Lucene search
+L

5388 matches found

Prion
Prion
•added 2014/03/12 5:15 a.m.•25 views

Memory corruption

Use-after-free vulnerability in Microsoft Internet Explorer 9 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a certain sequence of manipulations of a TextRange element, aka "Internet Explorer Memory Corruption Vulnerability."...

9.3CVSS8.1AI score0.69452EPSS
SaveExploits6References2Affected Software1
Cvelist
Cvelist
•added 2014/03/12 1:00 a.m.•49 views

CVE-2014-0307

Use-after-free vulnerability in Microsoft Internet Explorer 9 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a certain sequence of manipulations of a TextRange element, aka "Internet Explorer Memory Corruption Vulnerability."...

7.8AI score0.69452EPSS
SaveExploits6References2
CVE
CVE
•added 2014/03/12 1:00 a.m.•102 views

CVE-2014-0307

CVE-2014-0307 is a use-after-free vulnerability in Microsoft Internet Explorer 9—triggered by a sequence of manipulations of a TextRange object, enabling remote code execution or memory corruption. The connected sources confirm this is tied to the MS14-012 bulletin and specifically affect Interne...

9.3CVSS7.6AI score0.69452EPSS
SaveExploits6References2Affected Software1
Symantec
Symantec
•added 2014/03/11 12:00 a.m.•35 views

Microsoft Internet Explorer CVE-2014-0312 Memory Corruption Vulnerability

Description Microsoft Internet Explorer is prone to a memory-corruption vulnerability due to a use-after-free condition. Attackers can exploit this issue to execute arbitrary code in the context of the currently logged-in user. Failed attacks will cause denial-of-service conditions. Technologies...

9.3CVSS0.2AI score0.21499EPSS
SaveExploits1Affected Software10
UbuntuCve
UbuntuCve
•added 2014/03/10 12:00 a.m.•23 views

CVE-2014-0004

Stack-based buffer overflow in udisks before 1.0.5 and 2.x before 2.1.3 allows local users to cause a denial of service crash and possibly execute arbitrary code via a long mount point...

6.9CVSS6.2AI score0.0043EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
•added 2014/03/10 12:00 a.m.•51 views

Debian DSA-2870-1 : libyaml-libyaml-perl - heap-based buffer overflow

Florian Weimer of the Red Hat Product Security Team discovered a heap-based buffer overflow flaw in LibYAML, a fast YAML 1.1 parser and emitter library. A remote attacker could provide a YAML document with a specially crafted tag that, when parsed by an application using libyaml, would cause the...

6.8CVSS6.6AI score0.07386EPSS
SaveExploits0References4
NVD
NVD
•added 2014/03/03 4:55 p.m.•30 views

CVE-2014-2013

Stack-based buffer overflow in the xpsparsecolor function in xps/xps-common.c in MuPDF 1.3 and earlier allows remote attackers to execute arbitrary code via a large number of entries in the ContextColor value of the Fill attribute in a Path element...

7.5CVSS7.8AI score0.14787EPSS
SaveExploits2References11
Prion
Prion
•added 2014/03/03 4:55 p.m.•25 views

Stack overflow

Stack-based buffer overflow in the xpsparsecolor function in xps/xps-common.c in MuPDF 1.3 and earlier allows remote attackers to execute arbitrary code via a large number of entries in the ContextColor value of the Fill attribute in a Path element...

7.5CVSS8.5AI score0.14787EPSS
SaveExploits2References11Affected Software1
Tenable Nessus
Tenable Nessus
•added 2014/03/03 12:00 a.m.•66 views

FreeBSD : Python -- buffer overflow in socket.recvfrom_into() (8e5e6d42-a0fa-11e3-b09a-080027f2d077)

Vincent Danen via Red Hat Issue Tracker reports : A vulnerability was reported in Python's socket module, due to a boundary error within the sockrecvfrominto function, which could be exploited to cause a buffer overflow. This could be used to crash a Python application that uses the...

7.5CVSS8.4AI score0.28112EPSS
SaveExploits7References5
Prion
Prion
•added 2014/02/27 1:55 a.m.•33 views

Buffer overflow

Buffer overflow in Apple QuickTime before 7.7.5 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted clef atom in a movie file...

9.3CVSS8.2AI score0.04072EPSS
SaveExploits1References2Affected Software1
Prion
Prion
•added 2014/02/27 1:55 a.m.•31 views

Memory corruption

QuickLook in Apple OS X through 10.8.5 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted Microsoft Office document...

6.8CVSS8.1AI score0.02311EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
•added 2014/02/27 1:00 a.m.•45 views

CVE-2014-1251

Buffer overflow in Apple QuickTime before 7.7.5 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted clef atom in a movie file...

7.6AI score0.04072EPSS
SaveExploits1References2
Cvelist
Cvelist
•added 2014/02/27 1:00 a.m.•49 views

CVE-2014-1260

QuickLook in Apple OS X through 10.8.5 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted Microsoft Office document...

7.6AI score0.02311EPSS
SaveExploits1References1
Prion
Prion
•added 2014/02/26 3:55 p.m.•19 views

Buffer overflow

Buffer overflow in the ccidcardvscardhandlemessage function in hw/ccid-card-passthru.c in QEMU before 0.15.2 and 1.x before 1.0-rc4 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted VSCATR message...

6.8CVSS8.2AI score0.02258EPSS
SaveExploits0References5Affected Software3
Cvelist
Cvelist
•added 2014/02/26 3:00 p.m.•52 views

CVE-2011-4111

Buffer overflow in the ccidcardvscardhandlemessage function in hw/ccid-card-passthru.c in QEMU before 0.15.2 and 1.x before 1.0-rc4 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted VSCATR message...

7.4AI score0.02258EPSS
SaveExploits0References5
Debian CVE
Debian CVE
•added 2014/02/26 3:00 p.m.•31 views

CVE-2011-4111

Buffer overflow in the ccidcardvscardhandlemessage function in hw/ccid-card-passthru.c in QEMU before 0.15.2 and 1.x before 1.0-rc4 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted VSCATR message...

6.8CVSS7.3AI score0.02258EPSS
SaveExploits0
NVD
NVD
•added 2014/02/26 2:55 p.m.•22 views

CVE-2013-6204

The Web Console in HP Application Information Optimizer formerly HP Database Archiving 6.2, 6.3, 6.4, 7.0, and 7.1 allows remote attackers to execute arbitrary code or obtain sensitive information via unspecified vectors, aka ZDI-CAN-2004...

7.5CVSS7.4AI score0.05536EPSS
SaveExploits1References1
NVD
NVD
•added 2014/02/26 2:55 p.m.•30 views

CVE-2013-4841

Unspecified vulnerability in dbdmanager in LeftHand OS before 11.0 in HP StoreVirtual 4000 and StoreVirtual VSA Software formerly LeftHand Virtual SAN Appliance allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1509...

10CVSS7.6AI score0.10436EPSS
SaveExploits1References1
Prion
Prion
•added 2014/02/26 2:55 p.m.•29 views

Code injection

The Web Console in HP Application Information Optimizer formerly HP Database Archiving 6.2, 6.3, 6.4, 7.0, and 7.1 allows remote attackers to execute arbitrary code or obtain sensitive information via unspecified vectors, aka ZDI-CAN-2004...

7.5CVSS7.9AI score0.05536EPSS
SaveExploits1References1Affected Software1
Prion
Prion
•added 2014/02/26 2:55 p.m.•38 views

Code injection

The Web Console in HP Application Information Optimizer formerly HP Database Archiving 6.2, 6.3, 6.4, 7.0, and 7.1 allows remote attackers to execute arbitrary code or obtain sensitive information via unspecified vectors, aka ZDI-CAN-1656...

7.5CVSS7.9AI score0.05536EPSS
SaveExploits1References1Affected Software1
Rows per page
Query Builder