Lucene search
+L

544 matches found

seebug.org
seebug.org
added 2014/07/01 12:0 a.m.1446 views

OpenLD <= 1.2.2 (index.php id) Remote SQL Injection Vulnerability

No description provided by source. --==+================================================================================+==-- --==+ OpenLD = 1.2.2 SQL Injection Exploit +==-- --==+================================================================================+==-- DISCOVERED BY: Cody CypherXero...

7.1AI score
Exploits0
Tenable Nessus
Tenable Nessus
added 2014/06/13 12:0 a.m.23 views

openSUSE Security Update : sblim-cim-client2 (openSUSE-SU-2012:1621-1)

This update of sblim-cim-client2 fixed a Denial of Service via hash table collision issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openSUSE-2012-839. The text description of this plugi...

5CVSS5.3AI score0.01857EPSS
Exploits0References3
Tenable Nessus
Tenable Nessus
added 2014/06/13 12:0 a.m.24 views

openSUSE Security Update : libxml2 (openSUSE-SU-2012:0421-1)

add fix for hash table collisions CVE-2012-0841 bnc748561 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openSUSE-2012-179. The text description of this plugin is C SUSE LLC...

5CVSS8.2AI score0.0326EPSS
Exploits0References3
Tenable Nessus
Tenable Nessus
added 2014/06/13 12:0 a.m.22 views

openSUSE Security Update : libxml2 (openSUSE-SU-2012:0342-1)

This update of libxml2 fixes the hash table collision flaw which could be exploited by attackers to cause a Denial of Service CVE-2012-0841. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update...

5CVSS8.2AI score0.0326EPSS
Exploits0References3
Tenable Nessus
Tenable Nessus
added 2014/06/13 12:0 a.m.25 views

openSUSE Security Update : libjansson (openSUSE-SU-2014:0394-1)

libjansson was updated to fix a hash table collission CPU usage denial of service issue, when an attacker can supply his own JSON file. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update...

5CVSS5.4AI score0.01969EPSS
Exploits0References3
Tenable Nessus
Tenable Nessus
added 2014/06/13 12:0 a.m.23 views

openSUSE Security Update : seamonkey (seamonkey-5804)

SeaMonkey was updated to 2.7.1 to fix critical bugs and security issue. Following security issue was fixed: CVE-2012-0452: Mozilla developers Andrew McCreight and Olli Pettay found that ReadPrototypeBindings will leave a XBL binding in a hash table even when the function fails. If this occurs, wh...

7.5CVSS8.2AI score0.03079EPSS
Exploits1References3
Tenable Nessus
Tenable Nessus
added 2014/06/13 12:0 a.m.19 views

openSUSE Security Update : MozillaFirefox (MozillaFirefox-5799)

MozillaFirefox was updated to 10.0.1 to fix critical bugs and security issue. Following security issue was fixed: CVE-2012-0452: Mozilla developers Andrew McCreight and Olli Pettay found that ReadPrototypeBindings will leave a XBL binding in a hash table even when the function fails. If this...

7.5CVSS8.2AI score0.03079EPSS
Exploits1References3
UbuntuCve
UbuntuCve
added 2014/05/19 2:55 p.m.29 views

CVE-2013-7040

Python 2.7 before 3.4 only uses the last eight bits of the prefix to randomize hash values, which causes it to compute hash values without restricting the ability to trigger hash collisions predictably and makes it easier for context-dependent attackers to cause a denial of service CPU consumptio...

4.3CVSS6.8AI score0.03207EPSS
Exploits0References2
Debian CVE
Debian CVE
added 2014/05/19 2:0 p.m.51 views

CVE-2013-7040

Python 2.7 before 3.4 only uses the last eight bits of the prefix to randomize hash values, which causes it to compute hash values without restricting the ability to trigger hash collisions predictably and makes it easier for context-dependent attackers to cause a denial of service CPU consumptio...

4.3CVSS8.2AI score0.03207EPSS
Exploits0
OSV
OSV
added 2014/05/19 2:0 p.m.9 views

PSF-2014-2 Hash function not randomized properly

Python 2.7 before 3.4 only uses the last eight bits of the prefix to randomize hash values, which causes it to compute hash values without restricting the ability to trigger hash collisions predictably and makes it easier for context-dependent attackers to cause a denial of service CPU consumptio...

4.3CVSS9.2AI score0.03207EPSS
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2013/01/25 12:0 a.m.23 views

SuSE 11.1 Security Update : libxml2 (SAT Patch Number 5869)

This update of libxml2 fixes the hash table collision flaw which could be exploited by attackers to cause a Denial of Service. CVE-2012-0841 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information...

5CVSS8.2AI score0.0326EPSS
Exploits0References3
OSV
OSV
added 2012/11/28 1:3 p.m.6 views

DEBIAN-CVE-2012-5370

JRuby computes hash values without properly restricting the ability to trigger hash collisions predictably, which allows context-dependent attackers to cause a denial of service CPU consumption via crafted input to an application that maintains a hash table, as demonstrated by a universal...

5CVSS6.9AI score0.02249EPSS
Exploits0References1
UbuntuCve
UbuntuCve
added 2012/11/28 1:3 p.m.28 views

CVE-2012-6051

Google CityHash computes hash values without properly restricting the ability to trigger hash collisions predictably, which allows context-dependent attackers to cause a denial of service CPU consumption via crafted input to an application that maintains a hash table, as demonstrated by a univers...

5CVSS5.9AI score0.0061EPSS
Exploits0References5
Prion
Prion
added 2012/11/28 1:3 p.m.30 views

Design/Logic Flaw

JRuby computes hash values without properly restricting the ability to trigger hash collisions predictably, which allows context-dependent attackers to cause a denial of service CPU consumption via crafted input to an application that maintains a hash table, as demonstrated by a universal...

5CVSS6.5AI score0.0436EPSS
Exploits1References6
Cvelist
Cvelist
added 2012/11/28 11:0 a.m.39 views

CVE-2012-5373

Oracle Java SE 7 and earlier, and OpenJDK 7 and earlier, computes hash values without properly restricting the ability to trigger hash collisions predictably, which allows context-dependent attackers to cause a denial of service CPU consumption via crafted input to an application that maintains a...

8.4AI score0.02289EPSS
Exploits0References7
Cvelist
Cvelist
added 2012/11/28 11:0 a.m.42 views

CVE-2012-2739

Oracle Java SE before 7 Update 6, and OpenJDK 7 before 7u6 build 12 and 8 before build 39, computes hash values without restricting the ability to trigger hash collisions predictably, which allows context-dependent attackers to cause a denial of service CPU consumption via crafted input to an...

8.5AI score0.0317EPSS
Exploits1References8
Debian CVE
Debian CVE
added 2012/11/28 11:0 a.m.77 views

CVE-2012-5370

JRuby computes hash values without properly restricting the ability to trigger hash collisions predictably, which allows context-dependent attackers to cause a denial of service CPU consumption via crafted input to an application that maintains a hash table, as demonstrated by a universal...

5CVSS5.3AI score0.02249EPSS
Exploits0
RubySec
RubySec
added 2012/11/23 12:0 a.m.29 views

Rubinius MurmurHash3 Implementation Hash Collision Remote DoS

Rubinius contains a flaw related to the MurmurHash3 implementation that may allow a remote denial of service. The issue is triggered when hash values are computed without having the ability to cause hash collisions restricted. When sending specially crafted input to an application maintaining a...

5CVSS1.7AI score0.01941EPSS
Exploits1References1Affected Software1
Tenable Nessus
Tenable Nessus
added 2012/09/06 12:0 a.m.45 views

Mandriva Linux Security Advisory : python (MDVSA-2012:097)

Multiple vulnerabilities has been discovered and corrected in python : The ssl module would always disable the CBC IV attack countermeasure CVE-2011-3389. A race condition was found in the way the Python distutils module set file permissions during the creation of the .pypirc file. If a local use...

5CVSS6.4AI score0.73327EPSS
Exploits10References5
OpenVAS
OpenVAS
added 2012/08/03 12:0 a.m.26 views

Mandriva Update for expat MDVSA-2012:041 (expat)

Check for the Version of expat OpenVAS Vulnerability Test Mandriva Update for expat MDVSA-2012:041 expat Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

5CVSS7.5AI score0.05724EPSS
Exploits0References2
Rows per page
Query Builder