Lucene search
K

4124 matches found

Cvelist
Cvelist
added 2007/09/20 8:0 p.m.14 views

CVE-2007-5007

Stack-based buffer overflow in the irfetchseq function in balsa before 2.3.20 might allow remote IMAP servers to execute arbitrary code via a long response to a FETCH command...

7.8AI score0.00987EPSS
Exploits1References12
OpenVAS
OpenVAS
added 2007/07/31 12:0 a.m.20 views

SLAD Run

This script connects to SLAD on a remote host to run remote scanners. To work properly, this script requires to be provided with a valid SSH login by means of an SSH key with pass- phrase if the SSH public key is passphrase-protected, or a password to log in. OpenVAS Vulnerability Test Fetch...

0.2AI score
Exploits0
OpenVAS
OpenVAS
added 2007/07/31 12:0 a.m.12 views

SLAD Fetch Results

This script connects to SLAD on a remote host to fetch the result from scripts started earlier. To work properly, this script requires to be provided with a valid SSH login by means of an SSH key with pass- phrase if the SSH public key is passphrase-protected, or a password to log in. OpenVAS...

7.1AI score
Exploits0
Prion
Prion
added 2007/07/09 4:30 p.m.14 views

Design/Logic Flaw

Unspecified vulnerability in the fetch function in MDB2.php in PEAR Structures-DataGrid-DataSource-MDB2 0.1.9 and earlier allows attackers to "manipulate the generated sorting queries."...

5CVSS7AI score0.00376EPSS
Exploits0References3Affected Software1
Cvelist
Cvelist
added 2007/07/09 4:0 p.m.16 views

CVE-2007-3628

Unspecified vulnerability in the fetch function in MDB2.php in PEAR Structures-DataGrid-DataSource-MDB2 0.1.9 and earlier allows attackers to "manipulate the generated sorting queries."...

6.5AI score0.00376EPSS
Exploits0References3
CVE
CVE
added 2007/07/09 4:0 p.m.39 views

CVE-2007-3628

CVE-2007-3628 affects PEAR Structures-DataGrid-DataSource-MDB2 up to version 0.1.9, specifically the fetch function in MDB2.php. The vulnerability allows attackers to manipulate generated sorting queries. The connected documents confirm the affected component and the general impact, but do not pr...

5CVSS6.5AI score0.00376EPSS
Exploits0References3Affected Software1
Tenable Nessus
Tenable Nessus
added 2007/02/18 12:0 a.m.26 views

SUSE-SA:2007:014: bind

The remote host is missing the patch for the advisory SUSE-SA:2007:014 bind. Two security problems were fixed in the ISC BIND nameserver version 9.3.4, which are addressed by this advisory: CVE-2007-0493: If recursion is enabled, a remote attacker can dereference a freed fetch context causing the...

7.8CVSS5.6AI score0.41543EPSS
Exploits1
Exploit DB
Exploit DB
added 2007/02/15 12:0 a.m.33 views

ZebraFeeds 1.0 - 'zf_path' Remote File Inclusion

To ConTacT mE @ wWw.Asb-May.net/bb ScRiPt:-http://cazalet.org/zebrafeeds/releases/zebrafeeds-current.zip Discovered By:- ThE dE@Th aggregator.php:- requireonce$zfpath . 'includes/feed.php'; requireonce$zfpath . 'includes/view.php'; requireonce$zfpath . 'includes/template.php'; requireonce$zfpath...

7.4AI score
Exploits0
Tenable Nessus
Tenable Nessus
added 2007/02/09 12:0 a.m.35 views

Fedora Core 6 : bind-9.3.4-1.fc6 (2007-147)

Updated to version 9.3.4 which contains two security bugfixes - Serialise validation of type ANY responses. RT 16555 - It was possible to dereference a freed fetch context. RT 16584 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security...

7.8CVSS5.3AI score0.41543EPSS
Exploits1References3
seebug.org
seebug.org
added 2007/01/28 12:0 a.m.16 views

ISC BIND远程Fetch上下文拒绝服务漏洞

ISC BIND是一款开放源代码的Internet域名名字系统实现。 ISC BIND存在可能引用释放的Fetch上下问存在问题,远程攻击者可以利用漏洞对应用程序进行拒绝服务攻击。 目前没有解决方案提供。 ISC BIND 9.5 a1 ISC BIND 9.4 rc1 ISC BIND 9.4 b4 ISC BIND 9.4 b3 ISC BIND 9.4 b2 ISC BIND 9.4 b1 ISC BIND 9.4 a6 ISC BIND 9.4 a5 ISC BIND 9.4 a4 ISC BIND 9.4 a3 ISC BIND 9.4 a2 ISC BIND 9.4 a1 I...

7AI score
Exploits0
OSV
OSV
added 2007/01/25 8:28 p.m.2 views

DEBIAN-CVE-2007-0493

Use-after-free vulnerability in ISC BIND 9.3.0 up to 9.3.3, 9.4.0a1 up to 9.4.0a6, 9.4.0b1 up to 9.4.0b4, 9.4.0rc1, and 9.5.0a1 Bind Forum only allows remote attackers to cause a denial of service named daemon crash via unspecified vectors that cause named to "dereference a freed fetch context."...

7.8CVSS6.9AI score0.13838EPSS
Exploits1References1
Positive Technologies
Positive Technologies
added 2007/01/25 12:0 a.m.1 views

PT-2007-1953 · Isc +1 · Isc Bind +1

Name of the Vulnerable Software and Affected Versions: ISC BIND versions 9.3.0 through 9.3.3 ISC BIND versions 9.4.0a1 through 9.4.0a6 ISC BIND versions 9.4.0b1 through 9.4.0b4 ISC BIND version 9.4.0rc1 ISC BIND version 9.5.0a1 Description: The issue allows remote attackers to cause a denial of...

7.8CVSS7.6AI score0.41543EPSS
Exploits2References60
FreeBSD
FreeBSD
added 2006/09/26 12:0 a.m.18 views

dokuwiki -- multiple vulnerabilities

Secunia reports: Some vulnerabilities have been reported in DokuWiki, which can be exploited by malicious people to cause a DoS Denial of Service or potentially compromise a vulnerable system. Input passed to the "w" and "h" parameters in lib/exec/fetch.php is not properly sanitised before being...

6.9AI score
Exploits0References4
RedHat Linux
RedHat Linux
added 2006/05/09 11:39 a.m.1 views

security flaw

Multiple vulnerabilities in libtiff before 3.8.1 allow context-dependent attackers to cause a denial of service via a TIFF image that triggers errors in 1 the TIFFFetchAnyArray function in a tifdirread.c; 2 certain "codec cleanup methods" in b tiflzw.c, c tifpixarlog.c, and d tifzip.c; 3 and...

4CVSS5.8AI score0.14948EPSS
Exploits1References4
OSV
OSV
added 2006/04/25 11:2 p.m.1 views

DEBIAN-CVE-2006-2025

Integer overflow in the TIFFFetchData function in tifdirread.c for libtiff before 3.8.1 allows context-dependent attackers to cause a denial of service and possibly execute arbitrary code via a crafted TIFF image...

6.5CVSS7.5AI score0.0744EPSS
Exploits1References1
RedHat Linux
RedHat Linux
added 2006/04/25 2:33 p.m.3 views

security flaw

Buffer overflow in the imapfetchoverview function in the IMAP functionality phpimap.c in PHP before 4.3.3 allows remote attackers to cause a denial of service segmentation fault and possibly execute arbitrary code via a long e-mail address in a 1 To or 2 From header...

5CVSS6.3AI score0.01352EPSS
Exploits1References4
Debian CVE
Debian CVE
added 2006/04/05 10:0 a.m.12 views

CVE-2006-0051

Buffer overflow in playlistimport.cpp in Kaffeine Player 0.4.2 through 0.7.1 allows user-assisted attackers to execute arbitrary code via long HTTP request headers when Kaffeine is "fetching remote playlists", which triggers the overflow in the httppeek function...

5.1CVSS7.7AI score0.02542EPSS
Exploits0
securityvulns
securityvulns
added 2006/03/10 12:0 a.m.32 views

[SA19168] Ipswitch IMail Server/Collaboration Suite IMAP FETCH Vulnerability

TITLE: Ipswitch IMail Server/Collaboration Suite IMAP FETCH Vulnerability SECUNIA ADVISORY ID: SA19168 VERIFY ADVISORY: http://secunia.com/advisories/19168/ CRITICAL: Less critical IMPACT: DoS WHERE: From remote SOFTWARE: IMail Secure Server 2006 http://secunia.com/product/8651/ IMail Server 2006...

0.4AI score
Exploits0
Cvelist
Cvelist
added 2005/12/21 11:0 a.m.18 views

CVE-2005-4457

MailEnable Enterprise 1.1 before patch ME-10009 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via several "..." triple dot sequences in a UID FETCH command...

7.8AI score0.08634EPSS
Exploits1References2
OpenVAS
OpenVAS
added 2005/11/03 12:0 a.m.22 views

phpBB Fetch All < 2.0.12

The remote host is running a version of phpBB FetchAll older than 2.0.12. It is reported that this version of phpBB Fetch All is susceptible to an SQL injection vulnerability. This issue is due to a failure of the application to properly sanitize user-supplied input before using it in an SQL quer...

0.1AI score
Exploits0References1
Rows per page
Query Builder