Lucene search
+L

9892 matches found

OpenVAS
OpenVAS
•added 2011/03/25 12:00 a.m.•49 views

Mandriva Update for php MDVSA-2011:053 (php)

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

7.8AI score
SaveExploits0References2
OpenVAS
OpenVAS
•added 2011/03/25 12:00 a.m.•99 views

Mandriva Update for php MDVSA-2011:052 (php)

Check for the Version of php OpenVAS Vulnerability Test Mandriva Update for php MDVSA-2011:052 php Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms ...

7.5CVSS0.1AI score0.18878EPSS
SaveExploits32References2
OpenVAS
OpenVAS
•added 2011/03/25 12:00 a.m.•58 views

Mandriva Update for php MDVSA-2011:053 (php)

Check for the Version of php OpenVAS Vulnerability Test Mandriva Update for php MDVSA-2011:053 php Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms ...

7.5CVSS0.2AI score0.18878EPSS
SaveExploits36References2
Tenable Nessus
Tenable Nessus
•added 2011/03/24 12:00 a.m.•57 views

Mandriva Linux Security Advisory : php (MDVSA-2011:053)

Multiple vulnerabilities has been identified and fixed in php : The zipnamelocate function in zipnamelocate.c in the Zip extension in PHP before 5.3.6 does not properly handle a ZIPARCHIVE::FLUNCHANGED argument, which might allow context-dependent attackers to cause a denial of service applicatio...

7.5CVSS8.7AI score0.18878EPSS
SaveExploits36References11
Tenable Nessus
Tenable Nessus
•added 2011/03/24 12:00 a.m.•257 views

Mandriva Linux Security Advisory : php (MDVSA-2011:052)

Multiple vulnerabilities has been identified and fixed in php : The zipnamelocate function in zipnamelocate.c in the Zip extension in PHP before 5.3.6 does not properly handle a ZIPARCHIVE::FLUNCHANGED argument, which might allow context-dependent attackers to cause a denial of service applicatio...

7.5CVSS8.7AI score0.18878EPSS
SaveExploits32References11
NVD
NVD
•added 2011/03/23 2:00 a.m.•35 views

CVE-2011-0173

Multiple format string vulnerabilities in AppleScript in Apple Mac OS X before 10.6.7 allow context-dependent attackers to execute arbitrary code or cause a denial of service application crash via format string specifiers in a 1 display dialog or 2 display alert command in a dialog in an...

6.8CVSS7.7AI score0.01762EPSS
SaveExploits0References2
Prion
Prion
•added 2011/03/23 2:00 a.m.•29 views

Format string

Multiple format string vulnerabilities in AppleScript in Apple Mac OS X before 10.6.7 allow context-dependent attackers to execute arbitrary code or cause a denial of service application crash via format string specifiers in a 1 display dialog or 2 display alert command in a dialog in an...

6.8CVSS8.1AI score0.01762EPSS
SaveExploits0References2Affected Software2
CVE
CVE
•added 2011/03/23 1:00 a.m.•92 views

CVE-2011-0173

CVE-2011-0173 describes multiple format-string vulnerabilities in AppleScript and AppleScript Studio dialogs (display dialog/display alert) on Mac OS X prior to 10.6.7. The issues can allow a context-dependent attacker to cause an arbitrary code execution or a denial of service (application crash...

6.8CVSS6.8AI score0.01762EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2011/03/23 1:00 a.m.•52 views

CVE-2011-0173

Multiple format string vulnerabilities in AppleScript in Apple Mac OS X before 10.6.7 allow context-dependent attackers to execute arbitrary code or cause a denial of service application crash via format string specifiers in a 1 display dialog or 2 display alert command in a dialog in an...

6.9AI score0.01762EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2011/03/23 12:00 a.m.•5 views

PT-2011-2154

Name of the Vulnerable Software and Affected Versions Apple Mac OS X versions prior to 10.6.7 Description The issue allows context-dependent attackers to execute arbitrary code or cause a denial of service, resulting in an application crash, via format string specifiers in a display dialog or...

6.8CVSS6.6AI score0.01762EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2011/03/23 12:00 a.m.•6 views

CVE-2011-0173: Use of Externally-Controlled Format String

Multiple format string vulnerabilities in AppleScript in Apple Mac OS X before 10.6.7 allow context-dependent attackers to execute arbitrary code or cause a denial of service application crash via format string specifiers in a 1 display dialog or 2 display alert command in a dialog in an...

6.8CVSS6.4AI score0.01762EPSS
SaveExploits0References2
seebug.org
seebug.org
•added 2011/03/18 12:00 a.m.•21 views

PHP "phar/phar_object.c"格式字符串漏洞

BUGTRAQ ID: 46854 PHP是广泛使用的通用目的脚本语言,特别适合于Web开发,可嵌入到HTML中。 PHP的"phar/pharobject.c"函数在实现上存在格式字符串漏洞,远程攻击者可利用此漏洞绕过某些安全限制或取得提升的权限。 此漏洞源于在将用户提供的输入用作格式说明符发送到格式化的打印函数之前未正确过滤。 PHP PHP 5.3.x PHP PHP 5.2.x 厂商补丁: PHP --- 目前厂商已经发布了升级补丁以修复这个安全问题,请到厂商的主页下载: http://www.php.net...

7AI score
SaveExploits0
The Hacker News
The Hacker News
•added 2011/03/17 6:09 p.m.•54 views

PHP 5.3.6 closes five security holes !

The PHP developers have released PHP 5.3.6, a maintenance update to the PHP interpreter. Among over 60 bug fixes are a number of fixes for security related problems. A format string vulnerability in the phar extension of PHP 5.3.5, CVE-2011-1153, may allow attackers to view memory, cause a denial...

7.5CVSS7.8AI score0.17881EPSS
SaveExploits5
NVD
NVD
•added 2011/03/16 10:55 p.m.•22 views

CVE-2011-1153

Multiple format string vulnerabilities in pharobject.c in the phar extension in PHP 5.3.5 and earlier allow context-dependent attackers to obtain sensitive information from process memory, cause a denial of service memory corruption, or possibly execute arbitrary code via format string specifiers...

7.5CVSS10AI score0.06833EPSS
SaveExploits0References23
Prion
Prion
•added 2011/03/16 10:55 p.m.•27 views

Format string

Multiple format string vulnerabilities in pharobject.c in the phar extension in PHP 5.3.5 and earlier allow context-dependent attackers to obtain sensitive information from process memory, cause a denial of service memory corruption, or possibly execute arbitrary code via format string specifiers...

7.5CVSS8.5AI score0.06833EPSS
SaveExploits0References23Affected Software1
Mend
Mend
•added 2011/03/16 10:00 p.m.•6 views

CVE-2011-1153

Multiple format string vulnerabilities in pharobject.c in the phar extension in PHP 5.3.5 and earlier allow context-dependent attackers to obtain sensitive information from process memory, cause a denial of service memory corruption, or possibly execute arbitrary code via format string specifiers...

7.5CVSS0.06833EPSS
SaveExploits0References25
CVE
CVE
•added 2011/03/16 10:00 p.m.•165 views

CVE-2011-1153

CVE-2011-1153 involves multiple format string vulnerabilities in the php phar extension, specifically phar_object.c, affecting PHP 5.3.5 and earlier. The issue allows context-dependent attackers to obtain sensitive data from process memory, cause memory corruption (DoS), or potentially execute ar...

7.5CVSS9.6AI score0.06833EPSS
SaveExploits0References23Affected Software1
Cvelist
Cvelist
•added 2011/03/16 10:00 p.m.•35 views

CVE-2011-1153

Multiple format string vulnerabilities in pharobject.c in the phar extension in PHP 5.3.5 and earlier allow context-dependent attackers to obtain sensitive information from process memory, cause a denial of service memory corruption, or possibly execute arbitrary code via format string specifiers...

9.9AI score0.06833EPSS
SaveExploits0References23
Positive Technologies
Positive Technologies
•added 2011/03/16 12:00 a.m.•7 views

PT-2011-2908

Name of the Vulnerable Software and Affected Versions PHP versions prior to 5.3.5 Description The issue allows context-dependent attackers to obtain sensitive information from process memory, cause a denial of service memory corruption, or possibly execute arbitrary code via format string...

9.8CVSS0.69266EPSS
SaveExploits31References144
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2011/03/16 12:00 a.m.•9 views

CVE-2011-1153: Use of Externally-Controlled Format String

Multiple format string vulnerabilities in pharobject.c in the phar extension in PHP 5.3.5 and earlier allow context-dependent attackers to obtain sensitive information from process memory, cause a denial of service memory corruption, or possibly execute arbitrary code via format string specifiers...

7.5CVSS6.3AI score0.06833EPSS
SaveExploits0References2
Rows per page
Query Builder