Lucene search
+L

8125 matches found

Prion
Prion
•added 2015/11/05 5:59 a.m.•32 views

Race condition

Race condition in the JPEGEncoder function in Mozilla Firefox before 42.0 and Firefox ESR 38.x before 38.4 allows remote attackers to execute arbitrary code or cause a denial of service heap-based buffer overflow via vectors involving a CANVAS element and crafted JavaScript code...

6.8CVSS8.2AI score0.0311EPSS
SaveExploits0References20Affected Software2
Cvelist
Cvelist
•added 2015/11/05 2:00 a.m.•42 views

CVE-2015-7189

Race condition in the JPEGEncoder function in Mozilla Firefox before 42.0 and Firefox ESR 38.x before 38.4 allows remote attackers to execute arbitrary code or cause a denial of service heap-based buffer overflow via vectors involving a CANVAS element and crafted JavaScript code...

9.7AI score0.0311EPSS
SaveExploits0References20
Cvelist
Cvelist
•added 2015/11/05 2:00 a.m.•39 views

CVE-2015-7192

The accessibility-tools feature in Mozilla Firefox before 42.0 on OS X improperly interacts with the implementation of the TABLE element, which allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code by using an NSAccessibilityIndexAttribute value...

9.8AI score0.03018EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2015/11/05 12:00 a.m.•5 views

CVE-2015-7192: Undefined Security Weakness

The accessibility-tools feature in Mozilla Firefox before 42.0 on OS X improperly interacts with the implementation of the TABLE element, which allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code by using an NSAccessibilityIndexAttribute value...

7.5CVSS8.6AI score0.03018EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2015/11/05 12:00 a.m.•5 views

CVE-2015-7189: Improper Restriction of Operations within the Bounds of a Memory Buffer

Race condition in the JPEGEncoder function in Mozilla Firefox before 42.0 and Firefox ESR 38.x before 38.4 allows remote attackers to execute arbitrary code or cause a denial of service heap-based buffer overflow via vectors involving a CANVAS element and crafted JavaScript code...

6.8CVSS8.8AI score0.0311EPSS
SaveExploits0References3
UbuntuCve
UbuntuCve
•added 2015/11/04 12:00 a.m.•34 views

CVE-2015-7189

Race condition in the JPEGEncoder function in Mozilla Firefox before 42.0 and Firefox ESR 38.x before 38.4 allows remote attackers to execute arbitrary code or cause a denial of service heap-based buffer overflow via vectors involving a CANVAS element and crafted JavaScript code...

6.8CVSS8.2AI score0.0311EPSS
SaveExploits0References4
CNVD
CNVD
•added 2015/11/03 12:00 a.m.•18 views

Cisco Unified Border Element Denial of Service Vulnerability

Cisco Unified Border Element is an intelligent unified communications network border component from Cisco. A denial of service vulnerability exists in Cisco Unified Border Element. Due to the failure of the session initialization protocol to properly handle messages, a remote attacker exploiting...

5CVSS6.8AI score0.01966EPSS
SaveExploits0References1
NVD
NVD
•added 2015/11/02 7:59 p.m.•34 views

CVE-2015-6031

Buffer overflow in the IGDstartelt function in igddescparse.c in the MiniUPnP client aka MiniUPnPc before 1.9.20150917 allows remote UPNP servers to cause a denial of service application crash and possibly execute arbitrary code via an "oversized" XML element name...

6.8CVSS7.7AI score0.04783EPSS
SaveExploits1References9
OSV
OSV
•added 2015/11/02 7:59 p.m.•10 views

DEBIAN-CVE-2015-6031

Buffer overflow in the IGDstartelt function in igddescparse.c in the MiniUPnP client aka MiniUPnPc before 1.9.20150917 allows remote UPNP servers to cause a denial of service application crash and possibly execute arbitrary code via an "oversized" XML element name...

6.8CVSS8.2AI score0.04783EPSS
SaveExploits1References1
Prion
Prion
•added 2015/11/02 7:59 p.m.•36 views

Buffer overflow

Buffer overflow in the IGDstartelt function in igddescparse.c in the MiniUPnP client aka MiniUPnPc before 1.9.20150917 allows remote UPNP servers to cause a denial of service application crash and possibly execute arbitrary code via an "oversized" XML element name...

6.8CVSS8.4AI score0.04783EPSS
SaveExploits1References9Affected Software5
Cvelist
Cvelist
•added 2015/11/02 7:00 p.m.•52 views

CVE-2015-6031

Buffer overflow in the IGDstartelt function in igddescparse.c in the MiniUPnP client aka MiniUPnPc before 1.9.20150917 allows remote UPNP servers to cause a denial of service application crash and possibly execute arbitrary code via an "oversized" XML element name...

7.6AI score0.04783EPSS
SaveExploits1References9
CVE
CVE
•added 2015/11/02 7:00 p.m.•155 views

CVE-2015-6031

CVE-2015-6031 : A buffer overflow exists in MiniUPnP Client (MiniUPnPc) in the IGDstartelt function within igd_desc_parse.c. Versions before 1.9.20150917 are affected, allowing remote UPNP servers to crash the application and potentially execute arbitrary code via an oversized XML element name. S...

6.8CVSS7.8AI score0.04783EPSS
SaveExploits1References9Affected Software1
Debian CVE
Debian CVE
•added 2015/11/02 7:00 p.m.•72 views

CVE-2015-6031

Buffer overflow in the IGDstartelt function in igddescparse.c in the MiniUPnP client aka MiniUPnPc before 1.9.20150917 allows remote UPNP servers to cause a denial of service application crash and possibly execute arbitrary code via an "oversized" XML element name...

6.8CVSS7.6AI score0.04783EPSS
SaveExploits1
RedhatCVE
RedhatCVE
•added 2015/10/30 10:20 a.m.•30 views

CVE-2009-2844

cfg80211 in net/wireless/scan.c in the Linux kernel 2.6.30-rc1 and other versions before 2.6.31-rc6 allows remote attackers to cause a denial of service crash via a sequence of beacon frames in which one frame omits an SSID Information Element IE and the subsequent frame contains an SSID IE, whic...

7.8CVSS7.1AI score0.03357EPSS
SaveExploits0References3
CNVD
CNVD
•added 2015/10/30 12:00 a.m.•28 views

Allen-Bradley MicroLogix Arbitrary File Insertion Vulnerability

Allen-Bradley MicroLogix is a programmable logic controller PLC from Rockwell Automation. An arbitrary file insertion vulnerability exists in Allen-Bradley MicroLogix 1100 before B FRN 15.000 and 1400 before B FRN 15.003. It allows an authenticated remote user to insert the contents of an arbitra...

4CVSS6.9AI score0.01617EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
•added 2015/10/29 12:00 a.m.•13 views

The vulnerabilities of Microsoft Excel editors, programs for viewing Xls and Xlsx files (Excel Viewer), the Microsoft SharePoint Server corporate application suite, and the Microsoft Office Compatibility Pack enable a hacker to execute arbitrary code.

The vulnerability of Microsoft Excel editors, the Xls and Xlsx file viewers, Microsoft SharePoint Server, and the Microsoft Office Compatibility Pack are related to the use of memory after it is released. Exploiting this vulnerability can allow an attacker to execute arbitrary code remotely by...

9.3CVSS6AI score0.20151EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
•added 2015/10/29 12:00 a.m.•14 views

The vulnerability of Google Chrome browser allows a violator to circumvent existing access restrictions.

The vulnerability of the Blink component in Google Chrome exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to bypass existing access restrictions by using a specially crafted HTML document containing an IFRAME element...

7.5CVSS7.7AI score0.01729EPSS
SaveExploits1References4Affected Software1
NVD
NVD
•added 2015/10/28 10:59 a.m.•25 views

CVE-2015-6491

Allen-Bradley MicroLogix 1100 devices before B FRN 15.000 and 1400 devices before B FRN 15.003 allow remote authenticated users to insert the content of an arbitrary file into a FRAME element via unspecified vectors...

4CVSS6.3AI score0.01617EPSS
SaveExploits0References1
Prion
Prion
•added 2015/10/28 10:59 a.m.•28 views

Code injection

Allen-Bradley MicroLogix 1100 devices before B FRN 15.000 and 1400 devices before B FRN 15.003 allow remote authenticated users to insert the content of an arbitrary file into a FRAME element via unspecified vectors...

4CVSS6.9AI score0.01617EPSS
SaveExploits0References1Affected Software2
Cvelist
Cvelist
•added 2015/10/28 10:00 a.m.•41 views

CVE-2015-6491

Allen-Bradley MicroLogix 1100 devices before B FRN 15.000 and 1400 devices before B FRN 15.003 allow remote authenticated users to insert the content of an arbitrary file into a FRAME element via unspecified vectors...

6.3AI score0.01617EPSS
SaveExploits0References1
Rows per page
Query Builder