Lucene search
K

138 matches found

Zero Day Initiative
Zero Day Initiative
added 2008/12/04 12:0 a.m.27 views

Sun Java AWT Library Sandbox Violation Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Sun Microsystems Java. User interaction is required in that a user must open a malicious file or visit a malicious web page. The specific flaw occurs within the Java AWT library. If a custom image...

9.3CVSS5.8AI score0.35129EPSS
Exploits1References1
NVD
NVD
added 2008/02/01 8:0 p.m.7 views

CVE-2008-0550

Off-by-one error in Steamcast 0.9.75 and earlier allows remote attackers to cause a denial of service daemon crash or execute arbitrary code via a certain HTTP request that leads to a buffer overflow, as demonstrated by a long User-Agent header...

10CVSS7.9AI score0.68157EPSS
Exploits4References3
OpenVAS
OpenVAS
added 2008/01/17 12:0 a.m.10 views

Debian: Security Advisory (DSA-360)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS7.6AI score0.06318EPSS
Exploits1References3
NVD
NVD
added 2007/07/21 12:30 a.m.9 views

CVE-2007-3927

Multiple buffer overflows in Ipswitch IMail Server 2006 before 2006.21 1 allow remote attackers to execute arbitrary code via unspecified vectors in Imailsec and 2 allow attackers to have an unknown impact via an unspecified vector related to "subscribe."...

10CVSS7.8AI score0.7229EPSS
Exploits4References9
Tenable Nessus
Tenable Nessus
added 2007/06/27 12:0 a.m.22 views

GLSA-200706-09 : libexif: Buffer overflow

The remote host is affected by the vulnerability described in GLSA-200706-09 libexif: Buffer overflow iDefense Labs have discovered that the exifdataloaddataentry function in libexif/exif-data.c improperly handles integer data while working with an image with many EXIF components, allowing an...

6.8CVSS6.5AI score0.07543EPSS
Exploits0References2
NVD
NVD
added 2007/04/18 10:19 a.m.9 views

CVE-2007-2096

PHP remote file inclusion vulnerability in common.php in Hinton Design PHPHD Download System phphddownloads allows remote attackers to execute arbitrary PHP code via a URL in the phphdrealpath parameter. NOTE: this issue may be present in versions from 2006...

7.5CVSS7.5AI score0.00717EPSS
Exploits0References3
NVD
NVD
added 2007/04/12 1:19 a.m.10 views

CVE-2007-1984

PHP remote file inclusion vulnerability in index.php in lite-cms 0.2.1 allows remote attackers to execute arbitrary PHP code via a URL in the inc parameter...

7.5CVSS7.5AI score0.00636EPSS
Exploits0References2
CVE
CVE
added 2006/10/19 1:0 a.m.47 views

CVE-2006-5403

The CVE-2006-5403 issue is a stack-based buffer overflow in the Symantec Automated Support Assistant ActiveX control (used in Norton Antivirus/Internet Security/System Works). The CERT entry notes the vulnerable ActiveX control is locked to the symantec.com domain, requiring a user to view a craf...

5.1CVSS8.2AI score0.21399EPSS
Exploits0References10Affected Software4
NVD
NVD
added 2006/09/27 1:7 a.m.12 views

CVE-2006-5006

Buffer overflow in cfgmgr in IBM AIX 5.2.0 and 5.3.0 allows local users to execute arbitrary code via a long directory path argument...

7.2CVSS7.3AI score0.00066EPSS
Exploits0References9
NVD
NVD
added 2006/08/07 7:4 p.m.11 views

CVE-2006-4007

PHP remote file inclusion vulnerability in index.php in Knusperleicht Guestbook 3.5 allows remote attackers to execute arbitrary PHP code via a URL in the GBPATH parameter...

7.5CVSS7.5AI score0.02164EPSS
Exploits1References4
Cvelist
Cvelist
added 2006/08/03 1:0 a.m.15 views

CVE-2006-3460

Heap-based buffer overflow in the JPEG decoder in the TIFF library libtiff before 3.8.2 allows context-dependent attackers to cause a denial of service and possibly execute arbitrary code via an encoded JPEG stream that is longer than the scan line size TiffScanLineSize...

7.5AI score0.00835EPSS
Exploits1References41
Cvelist
Cvelist
added 2006/06/27 5:0 p.m.15 views

CVE-2006-3134

Buffer overflow in GraceNote CDDBControl ActiveX Control, as used by multiple products that use Gracenote CDDB, allows remote attackers to execute arbitrary code via a long option string...

7.8AI score0.43134EPSS
Exploits0References13
Tenable Nessus
Tenable Nessus
added 2006/05/03 12:0 a.m.38 views

GLSA-200604-18 : Mozilla Suite: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200604-18 Mozilla Suite: Multiple vulnerabilities Several vulnerabilities were found in Mozilla Suite. Version 1.7.13 was released to fix them. Impact : A remote attacker could craft malicious web pages or emails that would levera...

10CVSS8.6AI score0.41202EPSS
Exploits5References27
Cvelist
Cvelist
added 2005/09/15 4:0 a.m.16 views

CVE-2005-2495

Multiple integer overflows in XFree86 before 4.3.0 allow user-assisted attackers to execute arbitrary code via a crafted pixmap image...

7AI score0.04263EPSS
Exploits0References38
Cvelist
Cvelist
added 2005/06/30 4:0 a.m.26 views

CVE-2005-2087

Internet Explorer 5.01 SP4 up to 6 on various Windows operating systems, including IE 6.0.2900.2180 on Windows XP, allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via a web page with embedded CLSIDs that reference certain COM objects that...

7.5AI score0.70252EPSS
Exploits4References18
Cvelist
Cvelist
added 2005/03/29 5:0 a.m.15 views

CVE-2005-0906

Buffer overflow in a player logging function in the Tincat network library 2.x before 2.0.28, as used in games such as Sacred and The Settlers: Heritage of Kings, allows remote attackers to execute arbitrary code...

7.7AI score0.23674EPSS
Exploits1References5
Cvelist
Cvelist
added 2005/03/26 5:0 a.m.14 views

CVE-2002-1621

Buffer overflow in the filecomp function in rcp for IBM AIX 4.3.x and 5.1 allows remote attackers to execute arbitrary code...

7.6AI score0.26372EPSS
Exploits0References4
RedHat Linux
RedHat Linux
added 2005/02/15 9:33 a.m.1 views

security flaw

The SimpleXMLRPCServer library module in Python 2.2, 2.3 before 2.3.5, and 2.4, when used by XML-RPC servers that use the registerinstance method to register an object without a dispatch method, allows remote attackers to read or modify globals of the associated module, and possibly execute...

7.5CVSS6.1AI score0.09112EPSS
Exploits0References4
Rows per page
Query Builder