Lucene search
+L

3879 matches found

UbuntuCve
UbuntuCve
added 2006/07/07 12:05 a.m.34 views

CVE-2006-3417

Tor client before 0.1.1.20 prefers entry points based on isfast or isstable flags, which could allow remote attackers to be preferred over nodes that are identified as more trustworthy "entry guard" isguard systems by directory authorities...

6.4CVSS6AI score0.02137EPSS
SaveExploits0References1
CVE
CVE
added 2006/07/07 12:00 a.m.52 views

CVE-2006-3417

Tor client before 0.1.1.20 is vulnerable: the client may prefer directory entry points based on is_fast or is_stable flags instead of more trustworthy entry guards identified by authorities. Affected product: Tor client (pre-0.1.1.20). Root cause: selection bias in entry point ranking due to the ...

6.4CVSS6.7AI score0.02137EPSS
SaveExploits0References4Affected Software1
OSV
OSV
added 2006/06/19 6:02 p.m.8 views

DEBIAN-CVE-2006-3082

parse-packet.c in GnuPG gpg 1.4.3 and 1.9.20, and earlier versions, allows remote attackers to cause a denial of service gpg crash and possibly overwrite memory via a message packet with a large length long user ID string, which could lead to an integer overflow, as demonstrated using the...

5CVSS6.8AI score0.07306EPSS
SaveExploits1References1
RedHat Linux
RedHat Linux
added 2006/03/15 4:36 p.m.8 views

security flaw

gpg in GnuPG before 1.4.2.2 does not properly verify non-detached signatures, which allows attackers to inject unsigned data via a data packet that is not associated with a control packet, which causes the check for concatenated signatures to report that the signature is valid, a different...

5CVSS7.1AI score0.02373EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
added 2006/03/15 4:36 p.m.12 views

security flaw

gpgv in GnuPG before 1.4.2.1, when using unattended signature verification, returns a 0 exit code in certain cases even when the detached signature file does not carry a signature, which could cause programs that use gpgv to assume that the signature verification has succeeded. Note: this also...

4.6CVSS7.2AI score0.01359EPSS
SaveExploits2References4
NVD
NVD
added 2006/02/18 2:02 a.m.18 views

CVE-2006-0762

WinAbility Folder Guard 4.11 allows local users to gain unauthorized access to certain capabilities of the application by renaming or moving the password file FGuard.FGP, which disables the password requirement...

4.6CVSS6.7AI score0.00328EPSS
SaveExploits0References3
CVE
CVE
added 2006/02/18 2:00 a.m.49 views

CVE-2006-0762

CVE-2006-0762 affects WinAbility Folder Guard 4.11. The vulnerability enables local users to bypass password protection by renaming or moving the password file (FGuard.FGP), thereby disabling the password requirement and gaining unauthorized access to certain application capabilities. The underly...

4.6CVSS6.7AI score0.00328EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
added 2006/02/18 2:00 a.m.26 views

CVE-2006-0762

WinAbility Folder Guard 4.11 allows local users to gain unauthorized access to certain capabilities of the application by renaming or moving the password file FGuard.FGP, which disables the password requirement...

6.7AI score0.00328EPSS
SaveExploits0References3
securityvulns
securityvulns
added 2006/02/16 12:00 a.m.76 views

Cisco Security Advisory: TACACS+ Authentication Bypass in Cisco Anomaly Detection and Mitigation Products

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: TACACS+ Authentication Bypass in Cisco Anomaly Detection and Mitigation Products Document ID: 69073 Advisory ID: cisco-SA-20060215-guard-auth http://www.cisco.com/warp/public/707/cisco-sa-20060215-guard.shtml Revision 1.0...

0.8AI score
SaveExploits0
NVD
NVD
added 2005/11/17 11:02 a.m.17 views

CVE-2005-3647

Folder Guard allows local users to bypass protections by running from or installing to the temporary files directory...

4.6CVSS6.4AI score0.00327EPSS
SaveExploits0References2
CVE
CVE
added 2005/11/17 11:00 a.m.58 views

CVE-2005-3647

The CVE-2005-3647 issue is described as a local privilege-bypass in Folder Guard. Local users can bypass protections by running from or installing to the temporary files directory. Underlying cause: the temporary files path enables bypass of protections. Impact (per CVSS): partial confidentiality...

4.6CVSS6.8AI score0.00327EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2005/11/17 11:00 a.m.25 views

CVE-2005-3647

Folder Guard allows local users to bypass protections by running from or installing to the temporary files directory...

6.4AI score0.00327EPSS
SaveExploits0References2
NVD
NVD
added 2005/11/02 11:02 a.m.36 views

CVE-2005-3438

Multiple unspecified vulnerabilities in Oracle Database Server 9i up to 10.1.0.4.2 have unknown impact and attack vectors, aka Oracle Vuln 1 DB04 in Change Data Capture; 2 DB06 in Data Guard Logical Standby; 3 DB10 in Locale; 4 DB12 in Materialized Views; 5 DB13 in Objects Extension; 6 DB15 in...

10CVSS7AI score0.05866EPSS
SaveExploits5References7
Cvelist
Cvelist
added 2005/11/02 11:00 a.m.39 views

CVE-2005-3438

Multiple unspecified vulnerabilities in Oracle Database Server 9i up to 10.1.0.4.2 have unknown impact and attack vectors, aka Oracle Vuln 1 DB04 in Change Data Capture; 2 DB06 in Data Guard Logical Standby; 3 DB10 in Locale; 4 DB12 in Materialized Views; 5 DB13 in Objects Extension; 6 DB15 in...

7AI score0.05866EPSS
SaveExploits5References7
NVD
NVD
added 2005/10/07 6:02 p.m.27 views

CVE-2005-1764

Linux 2.6.11 on 64-bit x86 x8664 platforms does not use a guard page for the 47-bit address page to protect against an AMD K8 bug, which allows local users to cause a denial of service...

2.1CVSS6.2AI score0.00393EPSS
SaveExploits0References6
Cvelist
Cvelist
added 2005/10/07 4:00 a.m.40 views

CVE-2005-1764

Linux 2.6.11 on 64-bit x86 x8664 platforms does not use a guard page for the 47-bit address page to protect against an AMD K8 bug, which allows local users to cause a denial of service...

6.2AI score0.00393EPSS
SaveExploits0References6
myhack58
myhack58
added 2005/09/23 12:00 a.m.37 views

Foreign hackers resources-vulnerability warning-the black bar safety net

allhack.com This website provides a library and a download area. The library for beginners provides hacking knowledge and computer technology basics. The download area includes the Scan Tool, FLOOD tool, decryption tools, denial of service attacks and the like. alw. nih,gov In the security...

0.2AI score
SaveExploits0
CVE
CVE
added 2005/08/21 4:00 a.m.51 views

CVE-2004-2477

DiamondCS Process Guard Free 2.000 is affected. The issue arises from an attacker with local access overwriting the current Service Descriptor Table (SDT) in \device\physicalmemory with the original SDT from ntoskrnl.exe, disabling the process guard protection. The vulnerability is local in scope...

2.1CVSS6.6AI score0.00439EPSS
SaveExploits1References6Affected Software1
Cvelist
Cvelist
added 2005/08/21 4:00 a.m.24 views

CVE-2004-2477

DiamondCS Process Guard Free 2.000 allows local users to disable the process guard protection system by overwriting the current Service Descriptor Table SDT in \device\physicalmemory with the original SDT found in ntoskrnl.exe...

6.2AI score0.00439EPSS
SaveExploits1References6
Cvelist
Cvelist
added 2005/02/25 5:00 a.m.24 views

CVE-2004-0838

Lexar Safe Guard for JumpDrive Secure 1.0 stores the password insecurely in memory using XOR encryption, which allows local users to read the password directly from the device and access the password protected part of the drive...

6.4AI score0.00224EPSS
SaveExploits0References4
Rows per page
Query Builder