Lucene search
K

69 matches found

BDU FSTEC
BDU FSTEC
added 2016/05/31 12:0 a.m.2 views

The vulnerability of the PHP interpreter, which allows attackers to trigger a service failure or exert other effects.

The vulnerability of the pharconverttoother function ext/phar/pharobject.c in the PHP interpreter exists due to the lack of checking the file pointer before it is closed. Exploiting this vulnerability could allow a malicious actor to cause service failures or potentially have other effects using ...

10CVSS7.5AI score0.10384EPSS
Exploits0References5Affected Software1
OSV
OSV
added 2015/07/20 12:0 a.m.2 views

UBUNTU-CVE-2015-5589

The pharconverttoother function in ext/phar/pharobject.c in PHP before 5.4.43, 5.5.x before 5.5.27, and 5.6.x before 5.6.11 does not validate a file pointer before a close operation, which allows remote attackers to cause a denial of service segmentation fault or possibly have unspecified other...

9.8CVSS7.2AI score0.10384EPSS
Exploits0References4
NVD
NVD
added 2015/03/27 2:59 p.m.13 views

CVE-2014-8121

DBLOOKUP in nssfiles/files-XXX.c in the Name Service Switch NSS in GNU C Library aka glibc or libc6 2.21 and earlier does not properly check if a file is open, which allows remote attackers to cause a denial of service infinite loop by performing a look-up on a database while iterating over it,...

5CVSS8.2AI score0.02531EPSS
Exploits1References10
OSV
OSV
added 2015/03/27 2:59 p.m.3 views

DEBIAN-CVE-2014-8121

DBLOOKUP in nssfiles/files-XXX.c in the Name Service Switch NSS in GNU C Library aka glibc or libc6 2.21 and earlier does not properly check if a file is open, which allows remote attackers to cause a denial of service infinite loop by performing a look-up on a database while iterating over it,...

5CVSS6.7AI score0.02531EPSS
Exploits1References1
Debian CVE
Debian CVE
added 2015/03/27 2:0 p.m.37 views

CVE-2014-8121

DBLOOKUP in nssfiles/files-XXX.c in the Name Service Switch NSS in GNU C Library aka glibc or libc6 2.21 and earlier does not properly check if a file is open, which allows remote attackers to cause a denial of service infinite loop by performing a look-up on a database while iterating over it,...

5CVSS7.8AI score0.02531EPSS
Exploits1
UbuntuCve
UbuntuCve
added 2015/03/27 12:0 a.m.31 views

CVE-2014-8121

DBLOOKUP in nssfiles/files-XXX.c in the Name Service Switch NSS in GNU C Library aka glibc or libc6 2.21 and earlier does not properly check if a file is open, which allows remote attackers to cause a denial of service infinite loop by performing a look-up on a database while iterating over it,...

5CVSS6.9AI score0.02531EPSS
Exploits1References3
Prion
Prion
added 2012/08/19 8:55 p.m.13 views

Code injection

Array index error in Sielco Sistemi Winlog Pro SCADA before 2.07.17 and Winlog Lite SCADA before 2.07.17 might allow remote attackers to execute arbitrary code by referencing, within a port-46824 TCP packet, an invalid file-pointer index that leads to execution of an EnterCriticalSection code blo...

9.3CVSS8.3AI score0.21506EPSS
Exploits1References4Affected Software2
Cvelist
Cvelist
added 2012/08/19 8:0 p.m.27 views

CVE-2012-4357

Array index error in Sielco Sistemi Winlog Pro SCADA before 2.07.17 and Winlog Lite SCADA before 2.07.17 might allow remote attackers to execute arbitrary code by referencing, within a port-46824 TCP packet, an invalid file-pointer index that leads to execution of an EnterCriticalSection code blo...

7.7AI score0.21506EPSS
Exploits1References4
Prion
Prion
added 2010/05/13 5:30 p.m.27 views

Memory corruption

iml32.dll in Adobe Shockwave Player before 11.5.7.609 does not validate a certain value from a file before using it in file-pointer calculations, which allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted .dir aka Director file...

9.3CVSS8.1AI score0.11496EPSS
Exploits0References6Affected Software1
Rows per page
Query Builder