Lucene search
K

756 matches found

OSV
OSV
added 2012/11/19 12:10 p.m.2 views

DEBIAN-CVE-2012-4423

The virNetServerProgramDispatchCall function in libvirt before 0.10.2 allows remote attackers to cause a denial of service NULL pointer dereference and segmentation fault via an RPC call with 1 an event as the RPC number or 2 an RPC number whose value is in a "gap" in the RPC dispatch table...

5CVSS5.9AI score0.0287EPSS
Exploits0References1
CVE
CVE
added 2012/11/19 11:0 a.m.92 views

CVE-2012-4423

CVE-2012-4423 affects libvirt; the virNetServerProgramDispatchCall path allows remote DoS via an RPC number equal to an event or a value in a gap of the RPC dispatch table. The vulnerability is present in libvirt prior to 0.10.2; remediation is to upgrade to libvirt 0.10.2 or newer (as reflected ...

5CVSS6.3AI score0.0287EPSS
Exploits0References12Affected Software1
Debian CVE
Debian CVE
added 2012/11/19 11:0 a.m.28 views

CVE-2012-4423

The virNetServerProgramDispatchCall function in libvirt before 0.10.2 allows remote attackers to cause a denial of service NULL pointer dereference and segmentation fault via an RPC call with 1 an event as the RPC number or 2 an RPC number whose value is in a "gap" in the RPC dispatch table...

5CVSS7.4AI score0.0287EPSS
Exploits0
UbuntuCve
UbuntuCve
added 2012/11/19 12:0 a.m.22 views

CVE-2012-4423

The virNetServerProgramDispatchCall function in libvirt before 0.10.2 allows remote attackers to cause a denial of service NULL pointer dereference and segmentation fault via an RPC call with 1 an event as the RPC number or 2 an RPC number whose value is in a "gap" in the RPC dispatch table...

5CVSS6.6AI score0.0287EPSS
Exploits0References4
RedHat Linux
RedHat Linux
added 2012/10/11 1:15 p.m.1 views

libvirt: null function pointer invocation in virNetServerProgramDispatchCall()

The virNetServerProgramDispatchCall function in libvirt before 0.10.2 allows remote attackers to cause a denial of service NULL pointer dereference and segmentation fault via an RPC call with 1 an event as the RPC number or 2 an RPC number whose value is in a "gap" in the RPC dispatch table...

5CVSS6.6AI score0.0287EPSS
Exploits0References4
Cvelist
Cvelist
added 2012/02/07 9:0 p.m.19 views

CVE-2012-0992

interface/fax/faxdispatch.php in OpenEMR 4.1.0 allows remote authenticated users to execute arbitrary commands via shell metacharacters in the file parameter...

7.2AI score0.0577EPSS
Exploits1References7
Prion
Prion
added 2011/08/29 6:55 p.m.34 views

Code injection

The tos method in actionpack/lib/actiondispatch/middleware/remoteip.rb in Ruby on Rails 3.0.5 does not validate the X-Forwarded-For header in requests from IP addresses on a Class C network, which might allow remote attackers to inject arbitrary text into log files or bypass intended address...

4.3CVSS7.1AI score0.08484EPSS
Exploits1References9Affected Software1
OpenVAS
OpenVAS
added 2011/05/17 12:0 a.m.28 views

Fedora Update for acpid FEDORA-2011-6460

Check for the Version of acpid OpenVAS Vulnerability Test Fedora Update for acpid FEDORA-2011-6460 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms ...

2.1CVSS6.4AI score0.00176EPSS
Exploits1References2
RedHat Linux
RedHat Linux
added 2011/03/17 7:11 p.m.2 views

OpenJDK Swing timer-based security manager bypass (6907662)

Unspecified vulnerability in the Java Runtime Environment JRE in Oracle Java SE and Java for Business 6 Update 23 and earlier, 5.0 Update 27 and earlier, and 1.4.229 and earlier allows remote untrusted Java Web Start applications and untrusted Java applets to affect confidentiality, integrity, an...

10CVSS7.4AI score0.06495EPSS
Exploits1References4
NVD
NVD
added 2011/02/17 7:0 p.m.15 views

CVE-2010-4465

Unspecified vulnerability in the Java Runtime Environment JRE in Oracle Java SE and Java for Business 6 Update 23 and earlier, 5.0 Update 27 and earlier, and 1.4.229 and earlier allows remote untrusted Java Web Start applications and untrusted Java applets to affect confidentiality, integrity, an...

10CVSS8.2AI score0.06495EPSS
Exploits1References21
UbuntuCve
UbuntuCve
added 2011/02/17 12:0 a.m.30 views

CVE-2010-4465

Unspecified vulnerability in the Java Runtime Environment JRE in Oracle Java SE and Java for Business 6 Update 23 and earlier, 5.0 Update 27 and earlier, and 1.4.229 and earlier allows remote untrusted Java Web Start applications and untrusted Java applets to affect confidentiality, integrity, an...

10CVSS7.2AI score0.06495EPSS
Exploits1References5
Tenable Nessus
Tenable Nessus
added 2011/02/17 12:0 a.m.27 views

Fedora 14 : java-1.6.0-openjdk-1.6.0.0-52.1.9.7.fc14 (2011-1645)

This update fixes the following security issues : S6378709, CVE-2010-4465: AWT event dispatch does not support framework code S6854912, CVE-2010-4465: Security issue with the clipboard access in Applets S6878713, CVE-2010-4469: Verifier heap corruption, relating to backward jsrs S6907662,...

10CVSS8.2AI score0.08078EPSS
Exploits1References9
Tenable Nessus
Tenable Nessus
added 2011/02/17 12:0 a.m.32 views

Fedora 13 : java-1.6.0-openjdk-1.6.0.0-50.1.8.7.fc13 (2011-1631)

This update fixes the following security issues : S6378709, CVE-2010-4465: AWT event dispatch does not support framework code S6854912, CVE-2010-4465: Security issue with the clipboard access in Applets S6878713, CVE-2010-4469: Verifier heap corruption, relating to backward jsrs S6907662,...

10CVSS8.2AI score0.08078EPSS
Exploits1References9
NVD
NVD
added 2010/11/06 12:0 a.m.12 views

CVE-2009-5015

The URL dispatch mechanism in TurboGears2 aka tg2 before 2.0.2 exposes controller methods even when an @expose decoration is not used, which has unspecified impact and attack vectors...

7.5CVSS6.5AI score0.00296EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2010/11/06 12:0 a.m.1 views

CVE-2009-5015

The URL dispatch mechanism in TurboGears2 aka tg2 before 2.0.2 exposes controller methods even when an @expose decoration is not used, which has unspecified impact and attack vectors...

7.5CVSS5.5AI score0.00296EPSS
Exploits0References2
UbuntuCve
UbuntuCve
added 2010/11/06 12:0 a.m.20 views

CVE-2009-5015

The URL dispatch mechanism in TurboGears2 aka tg2 before 2.0.2 exposes controller methods even when an @expose decoration is not used, which has unspecified impact and attack vectors...

7.5CVSS5.9AI score0.00296EPSS
Exploits0References1
Prion
Prion
added 2010/11/06 12:0 a.m.7 views

Design/Logic Flaw

The URL dispatch mechanism in TurboGears2 aka tg2 before 2.0.2 exposes controller methods even when an @expose decoration is not used, which has unspecified impact and attack vectors...

7.5CVSS7.1AI score0.00296EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2010/11/05 10:0 p.m.13 views

CVE-2009-5015

The URL dispatch mechanism in TurboGears2 aka tg2 before 2.0.2 exposes controller methods even when an @expose decoration is not used, which has unspecified impact and attack vectors...

6.5AI score0.00296EPSS
Exploits0References1
CVE
CVE
added 2010/11/05 10:0 p.m.32 views

CVE-2009-5015

CVE-2009-5015 affects TurboGears2 (tg2) prior to 2.0.2, where the URL dispatch mechanism exposes controller methods even if @expose is not used. The description notes unspecified impact and attack vectors; the provided connected documents do not elaborate on the root cause, affected components be...

7.5CVSS6.7AI score0.00296EPSS
Exploits0References1Affected Software1
Debian CVE
Debian CVE
added 2010/11/05 10:0 p.m.13 views

CVE-2009-5015

Removed by vendor...

7.5CVSS7AI score0.00296EPSS
Exploits0
Rows per page
Query Builder