
Exploits0References3Affected Software1
NVD
NVD
added 2012/12/18 12:55 a.m.25 views

CVE-2012-6422

The kernel in Samsung Galaxy S2, Galaxy Note 2, MEIZU MX, and possibly other Android devices, when running an Exynos 4210 or 4412 processor, uses weak permissions 0666 for /dev/exynos-mem, which allows attackers to read or write arbitrary physical memory and gain privileges via a crafted...

9.3CVSS6.5AI score0.15156EPSS
Exploits1References7
OSV
OSV
added 2012/04/22 6:55 p.m.4 views

DEBIAN-CVE-2012-0946

The NVIDIA UNIX driver before 295.40 allows local users to access arbitrary memory locations by leveraging GPU device-node read/write privileges...

4.6CVSS6.4AI score0.00725EPSS
Exploits0References1
Cvelist
Cvelist
added 2012/04/22 6:0 p.m.28 views

CVE-2012-0946

The NVIDIA UNIX driver before 295.40 allows local users to access arbitrary memory locations by leveraging GPU device-node read/write privileges...

6.1AI score0.00725EPSS
Exploits0References5
UbuntuCve
UbuntuCve
added 2012/02/23 12:0 a.m.42 views

CVE-2012-0864

Integer overflow in the vfprintf function in stdio-common/vfprintf.c in glibc 2.14 and other versions allows context-dependent attackers to bypass the FORTIFYSOURCE protection mechanism, conduct format string attacks, and write to arbitrary memory via a large number of arguments...

6.8CVSS7.3AI score0.02717EPSS
Exploits5References3
Exploit DB
Exploit DB
added 2010/09/20 12:0 a.m.28 views

Apple QTJava - 'toQTPointer()' Arbitrary Memory Access (Metasploit)

$Id: qtjavapointer.rb 10394 2010-09-20 08:06:27Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework...

7.4AI score
Exploits0
Tenable Nessus
Tenable Nessus
added 2010/07/27 12:0 a.m.36 views

PHP < 5.3.3 / 5.2.14 Multiple Vulnerabilities

Binary data 801070.prm...

7.5CVSS7.3AI score0.05342EPSS
Exploits15References15
Tenable Nessus
Tenable Nessus
added 2010/07/27 12:0 a.m.19 views

PHP < 5.2.14 / 5.3.x < 5.3.3 Multiple Vulnerabilities

Binary data 5616.prm...

7.5CVSS7.3AI score0.11528EPSS
Exploits18References18
Packet Storm
Packet Storm
added 2009/10/27 12:0 a.m.50 views

Apple QTJava toQTPointer() Arbitrary Memory Access

$Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3 'Apple QTJava toQTPointer Arbitra...

7.6CVSS0.6AI score0.83804EPSS
Exploits1
OpenVAS
OpenVAS
added 2009/01/20 12:0 a.m.19 views

Mandrake Security Advisory MDVSA-2009:016 (xen)

The remote host is missing an update to xen announced via advisory MDVSA-2009:016. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR GPL-3.0-on...

7.2CVSS7.6AI score0.01042EPSS
Exploits1References1
Debian CVE
Debian CVE
added 2008/03/03 10:0 p.m.40 views

CVE-2008-0928

Qemu 0.9.1 and earlier does not perform range checks for block device read or write requests, which allows guest host users with root privileges to access arbitrary memory and escape the virtual machine...

4.7CVSS6.4AI score0.00369EPSS
Exploits0
RedHat Linux
RedHat Linux
added 2008/01/23 3:7 p.m.6 views

Security: vulnerability of copy_to_user in PAL emulation

The copytouser function in the PAL emulation functionality for Xen 3.1.2 and earlier, when running on ia64 systems, allows HVM guest users to access arbitrary physical memory by triggering certain mapping operations...

4.6CVSS5.9AI score0.0044EPSS
Exploits2References4
Metasploit
Metasploit
added 2007/05/29 10:56 p.m.8 views

Apple QTJava toQTPointer() Arbitrary Memory Access

This module exploits an arbitrary memory access vulnerability in the Quicktime for Java API provided with Quicktime 7. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Apple QTJava toQTPointer...

7.1AI score
Exploits0
securityvulns
securityvulns
added 2007/03/10 12:0 a.m.47 views

MOPB-15-2007:PHP shmop Functions Resource Verification Vulnerability

Summary The shared memory shmop functions fail to verify the type of the resource that is used when they are called from PHP. Therefore it is possible to call them with a wrong resource type that might contain user supplied data. By for example using a special prepared GD Image resource it is...

1.2AI score
Exploits0
Rows per page
Query Builder