Lucene search
+L

836 matches found

OSV
OSV
•added 2010/08/05 1:22 p.m.•9 views

DEBIAN-CVE-2010-2546

Multiple heap-based buffer overflows in loaders/loadit.c in libmikmod, possibly 3.1.12, might allow remote attackers to execute arbitrary code via 1 crafted samples or 2 crafted instrument definitions in an Impulse Tracker file, related to panpts, pitpts, and ITProcessEnvelope. NOTE: some of thes...

9.3CVSS7AI score0.06716EPSS
SaveExploits0References1
Prion
Prion
•added 2010/08/05 1:22 p.m.•27 views

Heap overflow

Multiple heap-based buffer overflows in loaders/loadit.c in libmikmod, possibly 3.1.12, might allow remote attackers to execute arbitrary code via 1 crafted samples or 2 crafted instrument definitions in an Impulse Tracker file, related to panpts, pitpts, and ITProcessEnvelope. NOTE: some of thes...

9.3CVSS8AI score0.06722EPSS
SaveExploits1References9Affected Software1
OpenVAS
OpenVAS
•added 2010/06/10 12:00 a.m.•63 views

Debian Security Advisory DSA 2057-1 (mysql-dfsg-5.0)

The remote host is missing an update to mysql-dfsg-5.0 announced via advisory DSA 2057-1. OpenVAS Vulnerability Test $Id: deb20571.nasl 6614 2017-07-07 12:09:12Z cfischer $ Description: Auto-generated from advisory DSA 2057-1 mysql-dfsg-5.0 Authors: Thomas Reinke Copyright: Copyright c 2010 E-Sof...

6.5CVSS1AI score0.21789EPSS
SaveExploits3
NVD
NVD
•added 2010/06/08 12:30 a.m.•34 views

CVE-2010-1848

Directory traversal vulnerability in MySQL 5.0 through 5.0.91 and 5.1 before 5.1.47 allows remote authenticated users to bypass intended table grants to read field definitions of arbitrary tables, and on 5.1 to read or delete content of arbitrary tables, via a .. dot dot in a table name...

6.5CVSS6AI score0.03119EPSS
SaveExploits1References15
Prion
Prion
•added 2010/06/08 12:30 a.m.•32 views

Directory traversal

Directory traversal vulnerability in MySQL 5.0 through 5.0.91 and 5.1 before 5.1.47 allows remote authenticated users to bypass intended table grants to read field definitions of arbitrary tables, and on 5.1 to read or delete content of arbitrary tables, via a .. dot dot in a table name...

6.5CVSS6.5AI score0.03119EPSS
SaveExploits1References15Affected Software1
RedHat Linux
RedHat Linux
•added 2010/05/26 2:57 p.m.•16 views

mysql: multiple insufficient table name checks

Directory traversal vulnerability in MySQL 5.0 through 5.0.91 and 5.1 before 5.1.47 allows remote authenticated users to bypass intended table grants to read field definitions of arbitrary tables, and on 5.1 to read or delete content of arbitrary tables, via a .. dot dot in a table name...

6.5CVSS6.2AI score0.03119EPSS
SaveExploits1References4
UbuntuCve
UbuntuCve
•added 2010/05/21 12:00 a.m.•53 views

CVE-2010-1848

Directory traversal vulnerability in MySQL 5.0 through 5.0.91 and 5.1 before 5.1.47 allows remote authenticated users to bypass intended table grants to read field definitions of arbitrary tables, and on 5.1 to read or delete content of arbitrary tables, via a .. dot dot in a table name...

6.5CVSS6.2AI score0.03119EPSS
SaveExploits1References4
ThreatPost
ThreatPost
•added 2010/03/29 5:15 p.m.•96 views

Apple Mega Patch Covers 88 Mac OS X Vulnerabilities

Apple Mega Patch Covers 88 Mac OS X Vulnerabilities Apple today released one of its biggest Mac OS X security updates in recent memory, covering a whopping with fixes for 88 documented vulnerabilities. The Mac OS X v10.6.3 update, which is considered “critical,” covers flaws that could lead to...

10CVSS7.7AI score0.9444EPSS
SaveExploits109References3
OSV
OSV
•added 2010/03/18 5:30 p.m.•5 views

DEBIAN-CVE-2010-0421

Array index error in the hbotlayoutbuildglyphclasses function in pango/opentype/hb-ot-layout.cc in Pango before 1.27.1 allows context-dependent attackers to cause a denial of service application crash via a crafted font file, related to building a synthetic Glyph Definition aka GDEF table by usin...

4.3CVSS5.9AI score0.02448EPSS
SaveExploits0References1
OSV
OSV
•added 2009/12/18 6:30 p.m.•7 views

DEBIAN-CVE-2009-3995

Multiple heap-based buffer overflows in INMOD.DLL aka the Module Decoder Plug-in in Winamp before 5.57, and libmikmod 3.1.12, might allow remote attackers to execute arbitrary code via 1 crafted samples or 2 crafted instrument definitions in an Impulse Tracker file. NOTE: some of these details ar...

9.3CVSS8.2AI score0.06722EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2009/12/18 6:00 p.m.•38 views

CVE-2009-3995

Multiple heap-based buffer overflows in INMOD.DLL aka the Module Decoder Plug-in in Winamp before 5.57, and libmikmod 3.1.12, might allow remote attackers to execute arbitrary code via 1 crafted samples or 2 crafted instrument definitions in an Impulse Tracker file. NOTE: some of these details ar...

7.4AI score0.06722EPSS
SaveExploits1References14
Debian CVE
Debian CVE
•added 2009/12/18 6:00 p.m.•43 views

CVE-2009-3995

Multiple heap-based buffer overflows in INMOD.DLL aka the Module Decoder Plug-in in Winamp before 5.57, and libmikmod 3.1.12, might allow remote attackers to execute arbitrary code via 1 crafted samples or 2 crafted instrument definitions in an Impulse Tracker file. NOTE: some of these details ar...

9.3CVSS7.6AI score0.06722EPSS
SaveExploits1
UbuntuCve
UbuntuCve
•added 2009/12/18 12:00 a.m.•34 views

CVE-2009-3995

Multiple heap-based buffer overflows in INMOD.DLL aka the Module Decoder Plug-in in Winamp before 5.57, and libmikmod 3.1.12, might allow remote attackers to execute arbitrary code via 1 crafted samples or 2 crafted instrument definitions in an Impulse Tracker file. NOTE: some of these details ar...

9.3CVSS6.3AI score0.06722EPSS
SaveExploits1References2
OpenVAS
OpenVAS
•added 2009/07/29 12:00 a.m.•44 views

Mandrake Security Advisory MDVSA-2009:154 (dhcp)

The remote host is missing an update to dhcp announced via advisory MDVSA-2009:154. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR...

5CVSS6.4AI score0.08566EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
•added 2009/05/01 12:00 a.m.•180 views

McAfee Antivirus ZIP / RAR Scan Evasion

The McAfee antivirus application installed on the remote host is affected by a scan evasion vulnerability due to the virus definitions being out of date. In this case, the DAT file version of the installed antivirus product is prior to 5600. An attacker can exploit this, by embedding malicious co...

7.6CVSS5.8AI score0.02835EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
•added 2009/04/30 12:00 a.m.•38 views

ESET Antivirus CAB Scan Evasion

The ESET antivirus application installed on the remote host is affected by a scan evasion vulnerability due to the virus definitions being out of date. In this case, the virus signature database file version of the installed antivirus product is prior to 4036. An attacker can exploit this, by...

5.7AI score
SaveExploits0References3
Exploit DB
Exploit DB
•added 2008/10/02 12:00 a.m.•43 views

libxml2 - Denial of Service

source: https://www.securityfocus.com/bid/31555/info The libxml2 library is prone to a denial-of-service vulnerability caused by an error when handling files using entities in entity definitions. An attacker can exploit this issue to cause the library to consume an excessive amount of memory,...

5CVSS7.2AI score0.08534EPSS
SaveExploits3
Tenable Nessus
Tenable Nessus
•added 2008/09/10 12:00 a.m.•16 views

Fedora 8 : fedora-release-8-6.transition (2008-7747)

This fedora-release update introduces a new set of Fedora Updates and Updates Testing repo definitions. These new definitions point to new URLS for our update content signed with a new key. This update also provides Fedora 8 and 9's new package signing keys. This update is a transitional update t...

5.5AI score
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2008/09/10 12:00 a.m.•10 views

Fedora 9 : PackageKit-0.2.5-1.fc9 / fedora-release-9-5.transition / gnome-packagekit-0.2.5-2.fc9 (2008-7748)

This fedora-release update introduces a new set of Fedora Updates and Updates Testing repo definitions. These new definitions point to new URLS for our update content signed with a new key. This update also provides Fedora 8 and 9's new package signing keys. This update is a transitional update t...

5.4AI score
SaveExploits0References7
NVD
NVD
•added 2007/01/25 12:28 a.m.•26 views

CVE-2007-0486

Multiple PHP remote file inclusion vulnerabilities in Openads aka phpAdsNew 2.0.7 allow remote attackers to execute arbitrary PHP code via a URL in the 1 phpAdsgeoPlugin parameter to libraries/lib-remotehost.inc, the 2 filename parameter to admin/report-index, or the 3 phpAdsconfigmyfooter...

7.5CVSS7.6AI score0.01799EPSS
SaveExploits0References6
Rows per page
Query Builder