1327 matches found
kernel: jbd/jbd2: invalid value of first log block leads to oops
The cleanupjournaltail function in the Journaling Block Device JBD functionality in the Linux kernel 2.6 allows local users to cause a denial of service assertion error and kernel oops via an ext3 or ext4 image with an "invalid log first block value."...
CVE-2011-4153
PHP 5.3.8 does not always check the return value of the zendstrndup function, which might allow remote attackers to cause a denial of service NULL pointer dereference and application crash via crafted input to an application that performs strndup operations on untrusted string data, as demonstrat...
CVE-2011-4153
PHP 5.3.8 does not always check the return value of the zendstrndup function, which might allow remote attackers to cause a denial of service NULL pointer dereference and application crash via crafted input to an application that performs strndup operations on untrusted string data, as demonstrat...
PHP 5.3.8 - Multiple Vulnerabilities
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 PHP 5.3.8 Multiple vulnerabilities Author: Maksymilian Arciemowicz Website: http://cxsecurity.com/ Date: 14.01.2012 CVE: CVE-2011-4153 zendstrndup Original link: http://cxsecurity.com/research/103 --- 1. Multiple NULL Pointer Dereference with...
kernel: jbd/jbd2: invalid value of first log block leads to oops
The cleanupjournaltail function in the Journaling Block Device JBD functionality in the Linux kernel 2.6 allows local users to cause a denial of service assertion error and kernel oops via an ext3 or ext4 image with an "invalid log first block value."...
PT-2011-4853 · Linux +3 · Linux Kernel +3
Name of the Vulnerable Software and Affected Versions: Linux kernel version 2.6 Description: The issue is related to the Journaling Block Device JBD functionality in the Linux kernel, specifically the cleanup journal tail function. It allows local users to cause a denial of service, resulting in ...
kernel: ext4: kernel panic when writing data to the last block of sparse file
Multiple off-by-one errors in the ext4 subsystem in the Linux kernel before 3.0-rc5 allow local users to cause a denial of service BUGON and system crash by accessing a sparse file in extent format with a write operation involving a block number corresponding to the largest possible 32-bit unsign...
MantisBT Multiple Local File Include and Cross Site Scripting Vulnerabilities
This host is running MantisBT and is prone to multiple local file include and cross-site scripting vulnerabilities. OpenVAS Vulnerability Test $Id: secpodmantismultlfinxssvuln.nasl 7044 2017-09-01 11:50:59Z teissa $ MantisBT Multiple Local File Include and Cross Site Scripting Vulnerabilities...
CVE-2011-3182
PHP before 5.3.7 does not properly check the return values of the malloc, calloc, and realloc library functions, which allows context-dependent attackers to cause a denial of service NULL pointer dereference and application crash or trigger a buffer overflow by leveraging the ability to provide a...
CVE-2011-3182
PHP before 5.3.7 does not properly check the return values of the malloc, calloc, and realloc library functions, which allows context-dependent attackers to cause a denial of service NULL pointer dereference and application crash or trigger a buffer overflow by leveraging the ability to provide a...
PHP 5.3.3-5.3.6 ext-sockets-sockets.c socket_connect函数栈缓冲区溢出漏洞
No description provided by source...
CVE-2010-4760: Exposure of Sensitive Information to an Unauthorized Actor
Open Ticket Request System OTRS before 3.0.0-beta6 adds email-notification-ext articles to tickets during processing of event-based notifications, which allows remote authenticated users to obtain potentially sensitive information by reading a ticket...
Integer overflow
Integer overflow in ext/shmop/shmop.c in PHP before 5.3.6 allows context-dependent attackers to cause a denial of service crash and possibly read sensitive memory via a large third argument to the shmopread function...
CVE-2011-1092
CVE-2011-1092 refers to an integer overflow in PHP 5.3.x before 5.3.6 (ext/shmop/shmop.c) that can cause a denial of service and potentially read sensitive memory via a large third argument to shmop_read. Public documents confirm PHP 5.3.x
CVE-2011-1092: Undefined Security Weakness
Integer overflow in ext/shmop/shmop.c in PHP before 5.3.6 allows context-dependent attackers to cause a denial of service crash and possibly read sensitive memory via a large third argument to the shmopread function...
CVE-2010-4150: Undefined Security Weakness
Double free vulnerability in the imapdoopen function in the IMAP extension ext/imap/phpimap.c in PHP 5.2 before 5.2.15 and 5.3 before 5.3.4 allows attackers to cause a denial of service memory corruption or possibly execute arbitrary code via unspecified vectors...
CVE-2009-5016: Undefined Security Weakness
Integer overflow in the xmlutf8decode function in ext/xml/xml.c in PHP before 5.2.11 makes it easier for remote attackers to bypass cross-site scripting XSS and SQL injection protection mechanisms via a crafted string that uses overlong UTF-8 encoding, a different vulnerability than CVE-2010-3870...
ZDI-10-103: Microsoft Office Excel DBQueryExt Record Unspecified ADO Object Remote Code Execution Vulnerability
ZDI-10-103: Microsoft Office Excel DBQueryExt Record Unspecified ADO Object Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-10-103 June 8, 2010 -- CVE ID: CVE-2010-1253 -- Affected Vendors: Microsoft -- Affected Products: Microsoft Office Excel -- TippingPointT...
CVE-2010-2094: Use of Externally-Controlled Format String
Multiple format string vulnerabilities in the phar extension in PHP 5.3 before 5.3.2 allow context-dependent attackers to obtain sensitive information memory contents and possibly execute arbitrary code via a crafted phar:// URI that is not properly handled by the 1 pharstreamflush, 2...
PHP 5.3.x < 5.3.2 - 'ext/phar/stream.c' / 'ext/phar/dirstream.c' Multiple Format String Vulnerabilities
source: https://www.securityfocus.com/bid/40173/info PHP is prone to multiple format-string vulnerabilities because it fails to properly sanitize user-supplied input before passing it as the format specifier to a formatted-printing function. Attackers can exploit these issues to run arbitrary cod...