Lucene search
K

9085 matches found

NVD
NVD
added 2011/08/29 3:55 p.m.17 views

CVE-2011-2821

Double free vulnerability in libxml2, as used in Google Chrome before 13.0.782.215, allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted XPath expression...

7.5CVSS8.8AI score0.01915EPSS
Exploits0References12
Prion
Prion
added 2011/08/29 3:55 p.m.23 views

Double free

Double free vulnerability in libxml2, as used in Google Chrome before 13.0.782.215, allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted XPath expression...

7.5CVSS7.5AI score0.01915EPSS
Exploits0References12Affected Software8
Debian CVE
Debian CVE
added 2011/08/29 3:0 p.m.30 views

CVE-2011-2821

Double free vulnerability in libxml2, as used in Google Chrome before 13.0.782.215, allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted XPath expression...

7.5CVSS8.7AI score0.01915EPSS
Exploits0
Cvelist
Cvelist
added 2011/08/29 3:0 p.m.24 views

CVE-2011-2821

Double free vulnerability in libxml2, as used in Google Chrome before 13.0.782.215, allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted XPath expression...

8.8AI score0.01915EPSS
Exploits0References12
UbuntuCve
UbuntuCve
added 2011/08/29 12:0 a.m.26 views

CVE-2011-2821

Double free vulnerability in libxml2, as used in Google Chrome before 13.0.782.215, allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted XPath expression...

7.5CVSS6AI score0.01915EPSS
Exploits0References2
RedHat Linux
RedHat Linux
added 2011/08/16 6:29 p.m.0 views

Mozilla: Private data leakage using RegExp.input

Mozilla Firefox before 3.6.20, Thunderbird 2.x and 3.x before 3.1.12, SeaMonkey 1.x and 2.x, and possibly other products does not properly handle the RegExp.input property, which allows remote attackers to bypass the Same Origin Policy and read data from a different domain via a crafted web site,...

4.3CVSS5.9AI score0.00849EPSS
Exploits1References4
RedHat Linux
RedHat Linux
added 2011/08/16 6:12 p.m.2 views

Mozilla: Private data leakage using RegExp.input

Mozilla Firefox before 3.6.20, Thunderbird 2.x and 3.x before 3.1.12, SeaMonkey 1.x and 2.x, and possibly other products does not properly handle the RegExp.input property, which allows remote attackers to bypass the Same Origin Policy and read data from a different domain via a crafted web site,...

4.3CVSS5.9AI score0.00849EPSS
Exploits1References4
RedHat Linux
RedHat Linux
added 2011/08/10 6:23 p.m.1 views

JBoss Seam privilege escalation caused by EL interpolation in FacesMessages

jboss-seam.jar in the JBoss Seam 2 framework 2.2.x and earlier, as distributed in Red Hat JBoss Enterprise SOA Platform 4.3.0.CP04 and 5.1.0 and JBoss Enterprise Application Platform aka JBoss EAP or JBEAP 4.3.0.CP09 and 5.1.0, does not properly restrict use of Expression Language EL statements i...

6.8CVSS6.2AI score0.01022EPSS
Exploits0References4
securityvulns
securityvulns
added 2011/08/01 12:0 a.m.69 views

[SECURITY] [DSA 2286-1] phpmyadmin security update

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------- Debian Security Advisory DSA-2286-1 [email protected] http://www.debian.org/security/ Thijs Kinkhorst July 26, 2011 http://www.debian.org/security/faq -...

7.5CVSS1.5AI score0.37008EPSS
Exploits18
securityvulns
securityvulns
added 2011/08/01 12:0 a.m.26 views

Wireshark 1.6.1 Malformed IKE Packet Denial of Service

Wireshark 1.6.1 Malformed IKE Packet Denial of Service ------------------------------------------------------------------ I. Summary A flaw has been identified in Wireshark 1.6.1 concerning IKEv1 protocol dissector and the function prototreeadditem ,when add more than 1000000 items to a...

0.5AI score
Exploits0
NVD
NVD
added 2011/07/27 2:55 a.m.28 views

CVE-2011-2196

jboss-seam.jar in the JBoss Seam 2 framework 2.2.x and earlier, as distributed in Red Hat JBoss Enterprise SOA Platform 4.3.0.CP05 and 5.1.0; JBoss Enterprise Application Platform aka JBoss EAP or JBEAP 4.3.0, 4.3.0.CP09, and 5.1.1; and JBoss Enterprise Web Platform 5.1.1, does not properly...

6.8CVSS7.4AI score0.01215EPSS
Exploits0References10
Prion
Prion
added 2011/07/27 2:55 a.m.19 views

Input validation

jboss-seam.jar in the JBoss Seam 2 framework 2.2.x and earlier, as distributed in Red Hat JBoss Enterprise SOA Platform 4.3.0.CP05 and 5.1.0; JBoss Enterprise Application Platform aka JBoss EAP or JBEAP 4.3.0, 4.3.0.CP09, and 5.1.1; and JBoss Enterprise Web Platform 5.1.1, does not properly...

6.8CVSS7.5AI score0.01215EPSS
Exploits0References10Affected Software4
NVD
NVD
added 2011/07/27 2:42 a.m.16 views

CVE-2011-1484

jboss-seam.jar in the JBoss Seam 2 framework 2.2.x and earlier, as distributed in Red Hat JBoss Enterprise SOA Platform 4.3.0.CP04 and 5.1.0 and JBoss Enterprise Application Platform aka JBoss EAP or JBEAP 4.3.0.CP09 and 5.1.0, does not properly restrict use of Expression Language EL statements i...

6.8CVSS7.2AI score0.01022EPSS
Exploits0References8
Cvelist
Cvelist
added 2011/07/27 1:0 a.m.24 views

CVE-2011-1484

jboss-seam.jar in the JBoss Seam 2 framework 2.2.x and earlier, as distributed in Red Hat JBoss Enterprise SOA Platform 4.3.0.CP04 and 5.1.0 and JBoss Enterprise Application Platform aka JBoss EAP or JBEAP 4.3.0.CP09 and 5.1.0, does not properly restrict use of Expression Language EL statements i...

7.2AI score0.01022EPSS
Exploits0References8
CVE
CVE
added 2011/07/27 1:0 a.m.95 views

CVE-2011-1484

CVE-2011-1484 affects JBoss Seam 2 framework (2.2.x and earlier) distributed with Red Hat JBoss Enterprise platforms. The flaw stems from improper restriction of EL statements in FacesMessages during page exception handling, enabling remote code execution via a crafted URL. Red Hat advisories RHS...

6.8CVSS7.3AI score0.01022EPSS
Exploits0References8Affected Software3
Positive Technologies
Positive Technologies
added 2011/07/27 12:0 a.m.2 views

PT-2011-3676 · Red Hat · Red Hat Jboss Enterprise Application Platform +3

Name of the Vulnerable Software and Affected Versions: JBoss Seam 2 framework versions 2.2.x and earlier Red Hat JBoss Enterprise SOA Platform versions 4.3.0.CP05 and 5.1.0 JBoss Enterprise Application Platform aka JBoss EAP or JBEAP versions 4.3.0, 4.3.0.CP09, and 5.1.1 JBoss Enterprise Web...

6.8CVSS7.2AI score0.01215EPSS
Exploits0References12
OSV
OSV
added 2011/07/26 12:0 a.m.25 views

DSA-2286-1 phpymadmin - several

Bulletin has no description...

7.5CVSS6.6AI score0.37008EPSS
Exploits18
RedHat Linux
RedHat Linux
added 2011/07/18 8:56 p.m.2 views

JBoss Seam EL interpolation in exception handling

jboss-seam.jar in the JBoss Seam 2 framework 2.2.x and earlier, as distributed in Red Hat JBoss Enterprise SOA Platform 4.3.0.CP05 and 5.1.0; JBoss Enterprise Application Platform aka JBoss EAP or JBEAP 4.3.0, 4.3.0.CP09, and 5.1.1; and JBoss Enterprise Web Platform 5.1.1, does not properly...

6.8CVSS6.2AI score0.01215EPSS
Exploits0References4
RedHat Linux
RedHat Linux
added 2011/07/18 8:35 p.m.1 views

JBoss Seam EL interpolation in exception handling

jboss-seam.jar in the JBoss Seam 2 framework 2.2.x and earlier, as distributed in Red Hat JBoss Enterprise SOA Platform 4.3.0.CP05 and 5.1.0; JBoss Enterprise Application Platform aka JBoss EAP or JBEAP 4.3.0, 4.3.0.CP09, and 5.1.1; and JBoss Enterprise Web Platform 5.1.1, does not properly...

6.8CVSS6.2AI score0.01215EPSS
Exploits0References4
RedHat Linux
RedHat Linux
added 2011/07/18 8:32 p.m.2 views

JBoss Seam EL interpolation in exception handling

jboss-seam.jar in the JBoss Seam 2 framework 2.2.x and earlier, as distributed in Red Hat JBoss Enterprise SOA Platform 4.3.0.CP05 and 5.1.0; JBoss Enterprise Application Platform aka JBoss EAP or JBEAP 4.3.0, 4.3.0.CP09, and 5.1.1; and JBoss Enterprise Web Platform 5.1.1, does not properly...

6.8CVSS6.2AI score0.01215EPSS
Exploits0References4
Rows per page
Query Builder