Lucene search
K

9262 matches found

Prion
Prion
added 2011/09/30 10:55 a.m.17 views

Integer overflow

Integer underflow in Mozilla Firefox 3.6.x before 3.6.23 allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via JavaScript code containing a large RegExp expression...

10CVSS8.3AI score0.05368EPSS
Exploits0References11Affected Software1
UbuntuCve
UbuntuCve
added 2011/09/30 10:55 a.m.30 views

CVE-2011-2998

Integer underflow in Mozilla Firefox 3.6.x before 3.6.23 allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via JavaScript code containing a large RegExp expression...

10CVSS6AI score0.05368EPSS
Exploits0References1
Cvelist
Cvelist
added 2011/09/30 10:0 a.m.17 views

CVE-2011-2998

Integer underflow in Mozilla Firefox 3.6.x before 3.6.23 allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via JavaScript code containing a large RegExp expression...

9.8AI score0.05368EPSS
Exploits0References11
Tenable Nessus
Tenable Nessus
added 2011/09/29 12:0 a.m.267 views

Firefox < 7.0 Multiple Vulnerabilities

The installed version of Firefox is earlier than 7.0 and thus, is potentially affected by the following security issues : - If an attacker could trick a user into holding down the 'Enter' key, via a malicious game, for example, a malicious application or extension could be downloaded and...

10CVSS8.9AI score0.05312EPSS
Exploits4References17
Tenable Nessus
Tenable Nessus
added 2011/09/29 12:0 a.m.39 views

FreeBSD : Mozilla -- multiple vulnerabilities (1fade8a3-e9e8-11e0-9580-4061862b8c22)

The Mozilla Project reports : MFSA 2011-36 Miscellaneous memory safety hazards rv:7.0 / rv:1.9.2.23 MFSA 2011-37 Integer underflow when using JavaScript RegExp MFSA 2011-38 XSS via plugins and shadowed window.location object MFSA 2011-39 Defense against multiple Location headers due to CRLF...

10CVSS8.3AI score0.05312EPSS
Exploits5References23
RedHat Linux
RedHat Linux
added 2011/09/28 11:52 p.m.3 views

Mozilla: Integer underflow when using JavaScript RegExp (MFSA 2011-37)

Integer underflow in Mozilla Firefox 3.6.x before 3.6.23 allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via JavaScript code containing a large RegExp expression...

10CVSS6.2AI score0.05368EPSS
Exploits0References4
RedHat Linux
RedHat Linux
added 2011/09/28 11:41 p.m.8 views

Mozilla: Integer underflow when using JavaScript RegExp (MFSA 2011-37)

Integer underflow in Mozilla Firefox 3.6.x before 3.6.23 allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via JavaScript code containing a large RegExp expression...

10CVSS6.2AI score0.05368EPSS
Exploits0References4
RedHat Linux
RedHat Linux
added 2011/09/28 11:25 p.m.3 views

Mozilla: Integer underflow when using JavaScript RegExp (MFSA 2011-37)

Integer underflow in Mozilla Firefox 3.6.x before 3.6.23 allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via JavaScript code containing a large RegExp expression...

10CVSS6.2AI score0.05368EPSS
Exploits0References4
RedHat Linux
RedHat Linux
added 2011/09/28 11:10 p.m.4 views

Mozilla: Integer underflow when using JavaScript RegExp (MFSA 2011-37)

Integer underflow in Mozilla Firefox 3.6.x before 3.6.23 allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via JavaScript code containing a large RegExp expression...

10CVSS6.2AI score0.05368EPSS
Exploits0References4
Mozilla
Mozilla
added 2011/09/27 12:0 a.m.45 views

Potentially exploitable crash in the YARR regular expression library — Mozilla

Security researcher Aki Helin reported a potentially exploitable crash in the YARR regular expression library used by JavaScript...

9.3CVSS9.2AI score0.05007EPSS
Exploits1References3Affected Software3
NVD
NVD
added 2011/09/15 12:26 p.m.18 views

CVE-2011-1989

Microsoft Excel 2003 SP3 and 2007 SP2; Excel in Office 2007 SP2; Excel 2010 Gold and SP1; Excel in Office 2010 Gold and SP1; Office 2004, 2008, and 2011 for Mac; Open XML File Format Converter for Mac; Excel Viewer SP2; Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats...

9.3CVSS7.4AI score0.27767EPSS
Exploits0References3
Prion
Prion
added 2011/09/15 12:26 p.m.16 views

Design/Logic Flaw

Microsoft Excel 2003 SP3 and 2007 SP2; Excel in Office 2007 SP2; Excel 2010 Gold and SP1; Excel in Office 2010 Gold and SP1; Office 2004, 2008, and 2011 for Mac; Open XML File Format Converter for Mac; Excel Viewer SP2; Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats...

9.3CVSS8AI score0.27767EPSS
Exploits0References3Affected Software5
securityvulns
securityvulns
added 2011/09/13 12:0 a.m.85 views

Vulnerability in plugins for Typepad, RapidWeaver, Habari, DasBlo, eZ Publish, EE, Serendipity, Social Web CMS, PHP-Fusion, Magento and Sweetcron

Hello 3APA3A! I want to warn you about Cross-Site Scripting vulnerability in multiple plugins for different engines it's combinations of my three publications which I've made earlier at my site. In plugins for Typepad, RapidWeaver, Habari, DasBlo, eZ Publish, EE, Serendipity, Social Web CMS,...

6.2AI score
Exploits0
Packet Storm
Packet Storm
added 2011/09/11 12:0 a.m.61 views

WP-Cumulus Variants Cross Site Scripting

Hello list! I want to warn you about Cross-Site Scripting vulnerability in multiple plugins for different engines it's combinations of my two publications which I've made last week at my site. In plugins for RapidWeaver, Habari, DasBlo, eZ Publish, EE, Serendipity, Social Web CMS, PHP-Fusion,...

0.4AI score
Exploits0
RedHat Linux
RedHat Linux
added 2011/09/05 2:19 a.m.2 views

JBoss Seam privilege escalation caused by EL interpolation in FacesMessages

jboss-seam.jar in the JBoss Seam 2 framework 2.2.x and earlier, as distributed in Red Hat JBoss Enterprise SOA Platform 4.3.0.CP04 and 5.1.0 and JBoss Enterprise Application Platform aka JBoss EAP or JBEAP 4.3.0.CP09 and 5.1.0, does not properly restrict use of Expression Language EL statements i...

6.8CVSS6.2AI score0.02286EPSS
Exploits0References4
OSV
OSV
added 2011/08/29 3:55 p.m.2 views

DEBIAN-CVE-2011-2821

Double free vulnerability in libxml2, as used in Google Chrome before 13.0.782.215, allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted XPath expression...

7.5CVSS7.4AI score0.01991EPSS
Exploits0References1
OSV
OSV
added 2011/08/29 3:55 p.m.7 views

CVE-2011-2821

Double free vulnerability in libxml2, as used in Google Chrome before 13.0.782.215, allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted XPath expression...

7AI score
Exploits0References12
NVD
NVD
added 2011/08/29 3:55 p.m.20 views

CVE-2011-2821

Double free vulnerability in libxml2, as used in Google Chrome before 13.0.782.215, allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted XPath expression...

7.5CVSS8.8AI score0.01991EPSS
Exploits0References12
Prion
Prion
added 2011/08/29 3:55 p.m.24 views

Double free

Double free vulnerability in libxml2, as used in Google Chrome before 13.0.782.215, allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted XPath expression...

7.5CVSS7.5AI score0.01991EPSS
Exploits0References12Affected Software8
Cvelist
Cvelist
added 2011/08/29 3:0 p.m.25 views

CVE-2011-2821

Double free vulnerability in libxml2, as used in Google Chrome before 13.0.782.215, allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted XPath expression...

8.8AI score0.01991EPSS
Exploits0References12
Rows per page
Query Builder