Lucene search
+L

1246 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2009/10/29 12:00 a.m.•5 views

CVE-2009-3370: Undefined Security Weakness

Mozilla Firefox before 3.0.15, and 3.5.x before 3.5.4, allows remote attackers to read form history by forging mouse and keyboard events that leverage the auto-fill feature to populate form fields, in an attacker-readable form, with history entries...

5CVSS6.3AI score0.01983EPSS
SaveExploits1References1
RedHat Linux
RedHat Linux
•added 2009/10/27 10:43 p.m.•16 views

Firefox form history vulnerable to stealing

Mozilla Firefox before 3.0.15, and 3.5.x before 3.5.4, allows remote attackers to read form history by forging mouse and keyboard events that leverage the auto-fill feature to populate form fields, in an attacker-readable form, with history entries...

5CVSS6.9AI score0.01983EPSS
SaveExploits1References4
OpenVAS
OpenVAS
•added 2009/04/09 12:00 a.m.•112 views

Mandriva Update for ruby MDVSA-2008:140 (ruby)

Check for the Version of ruby OpenVAS Vulnerability Test Mandriva Update for ruby MDVSA-2008:140 ruby Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the ter...

10CVSS0.2AI score0.04456EPSS
SaveExploits2References2
Prion
Prion
•added 2008/09/11 1:01 a.m.•31 views

Integer overflow

Integer overflow in GDI+ in Microsoft Internet Explorer 6 SP1, Windows XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, Server 2008, Office XP SP3, Office 2003 SP2 and SP3, 2007 Microsoft Office System Gold and SP1, Visio 2002 SP2, PowerPoint Viewer 2003, Works 8, Digital Image Suite...

9.3CVSS8.6AI score0.52886EPSS
SaveExploits2References10Affected Software15
securityvulns
securityvulns
•added 2008/09/10 12:00 a.m.•79 views

iDefense Security Advisory 09.09.08: Microsoft Windows GDI+ Gradient Fill Heap Overflow Vulnerability

iDefense Security Advisory 09.09.08 http://labs.idefense.com/intelligence/vulnerabilities/ Sep 09, 2008 I. BACKGROUND The GDI+ library, or "GdiPlus.dll", provides access to a number of graphics methods, via a class-based API. Vector Markup Language VML is a component of the Extensible Markup...

9.3CVSS6.1AI score0.52886EPSS
SaveExploits2
RedHat Linux
RedHat Linux
•added 2008/07/14 1:38 p.m.•22 views

ruby: integer overflows in rb_ary_fill() / Array#fill

Integer overflow in the rbaryfill function in array.c in Ruby before revision 17756 allows context-dependent attackers to cause a denial of service crash or possibly have unspecified other impact via a call to the Arrayfill method with a start aka beg argument greater than ARYMAXSIZE. NOTE: this...

7.5CVSS5.9AI score0.03601EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
•added 2008/07/14 1:26 p.m.•16 views

ruby: integer overflows in rb_ary_fill() / Array#fill

Integer overflow in the rbaryfill function in array.c in Ruby before revision 17756 allows context-dependent attackers to cause a denial of service crash or possibly have unspecified other impact via a call to the Arrayfill method with a start aka beg argument greater than ARYMAXSIZE. NOTE: this...

7.5CVSS5.9AI score0.03601EPSS
SaveExploits0References4
Snyk
Snyk
•added 2008/07/09 12:41 a.m.•13 views

Denial of Service (DoS)

Overview Affected versions of this package are vulnerable to Denial of Service DoS. Integer overflow in the rbaryfill function in array.c in Ruby before revision 17756 allows context-dependent attackers to cause a denial of service crash or possibly have unspecified other impact via a call to the...

7.5CVSS7.7AI score0.03601EPSS
SaveExploits0References2
NVD
NVD
•added 2008/07/09 12:41 a.m.•19 views

CVE-2008-2376

Integer overflow in the rbaryfill function in array.c in Ruby before revision 17756 allows context-dependent attackers to cause a denial of service crash or possibly have unspecified other impact via a call to the Arrayfill method with a start aka beg argument greater than ARYMAXSIZE. NOTE: this...

7.5CVSS7.3AI score0.03601EPSS
SaveExploits0References28
Positive Technologies
Positive Technologies
•added 2008/07/09 12:00 a.m.•13 views

PT-2008-3855 · Ruby +1 · Ruby +1

Name of the Vulnerable Software and Affected Versions: Ruby versions prior to revision 17756 Description: The issue is related to an integer overflow in the rb ary fill function, which can be triggered by calling the Arrayfill method with a start argument greater than ARY MAX SIZE. This can lead ...

10CVSS7.9AI score0.04456EPSS
SaveExploits1References37
Cvelist
Cvelist
•added 2008/07/09 12:00 a.m.•25 views

CVE-2008-2376

Integer overflow in the rbaryfill function in array.c in Ruby before revision 17756 allows context-dependent attackers to cause a denial of service crash or possibly have unspecified other impact via a call to the Arrayfill method with a start aka beg argument greater than ARYMAXSIZE. NOTE: this...

7.3AI score0.03601EPSS
SaveExploits0References28
CVE
CVE
•added 2008/07/09 12:00 a.m.•103 views

CVE-2008-2376

CVE-2008-2376 is an integer overflow in Ruby’s rb_ary_fill (array.c) that affects Ruby before revision 17756, allowing context-dependent attackers to cause a crash or potentially other impact via Array#fill when start (beg) > ARY_MAX_SIZE. The issue arises from an incomplete fix for related ov...

7.5CVSS7.3AI score0.03601EPSS
SaveExploits0References28Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2008/07/09 12:00 a.m.•5 views

CVE-2008-2376: Undefined Security Weakness

Integer overflow in the rbaryfill function in array.c in Ruby before revision 17756 allows context-dependent attackers to cause a denial of service crash or possibly have unspecified other impact via a call to the Arrayfill method with a start aka beg argument greater than ARYMAXSIZE. NOTE: this...

7.5CVSS6AI score0.03601EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2008/07/08 12:00 a.m.•50 views

Fedora 8 : ruby-1.8.6.230-4.fc8 (2008-6094)

Tue Jul 1 2008 Akira TAGOH - 1.8.6.230-4 - Backported from upstream SVN to fix a segfault issue with Arrayfill. - Mon Jun 30 2008 Akira TAGOH - 1.8.6.230-3 - Backported from upstream SVN to fix a segfault issue. 452825 - Backported from upstream SVN to fix an integer overflow in rbaryfill. - Wed...

10CVSS7.2AI score0.27778EPSS
SaveExploits4References3
Tenable Nessus
Tenable Nessus
•added 2008/07/08 12:00 a.m.•41 views

Fedora 9 : ruby-1.8.6.230-4.fc9 (2008-6033)

Tue Jul 1 2008 Akira TAGOH - 1.8.6.230-4 - Backported from upstream SVN to fix a segfault issue with Arrayfill. - Mon Jun 30 2008 Akira TAGOH - 1.8.6.230-3 - Backported from upstream SVN to fix a segfault issue. 452825 - Backported from upstream SVN to fix an integer overflow in rbaryfill. - Wed...

10CVSS7.2AI score0.04456EPSS
SaveExploits2References3
UbuntuCve
UbuntuCve
•added 2008/07/08 12:00 a.m.•26 views

CVE-2008-2376

Integer overflow in the rbaryfill function in array.c in Ruby before revision 17756 allows context-dependent attackers to cause a denial of service crash or possibly have unspecified other impact via a call to the Arrayfill method with a start aka beg argument greater than ARYMAXSIZE. NOTE: this...

7.5CVSS5.9AI score0.03601EPSS
SaveExploits0References2
RubySec
RubySec
•added 2008/06/30 12:00 a.m.•36 views

More ruby integer overflows (rb_ary_fill / Array#fill)

Integer overflow in the rbaryfill function in array.c in Ruby before revision 17756 allows context-dependent attackers to cause a denial of service crash or possibly have unspecified other impact via a call to the Arrayfill method with a start aka beg argument greater than ARYMAXSIZE. NOTE: this...

7.5CVSS6.1AI score0.03601EPSS
SaveExploits0References1Affected Software1
OSV
OSV
•added 2008/04/24 5:05 a.m.•10 views

DEBIAN-CVE-2008-1928

Buffer overflow in Imager 0.42 through 0.63 allows attackers to cause a denial of service crash via an image based fill in which the number of input channels is different from the number of output channels...

5CVSS6.6AI score0.01672EPSS
SaveExploits1References1
NVD
NVD
•added 2008/04/24 5:05 a.m.•24 views

CVE-2008-1928

Buffer overflow in Imager 0.42 through 0.63 allows attackers to cause a denial of service crash via an image based fill in which the number of input channels is different from the number of output channels...

5CVSS6.5AI score0.01672EPSS
SaveExploits1References8
Cvelist
Cvelist
•added 2008/04/23 6:00 p.m.•35 views

CVE-2008-1928

Buffer overflow in Imager 0.42 through 0.63 allows attackers to cause a denial of service crash via an image based fill in which the number of input channels is different from the number of output channels...

6.3AI score0.01672EPSS
SaveExploits1References8
Rows per page
Query Builder