Lucene search
+L

6326 matches found

Debian CVE
Debian CVE
added 2014/05/21 10:0 a.m.49 views

CVE-2014-3803

Removed by vendor...

4.3CVSS9AI score0.01369EPSS
SaveExploits1
OSV
OSV
added 2014/05/21 12:0 a.m.7 views

UBUNTU-CVE-2014-1743

Use-after-free vulnerability in the StyleElement::removedFromDocument function in core/dom/StyleElement.cpp in Blink, as used in Google Chrome before 35.0.1916.114, allows remote attackers to cause a denial of service application crash or possibly have unspecified other impact via crafted...

7.5CVSS7.4AI score0.0162EPSS
SaveExploits0References6
NVD
NVD
added 2014/05/20 11:13 a.m.20 views

CVE-2014-3268

Cisco IOS 15.24M4 on Cisco Unified Border Element CUBE devices allows remote attackers to cause a denial of service input-queue consumption and traffic-processing outage via crafted RTCP packets, aka Bug ID CSCuj72215...

5CVSS6.7AI score0.01218EPSS
SaveExploits0References2
Prion
Prion
added 2014/05/20 11:13 a.m.22 views

Design/Logic Flaw

Cisco IOS 15.24M4 on Cisco Unified Border Element CUBE devices allows remote attackers to cause a denial of service input-queue consumption and traffic-processing outage via crafted RTCP packets, aka Bug ID CSCuj72215...

5CVSS7.3AI score0.01218EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2014/05/20 10:0 a.m.32 views

CVE-2014-3268

Cisco IOS 15.24M4 on Cisco Unified Border Element CUBE devices allows remote attackers to cause a denial of service input-queue consumption and traffic-processing outage via crafted RTCP packets, aka Bug ID CSCuj72215...

6.7AI score0.01218EPSS
SaveExploits0References2
Cisco
Cisco
added 2014/05/19 4:56 p.m.44 views

Cisco IOS Software RTCP Input Queue Vulnerability

A vulnerability in handling Real-Time Control Protocol RTCP traffic in Cisco Unified Border Element CUBE could allow an unauthenticated, remote attacker to cause traffic that is destined to an affected device and traffic that needs to be processed switched to fail. The vulnerability is due to...

5CVSS6.4AI score0.01218EPSS
SaveExploits0References1
NVD
NVD
added 2014/05/13 3:55 p.m.21 views

CVE-2013-4503

Cross-site scripting XSS vulnerability in the Feed Element Mapper module for Drupal allows remote authenticated users with the "administer taxonomy" permission to inject arbitrary web script or HTML via vectors related to options...

2.1CVSS5.2AI score0.00729EPSS
SaveExploits0References2
CVE
CVE
added 2014/05/13 3:0 p.m.52 views

CVE-2013-4503

CVE-2013-4503 concerns the Drupal "Feed Element Mapper" module. The security advisory and related records specify that the module allows an attacker with the explicit permission "administer taxonomy" (remote authenticated user) to trigger a cross-site scripting (XSS) condition by injecting arbitr...

2.1CVSS5.3AI score0.00729EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2014/05/13 3:0 p.m.27 views

CVE-2013-4503

Cross-site scripting XSS vulnerability in the Feed Element Mapper module for Drupal allows remote authenticated users with the "administer taxonomy" permission to inject arbitrary web script or HTML via vectors related to options...

5.2AI score0.00729EPSS
SaveExploits0References2
Hacker One
Hacker One
added 2014/05/11 12:22 a.m.44 views

Ian Dunn: Path Disclosure Vulnerability

Hey , I'm Jamal in this report i want to show you a Vulnerability Found It In basic-google-maps-placemarks Pugin Description: Title : Path Disclosure Vulnerability Status : Unfixed Tested on : Firefox Author : Jamal Eddine Email : [email protected] Discovered : 2014/05/04 Report it : 2014/05/04...

7.5AI score
SaveExploits0
Prion
Prion
added 2014/05/08 10:55 a.m.19 views

Cross site scripting

Cross-site scripting XSS vulnerability on Google Search Appliance GSA devices before 7.0.14.G.216 and 7.2 before 7.2.0.G.114, when dynamic navigation is configured, allows remote attackers to inject arbitrary web script or HTML via input included in a SCRIPT element...

4.3CVSS6.2AI score0.01177EPSS
SaveExploits0References2Affected Software1
Prion
Prion
added 2014/04/30 10:49 a.m.24 views

Memory corruption

The mozilla::dom::TextTrack::AddCue function in Mozilla Firefox before 29.0 and SeaMonkey before 2.26 does not properly perform garbage collection for Text Track Manager variables, which allows remote attackers to execute arbitrary code or cause a denial of service use-after-free and heap memory...

9.3CVSS8.1AI score0.04414EPSS
SaveExploits0References11Affected Software5
Prion
Prion
added 2014/04/30 10:49 a.m.23 views

Out-of-bounds

The sse2compositesrcx8888888 function in Pixman, as used in Cairo in Mozilla Firefox 28.0 and SeaMonkey 2.25 on Windows, allows remote attackers to execute arbitrary code or cause a denial of service out-of-bounds write and application crash by painting on a CANVAS element...

10CVSS8.2AI score0.05601EPSS
SaveExploits0References10Affected Software6
Cvelist
Cvelist
added 2014/04/30 10:0 a.m.24 views

CVE-2014-1528

The sse2compositesrcx8888888 function in Pixman, as used in Cairo in Mozilla Firefox 28.0 and SeaMonkey 2.25 on Windows, allows remote attackers to execute arbitrary code or cause a denial of service out-of-bounds write and application crash by painting on a CANVAS element...

9.7AI score0.05601EPSS
SaveExploits0References10
OSV
OSV
added 2014/04/29 12:0 a.m.8 views

UBUNTU-CVE-2014-1525

The mozilla::dom::TextTrack::AddCue function in Mozilla Firefox before 29.0 and SeaMonkey before 2.26 does not properly perform garbage collection for Text Track Manager variables, which allows remote attackers to execute arbitrary code or cause a denial of service use-after-free and heap memory...

9.3CVSS7.3AI score0.04414EPSS
SaveExploits0References4
NVD
NVD
added 2014/04/27 4:32 a.m.14 views

CVE-2014-2994

Stack-based buffer overflow in Acunetix Web Vulnerability Scanner WVS 8 build 20120704 allows remote attackers to execute arbitrary code via an HTML file containing an IMG element with a long URL src attribute...

10CVSS7.8AI score0.26418EPSS
SaveExploits6References7
Prion
Prion
added 2014/04/27 4:32 a.m.18 views

Stack overflow

Stack-based buffer overflow in Acunetix Web Vulnerability Scanner WVS 8 build 20120704 allows remote attackers to execute arbitrary code via an HTML file containing an IMG element with a long URL src attribute...

10CVSS8.5AI score0.26418EPSS
SaveExploits6References7Affected Software1
Cvelist
Cvelist
added 2014/04/27 1:0 a.m.25 views

CVE-2014-2994

Stack-based buffer overflow in Acunetix Web Vulnerability Scanner WVS 8 build 20120704 allows remote attackers to execute arbitrary code via an HTML file containing an IMG element with a long URL src attribute...

7.8AI score0.26418EPSS
SaveExploits6References7
OSV
OSV
added 2014/04/25 2:15 p.m.6 views

UBUNTU-CVE-2012-4230

The bbcode plugin in TinyMCE 3.5.8 does not properly enforce the TinyMCE security policy for the 1 encoding directive and 2 validelements attribute, which allows attackers to conduct cross-site scripting XSS attacks via application-specific vectors, as demonstrated using a textarea element...

4.3CVSS7AI score0.01198EPSS
SaveExploits2References7
UbuntuCve
UbuntuCve
added 2014/04/25 2:15 p.m.20 views

CVE-2012-4230

The bbcode plugin in TinyMCE 3.5.8 does not properly enforce the TinyMCE security policy for the 1 encoding directive and 2 validelements attribute, which allows attackers to conduct cross-site scripting XSS attacks via application-specific vectors, as demonstrated using a textarea element...

4.3CVSS7AI score0.01198EPSS
SaveExploits2References6
Rows per page
Query Builder