Lucene search
+L

51 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/10/10 12:00 a.m.•0 views

CVE-2023-36566: Improper Input Validation

Microsoft Common Data Model SDK Denial of Service Vulnerability...

6.5CVSS6.7AI score0.02825EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2023/10/10 12:00 a.m.•17 views

Microsoft Common Data Model SDK Security Vulnerability

Microsoft Common Data Model SDK is a software application from Microsoft Corporation USA. A security vulnerability exists in Microsoft Common Data Model SDK. An attacker could exploit this vulnerability to cause a denial of service. The following products and versions are affected: Microsoft Comm...

6.5CVSS8.8AI score0.02825EPSS
SaveExploits0References3
OSV
OSV
•added 2017/06/14 9:29 p.m.•29 views

CVE-2017-9622

Multiple cross-site scripting XSS vulnerabilities in Telaxus/EPESI 1.8.2 and earlier allow remote attackers to inject arbitrary web script or HTML via crafted common data...

6.1CVSS5.9AI score
SaveExploits0References2
Prion
Prion
•added 2017/06/14 9:29 p.m.•20 views

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Telaxus/EPESI 1.8.2 and earlier allow remote attackers to inject arbitrary web script or HTML via crafted common data...

4.3CVSS6.1AI score0.01028EPSS
SaveExploits0References2Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2017/06/14 12:00 a.m.•7 views

CVE-2017-9622: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Telaxus/EPESI 1.8.2 and earlier allow remote attackers to inject arbitrary web script or HTML via crafted common data...

6.1CVSS6.4AI score0.01028EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
•added 2016/07/06 12:00 a.m.•13 views

Vulnerability of PHP software, allowing a malicious actor to compromise the accessibility of protected information

A vulnerability exists in the cdfcountchain function in the cdf.c file of the Fileinfo component in PHP, due to improper data validation for the sector counters. Exploitation of this vulnerability allows malicious actors to induce a service failure abnormal termination of the application by using...

4.3CVSS7.4AI score0.11481EPSS
SaveExploits0References4Affected Software1
attackerkb
attackerkb
•added 2014/07/09 11:07 a.m.•6 views

CVE-2014-3480

The cdfcountchain function in cdf.c in file before 5.19, as used in the Fileinfo component in PHP before 5.4.30 and 5.5.x before 5.5.14, does not properly validate sector-count data, which allows remote attackers to cause a denial of service application crash via a crafted CDF file...

6.5CVSS8.1AI score0.11481EPSS
SaveExploits0References20
OSV
OSV
•added 2014/07/09 12:00 a.m.•14 views

UBUNTU-CVE-2014-0207

The cdfreadshortsector function in cdf.c in file before 5.19, as used in the Fileinfo component in PHP before 5.4.30 and 5.5.x before 5.5.14, allows remote attackers to cause a denial of service assertion failure and application exit via a crafted CDF file...

6.5CVSS7.2AI score0.16853EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
•added 2010/07/30 12:00 a.m.•14 views

MDVA-2009:187 : desktop-common-data

Sound events for IaOra sound theme were not disabled by default for some actions. This package fixes this issue and ensure OpenOffice entries are in the correct order in Office menu in desktop environments. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch i...

7AI score
SaveExploits0References1
NVD
NVD
•added 2009/08/18 9:00 p.m.•32 views

CVE-2009-2850

Multiple buffer overflows in NASA Common Data Format CDF allow context-dependent attackers to execute arbitrary code, as demonstrated using 1 an array index error in the ReadAEDRList64 function, and other errors in the 2 SearchForRecordr64, 3 LastRecord64, 4 CDFsel64, and other unspecified...

9.3CVSS7.3AI score0.0286EPSS
SaveExploits1References4
Cvelist
Cvelist
•added 2009/08/18 8:41 p.m.•40 views

CVE-2009-2850

Multiple buffer overflows in NASA Common Data Format CDF allow context-dependent attackers to execute arbitrary code, as demonstrated using 1 an array index error in the ReadAEDRList64 function, and other errors in the 2 SearchForRecordr64, 3 LastRecord64, 4 CDFsel64, and other unspecified...

7.3AI score0.0286EPSS
SaveExploits1References4
CVE
CVE
•added 2009/08/18 8:41 p.m.•65 views

CVE-2009-2850

CVE-2009-2850 relates to multiple heap/buffer overflows in NASA’s Common Data Format (CDF) library. The vulnerabilities are triggered by issues in functions such as ReadAEDRList64, SearchForRecord_r_64, LastRecord64, and CDFsel64, allowing context-dependent attackers to potentially execute arbitr...

9.3CVSS7.5AI score0.0286EPSS
SaveExploits1References4Affected Software1
Gentoo Linux
Gentoo Linux
•added 2009/08/18 12:00 a.m.•46 views

CDF: User-assisted execution of arbitrary code

Background CDF is a library for the Common Data Format which is a self-describing data format for the storage and manipulation of scalar and multidimensional data. It is developed by the NASA. Description Leon Juranic reported multiple heap-based buffer overflows for instance in the ReadAEDRList6...

9.3CVSS7.2AI score0.0286EPSS
SaveExploits1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2009/08/18 12:00 a.m.•6 views

CVE-2009-2850: Improper Restriction of Operations within the Bounds of a Memory Buffer

Multiple buffer overflows in NASA Common Data Format CDF allow context-dependent attackers to execute arbitrary code, as demonstrated using 1 an array index error in the ReadAEDRList64 function, and other errors in the 2 SearchForRecordr64, 3 LastRecord64, 4 CDFsel64, and other unspecified...

9.3CVSS6.5AI score0.0286EPSS
SaveExploits1References2
securityvulns
securityvulns
•added 2009/07/21 12:00 a.m.•37 views

[INFIGO-2009-07-09]: NASA Common Data Format remote buffer overflow(s)

=================================================================== 'Celebrating 40 years of Apollo and 20 years of buffer overflows' =================================================================== INFIGO IS Security Advisory ADV-2009-07-09 http://www.infigo.hr/en/ Title: NASA Common Data...

0.8AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
•added 2009/04/23 12:00 a.m.•16 views

MDVA-2008:026 : desktop-common-data

In Mandriva Linux 2008.0 some utilities were not correctly displayed in Tools menu such as Yakuake, and settings:// was not working properly in KDE konqueror. This update fixes the problems. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently ...

7AI score
SaveExploits0References1
OpenVAS
OpenVAS
•added 2009/04/09 12:00 a.m.•15 views

Mandriva Update for desktop-common-data MDKA-2007:006 (desktop-common-data)

Check for the Version of desktop-common-data OpenVAS Vulnerability Test Mandriva Update for desktop-common-data MDKA-2007:006 desktop-common-data Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can...

0.3AI score
SaveExploits0References2
OpenVAS
OpenVAS
•added 2009/04/09 12:00 a.m.•12 views

Mandriva Update for desktop-common-data MDVA-2008:026 (desktop-common-data)

Check for the Version of desktop-common-data OpenVAS Vulnerability Test Mandriva Update for desktop-common-data MDVA-2008:026 desktop-common-data Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can...

SaveExploits0References2
OpenVAS
OpenVAS
•added 2009/04/09 12:00 a.m.•18 views

Mandriva Update for desktop-common-data MDVA-2008:026 (desktop-common-data)

Check for the Version of desktop-common-data OpenVAS Vulnerability Test Mandriva Update for desktop-common-data MDVA-2008:026 desktop-common-data Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can...

0.1AI score
SaveExploits0References2
OpenVAS
OpenVAS
•added 2009/04/09 12:00 a.m.•19 views

Mandriva Update for desktop-common-data MDKA-2007:006 (desktop-common-data)

Check for the Version of desktop-common-data OpenVAS Vulnerability Test Mandriva Update for desktop-common-data MDKA-2007:006 desktop-common-data Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can...

0.3AI score
SaveExploits0References2
Rows per page
Query Builder