Lucene search
+L

1976 matches found

BDU FSTEC
BDU FSTEC
added 2015/04/28 12:00 a.m.13 views

The vulnerability of the Red Hat Enterprise Linux operating system allows a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the gd-progs-2.0.28 package for the Red Hat Enterprise Linux operating system can lead to violations of confidentiality, integrity, and accessibility of protected information. This vulnerability can be exploited remotely...

9.3CVSS6.5AI score0.1021EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2015/04/28 12:00 a.m.10 views

The vulnerability of the Red Hat Enterprise Linux operating system allows a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the gd-progs-2.0.33 package for the Red Hat Enterprise Linux operating system can lead to violations of confidentiality, integrity, and accessibility of protected information. This vulnerability can be exploited remotely...

9.3CVSS6.5AI score0.1021EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2015/04/28 12:00 a.m.8 views

The vulnerability of the Red Hat Enterprise Linux operating system allows a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the gd-2.0.33 package for the Red Hat Enterprise Linux operating system can lead to violations of confidentiality, integrity, and accessibility of protected information. This vulnerability can be exploited remotely...

9.3CVSS6.5AI score0.1021EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2015/04/28 12:00 a.m.13 views

The vulnerability of the CentOS operating system allows a malicious attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the gd-devel-2.0.33 package for the CentOS operating system can lead to violations of confidentiality, integrity, and accessibility of protected information. This vulnerability can be exploited remotely...

9.3CVSS6.5AI score0.1021EPSS
SaveExploits0References2Affected Software1
Tenable Nessus
Tenable Nessus
added 2015/04/20 12:00 a.m.74 views

Amazon Linux AMI : php54 (ALAS-2015-509)

A buffer overflow vulnerability was found in PHP's phar PHP Archive implementation. See https://bugs.php.net/bug.php?id=69324 for more details. CVE-2015-2783 A use-after-free flaw was found in PHP's phar PHP Archive paths implementation. A malicious script author could possibly use this flaw to...

7.5CVSS7.6AI score0.38434EPSS
SaveExploits5References7
Amazon
Amazon
added 2015/04/17 12:00 a.m.69 views

Important: php54

Issue Overview: A buffer overflow vulnerability was found in PHP's phar PHP Archive implementation. See https://bugs.php.net/bug.php?id=69324 for more details. CVE-2015-2783 A use-after-free flaw was found in PHP's phar PHP Archive paths implementation. A malicious script author could possibly us...

7.5CVSS8.8AI score0.38434EPSS
SaveExploits5
Tenable Nessus
Tenable Nessus
added 2015/04/01 12:00 a.m.36 views

openSUSE Security Update : gd (openSUSE-2015-280)

The graphics drawing library gd was updated to fix one security issue. The following vulnerability was fixed : - possible buffer read overflow CVE-2014-9709 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE...

5CVSS7.6AI score0.15425EPSS
SaveExploits1References2
OSV
OSV
added 2015/03/30 10:59 a.m.9 views

CVE-2014-9709

The GetCode function in gdgifin.c in GD 2.1.1 and earlier, as used in PHP before 5.5.21 and 5.6.x before 5.6.5, allows remote attackers to cause a denial of service buffer over-read and application crash via a crafted GIF image that is improperly handled by the gdImageCreateFromGif function...

7.1AI score
SaveExploits0References29
NVD
NVD
added 2015/03/30 10:59 a.m.28 views

CVE-2014-9709

The GetCode function in gdgifin.c in GD 2.1.1 and earlier, as used in PHP before 5.5.21 and 5.6.x before 5.6.5, allows remote attackers to cause a denial of service buffer over-read and application crash via a crafted GIF image that is improperly handled by the gdImageCreateFromGif function...

5CVSS7.2AI score0.15425EPSS
SaveExploits1References23
OSV
OSV
added 2015/03/30 10:59 a.m.8 views

DEBIAN-CVE-2014-9709

The GetCode function in gdgifin.c in GD 2.1.1 and earlier, as used in PHP before 5.5.21 and 5.6.x before 5.6.5, allows remote attackers to cause a denial of service buffer over-read and application crash via a crafted GIF image that is improperly handled by the gdImageCreateFromGif function...

5CVSS5AI score0.15425EPSS
SaveExploits1References1
Cvelist
Cvelist
added 2015/03/30 10:00 a.m.37 views

CVE-2014-9709

The GetCode function in gdgifin.c in GD 2.1.1 and earlier, as used in PHP before 5.5.21 and 5.6.x before 5.6.5, allows remote attackers to cause a denial of service buffer over-read and application crash via a crafted GIF image that is improperly handled by the gdImageCreateFromGif function...

7.6AI score0.15425EPSS
SaveExploits1References23
Debian CVE
Debian CVE
added 2015/03/30 10:00 a.m.41 views

CVE-2014-9709

The GetCode function in gdgifin.c in GD 2.1.1 and earlier, as used in PHP before 5.5.21 and 5.6.x before 5.6.5, allows remote attackers to cause a denial of service buffer over-read and application crash via a crafted GIF image that is improperly handled by the gdImageCreateFromGif function...

5CVSS7.6AI score0.15425EPSS
SaveExploits1
CVE
CVE
added 2015/03/30 10:00 a.m.239 views

CVE-2014-9709

CVE-2014-9709 is a GD library/GD PHP extension issue in which the GetCode_ function in gd_gif_in.c (GD 2.1.1 and earlier) can cause a buffer over-read and DoS when processing a crafted GIF in imagecreatefromgif(); affects PHP builds before 5.5.21 and 5.6.x before 5.6.5. Public references in Debia...

5CVSS6.9AI score0.15425EPSS
SaveExploits1References23Affected Software1
UbuntuCve
UbuntuCve
added 2015/03/30 12:00 a.m.39 views

CVE-2014-9709

The GetCode function in gdgifin.c in GD 2.1.1 and earlier, as used in PHP before 5.5.21 and 5.6.x before 5.6.5, allows remote attackers to cause a denial of service buffer over-read and application crash via a crafted GIF image that is improperly handled by the gdImageCreateFromGif function...

5CVSS6.8AI score0.15425EPSS
SaveExploits1References3
OSV
OSV
added 2015/03/24 4:10 p.m.11 views

SUSE-SU-2015:0866-1 Security update for gd

The graphics drawing library gd was updated to fix one security issue. The following vulnerability was fixed: possible buffer read overflow CVE-2014-9709...

5CVSS7.7AI score0.15425EPSS
SaveExploits1References3
NVD
NVD
added 2015/02/09 5:59 p.m.31 views

CVE-2015-1568

Cross-site request forgery CSRF vulnerability in the GD Infinite Scroll module before 7.x-1.4 for Drupal allows remote attackers to hijack the authentication of users with the "edit gd infinite scroll settings" permission for requests that delete settings via unspecified vectors...

6.8CVSS7.1AI score0.00636EPSS
SaveExploits0References3
NVD
NVD
added 2015/02/09 5:59 p.m.20 views

CVE-2015-1567

Cross-site scripting XSS vulnerability in the admin page in the GD Infinite Scroll module before 7.x-1.4 for Drupal allows remote authenticated users with the "edit gd infinite scroll settings" permission to inject arbitrary web script or HTML via unspecified vectors...

4.3CVSS5.3AI score0.01148EPSS
SaveExploits0References3
Prion
Prion
added 2015/02/09 5:59 p.m.16 views

Cross site scripting

Cross-site scripting XSS vulnerability in the admin page in the GD Infinite Scroll module before 7.x-1.4 for Drupal allows remote authenticated users with the "edit gd infinite scroll settings" permission to inject arbitrary web script or HTML via unspecified vectors...

4.3CVSS5.6AI score0.01148EPSS
SaveExploits0References3Affected Software1
Prion
Prion
added 2015/02/09 5:59 p.m.18 views

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in the GD Infinite Scroll module before 7.x-1.4 for Drupal allows remote attackers to hijack the authentication of users with the "edit gd infinite scroll settings" permission for requests that delete settings via unspecified vectors...

6.8CVSS7.5AI score0.00636EPSS
SaveExploits0References3Affected Software1
CVE
CVE
added 2015/02/09 5:00 p.m.55 views

CVE-2015-1568

The CVE-2015-1568 entry concerns the Drupal GD Infinite Scroll contributed module, affected versions prior to 7.x-1.4. It describes a Cross-Site Request Forgery (CSRF) vulnerability that allows remote attackers to hijack the authentication of users who have the permission to edit GD Infinite Scro...

6.8CVSS7.3AI score0.00636EPSS
SaveExploits0References3Affected Software1
Rows per page
Query Builder