Lucene search
+L

6326 matches found

Zero Day Initiative
Zero Day Initiative
added 2012/12/21 12:0 a.m.42 views

Webkit HTMLMedia Element beforeLoad Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Apple Safari Webkit. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the library'...

7.5CVSS3.1AI score0.02123EPSS
SaveExploits1References1
NVD
NVD
added 2012/12/20 12:2 p.m.16 views

CVE-2012-4839

The OSLC interface in the Web Client aka CQ Web in IBM Rational ClearQuest 7.1.2.x before 7.1.2.9 and 8.0.0.x before 8.0.0.5 allows remote attackers to conduct phishing attacks via a FRAME element...

4.3CVSS6.3AI score0.01168EPSS
SaveExploits0References3
Prion
Prion
added 2012/12/20 12:2 p.m.22 views

Design/Logic Flaw

The OSLC interface in the Web Client aka CQ Web in IBM Rational ClearQuest 7.1.2.x before 7.1.2.9 and 8.0.0.x before 8.0.0.5 allows remote attackers to conduct phishing attacks via a FRAME element...

4.3CVSS6.9AI score0.01168EPSS
SaveExploits0References3Affected Software1
Packet Storm
Packet Storm
added 2012/12/17 12:0 a.m.37 views

Phuse Web / Element C2 / Cox Web Design SQL Injection

Exploit Title : Phuse Web Sql Injection Vulnerability Author : IrIsT.Ir Discovered By : Am!r Home : http://IrIsT.Ir/forum Software Link : http://www.phusewebdesign.co.uk/ Security Risk : High Version : All Version Tested on : GNU/Linux Ubuntu - Windows Server - win7 Dork : intext:"Site by Phuse W...

0.2AI score
SaveExploits0
OPENSUSE Linux
OPENSUSE Linux
added 2012/12/12 5:9 p.m.48 views

Chromium to 25.0.1343 (important)

Chromium was updated to 25.0.1343 Security Fixes bnc791234 and bnc792154: - CVE-2012-5131: Corrupt rendering in the Apple OSX driver for Intel GPUs - CVE-2012-5133: Use-after-free in SVG filters. - CVE-2012-5130: Out-of-bounds read in Skia - CVE-2012-5132: Browser crash with chunked encoding -...

10CVSS1.2AI score0.04382EPSS
SaveExploits1References2
Cvelist
Cvelist
added 2012/12/10 8:0 p.m.34 views

CVE-2012-6301

The Browser application in Android 4.0.3 allows remote attackers to cause a denial of service application crash via a crafted market: URI in the SRC attribute of an IFRAME element...

6.4AI score0.06448EPSS
SaveExploits3References1
OpenVAS
OpenVAS
added 2012/12/04 12:0 a.m.45 views

Google Chrome Multiple Vulnerabilities-01 Dec2012 (Mac OS X)

This host is installed with Google Chrome and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbgooglechromemultvuln01dec12macosx.nasl 6018 2017-04-24 09:02:24Z teissa $ Google Chrome Multiple Vulnerabilities-01 Dec2012 Mac OS X Authors: Antu Sanadi Copyright: Copyright c 20...

7.5CVSS0.9AI score0.04382EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
added 2012/11/29 12:0 a.m.37 views

Google Chrome < 23.0.1271.91 Multiple Vulnerabilities

Binary data 6628.pasl...

5CVSS8.9AI score0.01461EPSS
SaveExploits1References2
NVD
NVD
added 2012/11/28 1:55 a.m.19 views

CVE-2012-5136

Google Chrome before 23.0.1271.91 does not properly perform a cast of an unspecified variable during handling of the INPUT element, which allows remote attackers to cause a denial of service or possibly have unknown other impact via a crafted HTML document...

6.8CVSS6.7AI score0.01345EPSS
SaveExploits1References8
UbuntuCve
UbuntuCve
added 2012/11/28 1:55 a.m.30 views

CVE-2012-5136

Google Chrome before 23.0.1271.91 does not properly perform a cast of an unspecified variable during handling of the INPUT element, which allows remote attackers to cause a denial of service or possibly have unknown other impact via a crafted HTML document...

6.8CVSS7.2AI score0.01345EPSS
SaveExploits1References3
Debian CVE
Debian CVE
added 2012/11/28 1:0 a.m.36 views

CVE-2012-5136

Removed by vendor...

6.8CVSS9.4AI score0.01345EPSS
SaveExploits1
Cvelist
Cvelist
added 2012/11/28 1:0 a.m.34 views

CVE-2012-5136

Google Chrome before 23.0.1271.91 does not properly perform a cast of an unspecified variable during handling of the INPUT element, which allows remote attackers to cause a denial of service or possibly have unknown other impact via a crafted HTML document...

6.6AI score0.01345EPSS
SaveExploits1References8
ThreatPost
ThreatPost
added 2012/11/27 5:7 p.m.36 views

Google Repairs High-Risk Flaw in Chrome

Google has fixed a couple of security vulnerabilities in its Chrome browser, including a high-risk use-after-free bug and a problem in the way that the Apple OS X driver for some Intel GPUs handles rendering. The biggest fix in Chrome 23 is a patch for the use-after-free vulnerability in the Chro...

7.5CVSS0.6AI score0.04382EPSS
SaveExploits1References8
Tenable Nessus
Tenable Nessus
added 2012/11/27 12:0 a.m.38 views

Google Chrome < 23.0.1271.91 Multiple Vulnerabilities

The version of Google Chrome installed on the remote host is earlier than 23.0.1271.91 and is, therefore, affected by the following vulnerabilities : - An out-of-bounds read error exists related to 'Skia'. CVE-2012-5130 - An unspecified error exists related to chunked encoding that can result in...

7.5CVSS7.6AI score0.04382EPSS
SaveExploits1References7
OpenVAS
OpenVAS
added 2012/11/26 12:0 a.m.44 views

FreeBSD Ports: chromium

The remote host is missing an update to the system as announced in the referenced advisory. VID 209c068d-28be-11e2-9160-00262d5ed8ee OpenVAS Vulnerability Test $ Description: Auto generated from VID 209c068d-28be-11e2-9160-00262d5ed8ee Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc...

7.5CVSS0.1AI score0.01619EPSS
SaveExploits0
FreeBSD
FreeBSD
added 2012/11/26 12:0 a.m.40 views

chromium -- multiple vulnerabilities

Google Chrome Releases reports: 156567 High CVE-2012-5133: Use-after-free in SVG filters. Credit to miaubiz. 148638 Medium CVE-2012-5130: Out-of-bounds read in Skia. Credit to Atte Kettunen of OUSPG. 155711 Low CVE-2012-5132: Browser crash with chunked encoding. Credit to Attila Szász. 158249 Hi...

7.5CVSS1.4AI score0.04382EPSS
SaveExploits1References1
Prion
Prion
added 2012/11/18 9:55 p.m.17 views

Code injection

The web interface in Pattern Insight 2.3 allows remote attackers to conduct clickjacking attacks via a FRAME element...

6.8CVSS7.1AI score0.01504EPSS
SaveExploits0References4Affected Software1
Cvelist
Cvelist
added 2012/11/18 9:0 p.m.31 views

CVE-2012-4936

The web interface in Pattern Insight 2.3 allows remote attackers to conduct clickjacking attacks via a FRAME element...

6.6AI score0.01504EPSS
SaveExploits0References4
CVE
CVE
added 2012/11/18 9:0 p.m.39 views

CVE-2012-4936

CVE-2012-4936 concerns Pattern Insight 2.3, whose web interface is vulnerable to clickjacking via a FRAME element. The CVE description from NVD states that remote attackers can conduct clickjacking against the Pattern Insight web interface, with the effect of framing the application and potential...

6.8CVSS6.8AI score0.01504EPSS
SaveExploits0References4Affected Software1
RedHat Linux
RedHat Linux
added 2012/11/15 8:58 p.m.15 views

OpenJDK: PropertyElementHandler insufficient access checks (Beans, 7195549)

Unspecified vulnerability in the Java Runtime Environment JRE component in Oracle Java SE 7 Update 7 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Beans...

10CVSS7.4AI score0.05572EPSS
SaveExploits0References5
Rows per page
Query Builder