8924 matches found
Buffer overflow
Buffer overflow in certain client utilities in OpenAFS before 1.6.2 allows remote authenticated users to cause a denial of service crash and possibly execute arbitrary code via a long fileserver ACL entry...
Ruby Gem Fastreader 1.0.8 Command Execution Vulnerability
Ruby Gem Fastreader version 1.0.8 suffers from a remote command execution vulnerability due to a lack of user input sanitization. Ruby gem fastreader-1.0.8 remote code exec 3/6/2013 https://rubygems.org/gems/fastreader if the url contains any ; characters code will be executed as the user when a...
CVE-2013-1794
Buffer overflow in certain client utilities in OpenAFS before 1.6.2 allows remote authenticated users to cause a denial of service crash and possibly execute arbitrary code via a long fileserver ACL entry...
CVE-2013-1794
Buffer overflow in certain client utilities in OpenAFS before 1.6.2 allows remote authenticated users to cause a denial of service crash and possibly execute arbitrary code via a long fileserver ACL entry...
Oracle Outside In Paradox Database Stream Filter Denial of Service (CVE-2013-0393)
A denial of service vulnerability has been reported in Oracle Outside In, a set of libraries used to decode many file formats. The vulnerability is due to an error while processing Paradox databases that contain a malicious entry in a field description array. A remote attacker could trigger this...
CVE-2013-7280
creationtimestamp| type| source ---|---|--- 2013-03-01 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/24556 2013-11-05 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/29445...
CVE-2013-1468
creationtimestamp| type| source ---|---|--- 2013-03-01 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/24561...
CVE-2013-1638
creationtimestamp| type| source ---|---|--- 2013-02-05 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/24448...
CVE-2012-5960
creationtimestamp| type| source ---|---|--- 2013-02-05 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/24455...
Design/Logic Flaw
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2012-4696. Reason: This candidate is a duplicate of CVE-2012-4696. A CNA inadvertently entered an unassigned ID. Notes: All CVE users should reference CVE-2012-4696 instead of this candidate. All references and descriptions in thi...
DEBIAN-CVE-2012-2137
Buffer overflow in virt/kvm/irqcomm.c in the KVM subsystem in the Linux kernel before 3.2.24 allows local users to cause a denial of service crash and possibly execute arbitrary code via vectors related to Message Signaled Interrupts MSI, irq routing entries, and an incorrect check by the...
CVE-2012-2137
Buffer overflow in virt/kvm/irqcomm.c in the KVM subsystem in the Linux kernel before 3.2.24 allows local users to cause a denial of service crash and possibly execute arbitrary code via vectors related to Message Signaled Interrupts MSI, irq routing entries, and an incorrect check by the...
CVE-2013-4266
creationtimestamp| type| source ---|---|--- 2013-01-13 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/24086...
RabidHamster Log Entry sprintf() Buffer Overflow
A heap buffer overflow vulnerability exists in RabidHamster R4 web server...
Guru Auction 2.0 multiple sql injection and fix-vulnerability warning-the black bar safety net
Guru Auction 2.0 Multiple SQL Injection Vulnerabilities Author : v3n0m Application : Guru Auction 2.0 Price : $4 9 Vendor : http://www.guruscript.com/ Google Dork : inurl:subcat. php? cateid= SQLi p0c: http://domain.tld/path/subcat. php? cateid=-9999+union+all+select+null,groupconcatusername,char...
C-Panel / WHM 11.34.0 Cross Site Scripting
cPanel & WHM Cross Site Scripting Vulnerability Date: 27 Dec 2012 Author: Christy Philip Mathew Vendor or Software Link: http://cpanel.net/demo/ Version: cPanel & WHM 11.34.0 build 8 Category:: Remote POC Video - http://www.youtube.com/watch?v=HJ64X2y8o0E WHM 1. Basic cPanel ,WHM Setup - NameServ...
The new concept of foreign language network teaching platform file upload vulnerability-vulnerability warning-the black bar safety net
A lot of universities are using this learning platform, this vulnerability can lead directly to get questions answers, or even as a springboard to continue to penetrate into other school Server Detailed description: South of the Open University as an example: http://222.30.60.3/NPELS...
Mozilla: Use-after-free and buffer overflow issues found using Address Sanitizer (MFSA 2012-105)
Use-after-free vulnerability in the gfxFont::GetFontEntry function in Mozilla Firefox before 17.0, Firefox ESR 10.x before 10.0.11, Thunderbird before 17.0, Thunderbird ESR 10.x before 10.0.11, and SeaMonkey before 2.14 allows remote attackers to execute arbitrary code or cause a denial of servic...
Memory mapping failure DoS vulnerability
ISSUE DESCRIPTION When setp2mentry fails, Xen's internal data structures the p2m and m2p tables can get out of sync. This failure can be triggered by unusual guest behaviour exhausting the memory reserved for the p2m table. If it happens, subsequent guest-invoked memory operations can cause Xen t...
