Lucene search
+L

1090 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2012/04/12 12:00 a.m.•5 views

CVE-2012-0133: Undefined Security Weakness

HP ProCurve 5400 zl switches with certain serial numbers include a compact flash card that contains an unspecified virus, which might allow user-assisted remote attackers to execute arbitrary code on a PC by leveraging manual transfer of this card...

3.7CVSS6.5AI score0.01166EPSS
SaveExploits0References1
CISA
CISA
•added 2012/04/12 12:00 a.m.•19 views

HP ProCurve 5400 zl Switches Security Bulletin

Hewlett-Packard HP has released a security bulletin to address a security vulnerability affecting HP 5400 zl series switches purchased after April 30, 2011. These switches contain a compact flash card that may be infected with malware. US-CERT encourages users and administrators to review HP...

6.8AI score
SaveExploits0References1
OpenVAS
OpenVAS
•added 2011/08/09 12:00 a.m.•34 views

CentOS Update for freetype CESA-2010:0607 centos5 i386

Check for the Version of freetype OpenVAS Vulnerability Test CentOS Update for freetype CESA-2010:0607 centos5 i386 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

9.3CVSS0.3AI score0.30653EPSS
SaveExploits8References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2011/04/13 12:00 a.m.•5 views

CVE-2011-0034: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow in the OpenType Compact Font Format aka OTF or CFF driver in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows remote attackers to execute arbitrary cod...

9.3CVSS6.8AI score0.27925EPSS
SaveExploits1References2
OpenVAS
OpenVAS
•added 2011/04/13 12:00 a.m.•44 views

Windows OpenType Compact Font Format (CFF) Driver Remote Code Execution Vulnerability (2507618)

This host is missing a critical security update according to Microsoft Bulletin MS11-032. OpenVAS Vulnerability Test $Id: secpodms11-032.nasl 5362 2017-02-20 12:46:39Z cfi $ Windows OpenType Compact Font Format CFF Driver Remote Code Execution Vulnerability 2507618 Authors: Madhuri D Copyright:...

9.3CVSS0.9AI score0.27925EPSS
SaveExploits1References3
OpenVAS
OpenVAS
•added 2011/04/13 12:00 a.m.•61 views

Windows OpenType Compact Font Format (CFF) Driver Remote Code Execution Vulnerability (2507618)

This host is missing a critical security update according to Microsoft Bulletin MS11-032. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

9.3CVSS5AI score0.27925EPSS
SaveExploits1References3
Microsoft KB
Microsoft KB
•added 2011/04/12 12:00 a.m.•60 views

MS11-032: Vulnerability in the OpenType Compact Font Format (CFF) driver could allow remote code execution: April 12, 2011

None None...

5.3AI score
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2011/02/10 12:00 a.m.•5 views

CVE-2011-0033: Improper Input Validation

The OpenType Compact Font Format CFF driver in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 does not properly validate parameter values in OpenType fonts, which allows remote attackers to execute arbitra...

9.3CVSS6.5AI score0.20731EPSS
SaveExploits0References2
OpenVAS
OpenVAS
•added 2011/02/09 12:00 a.m.•35 views

Vulnerability in the OpenType Compact Font Format (CFF) Driver Could Allow Remote Code Execution (2485376)

This host is missing a critical security update according to Microsoft Bulletin MS11-007. OpenVAS Vulnerability Test $Id: secpodms11-007.nasl 5362 2017-02-20 12:46:39Z cfi $ Vulnerability in the OpenType Compact Font Format CFF Driver Could Allow Remote Code Execution 2485376 Authors: Madhuri D...

9.3CVSS0.7AI score0.20731EPSS
SaveExploits0References2
OpenVAS
OpenVAS
•added 2011/02/09 12:00 a.m.•39 views

Vulnerability in the OpenType Compact Font Format (CFF) Driver Could Allow Remote Code Execution (2485376)

This host is missing a critical security update according to Microsoft Bulletin MS11-007. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

9.3CVSS5.1AI score0.20731EPSS
SaveExploits0References3
Check Point Advisories
Check Point Advisories
•added 2011/02/08 12:00 a.m.•23 views

Microsoft OpenType CFF Driver Font Encoded Character Corruption (MS11-007; CVE-2011-0033)

OpenType is a font format developed jointly by Microsoft and Adobe as an extension of Apple's TrueType font format. An OpenType font file contains data, in table format, that comprises either a TrueType or a PostScript outline font. A remote code execution vulnerability has been reported in the w...

9.3CVSS7AI score0.20731EPSS
SaveExploits0
Symantec
Symantec
•added 2011/02/08 12:00 a.m.•25 views

Microsoft Windows OpenType Compact Font Format Remote Code Execution Vulnerability

Description Microsoft Windows is prone to a remote code-execution vulnerability that affects the OpenType Compact Font Format CFF driver. An attacker can exploit this issue to execute arbitrary code in kernel mode. Successful exploits will completely compromise an affected computer. Failed attemp...

7.9AI score
SaveExploits0References1Affected Software13
Prion
Prion
•added 2011/01/20 7:00 p.m.•22 views

Cross site scripting

Cross-site scripting XSS vulnerability in multiple Rocomotion products, including P board 1.18 and other versions, P forum 1.30 and earlier, P up board 1.38 and other versions, P diary R 1.13 and earlier, P link 1.11 and earlier, P link compact 1.04 and earlier, pplog 3.31 and earlier, pplog2 3.3...

4.3CVSS6.1AI score0.01516EPSS
SaveExploits0References7Affected Software10
CVE
CVE
•added 2011/01/20 6:00 p.m.•62 views

CVE-2010-3931

The CVE-2010-3931 entry corresponds to a cross-site scripting (XSS) vulnerability in multiple Rocomotion products (e.g., P board, P forum, P up board, P diary R, P link, pplog/pplog2, PM bbs/PM forum) across listed versions (e.g., P board 1.18 and earlier, P forum 1.30 and earlier, P up board 1.3...

4.3CVSS5.9AI score0.01516EPSS
SaveExploits0References7Affected Software10
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2011/01/20 12:00 a.m.•4 views

CVE-2010-3931: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in multiple Rocomotion products, including P board 1.18 and other versions, P forum 1.30 and earlier, P up board 1.38 and other versions, P diary R 1.13 and earlier, P link 1.11 and earlier, P link compact 1.04 and earlier, pplog 3.31 and earlier, pplog2 3.3...

4.3CVSS5.8AI score0.01516EPSS
SaveExploits0References2
OSV
OSV
•added 2011/01/07 11:00 p.m.•11 views

DEBIAN-CVE-2010-3311

Integer overflow in base/ftstream.c in libXft aka the X FreeType library in FreeType before 2.4 allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted Compact Font Format CFF font file that triggers a heap-based buffer overflow,...

9.3CVSS6.8AI score0.06735EPSS
SaveExploits0References1
rdot
rdot
•added 2010/12/31 12:00 a.m.•210 views

WSO 2.5 (web shell)

Данная утилита предоставляет веб-интерфейс для удаленной работы c операционной системой и ее службами/демонами. Описание возможностей / особенности: Авторизация на cookies Информация о сервере Файловый менеджер Копирование, переименование, перемещение, удаление, чмод, тач, создание файлов и папок...

SaveExploits0
NVD
NVD
•added 2010/11/16 11:18 p.m.•31 views

CVE-2010-4010

Integer signedness error in Apple Type Services ATS in Apple Mac OS X 10.5.8 allows remote attackers to execute arbitrary code via a crafted embedded Compact Font Format CFF font in a document...

6.8CVSS7.2AI score0.02868EPSS
SaveExploits0References3
CVE
CVE
•added 2010/11/16 10:00 p.m.•86 views

CVE-2010-4010

CVE-2010-4010 describes an integer signedness error in Apple Type Services (ATS) that affects Mac OS X 10.5.8, permitting remote code execution when a document contains a crafted embedded Compact Font Format (CFF) font. The issue is triggered by improper handling of signed values in the CFF font ...

6.8CVSS8.9AI score0.02868EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
•added 2010/11/16 10:00 p.m.•41 views

CVE-2010-4010

Integer signedness error in Apple Type Services ATS in Apple Mac OS X 10.5.8 allows remote attackers to execute arbitrary code via a crafted embedded Compact Font Format CFF font in a document...

9.1AI score0.02868EPSS
SaveExploits0References3
Rows per page
Query Builder