Lucene search
K

17 matches found

Tenable Nessus
Tenable Nessus
added 2025/09/10 12:0 a.m.2 views

Linux Distros Unpatched Vulnerability : CVE-2015-3751

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - WebKit in Apple Safari before 6.2.8, 7.x before 7.1.8, and 8.x before 8.0.8, as used in iOS before 8.4.1 and other products, allows remote attackers to bypass a...

5CVSS7.5AI score0.01553EPSS
Exploits0References2
CNNVD
CNNVD
added 2022/07/22 12:0 a.m.1 views

eziod 安全漏洞

eziod is simple image object dataset. A security vulnerability exists in eziod that originates from a code execution backdoor inserted by a third party...

9.8CVSS8.8AI score0.00668EPSS
Exploits0References4
OpenVAS
OpenVAS
added 2013/11/07 12:0 a.m.22 views

Mozilla Firefox ESR Multiple Vulnerabilities-01 (Nov 2013) - Windows

Mozilla Firefox ESR is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mozilla:firefoxesr";...

10CVSS7AI score0.0527EPSS
Exploits0References7
NVD
NVD
added 2013/10/30 10:55 a.m.16 views

CVE-2013-5596

The cycle collection CC implementation in Mozilla Firefox before 25.0, Firefox ESR 24.x before 24.1, Thunderbird before 24.1, and SeaMonkey before 2.22 does not properly determine the thread for release of an image object, which allows remote attackers to execute arbitrary code or cause a denial ...

6.8CVSS7.5AI score0.01775EPSS
Exploits0References6
UbuntuCve
UbuntuCve
added 2013/10/29 12:0 a.m.28 views

CVE-2013-5596

The cycle collection CC implementation in Mozilla Firefox before 25.0, Firefox ESR 24.x before 24.1, Thunderbird before 24.1, and SeaMonkey before 2.22 does not properly determine the thread for release of an image object, which allows remote attackers to execute arbitrary code or cause a denial ...

6.8CVSS6.9AI score0.01775EPSS
Exploits0References4
OpenVAS
OpenVAS
added 2012/12/24 12:0 a.m.28 views

LibreOffice Graphic Object Loading Buffer Overflow Vulnerability (Mac OS X)

This host is installed with LibreOffice and is prone to buffer overflow vulnerability. OpenVAS Vulnerability Test $Id: gblibreofficegraphicobjectbofvulnmacosx.nasl 5977 2017-04-19 09:02:22Z teissa $ LibreOffice Graphic Object Loading Buffer Overflow Vulnerability Mac OS X Authors: Rachana Shetty...

7.5CVSS0.7AI score0.01193EPSS
Exploits0References2
OpenVAS
OpenVAS
added 2012/12/24 12:0 a.m.44 views

LibreOffice Graphic Object Loading Buffer Overflow Vulnerability - Windows

LibreOffice is prone to a buffer overflow vulnerability. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS7AI score0.01193EPSS
Exploits0References3
NVD
NVD
added 2012/06/21 3:55 p.m.22 views

CVE-2012-1149

Integer overflow in the vclmi.dll module in OpenOffice.org OOo 3.3, 3.4 Beta, and possibly earlier, and LibreOffice before 3.5.3, allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via a crafted embedded image object, as demonstrated by a JP...

7.5CVSS7AI score0.01193EPSS
Exploits0References23
Prion
Prion
added 2012/06/21 3:55 p.m.18 views

Integer overflow

Integer overflow in the vclmi.dll module in OpenOffice.org OOo 3.3, 3.4 Beta, and possibly earlier, and LibreOffice before 3.5.3, allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via a crafted embedded image object, as demonstrated by a JP...

7.5CVSS8.5AI score0.01193EPSS
Exploits0References23Affected Software10
Cvelist
Cvelist
added 2012/06/21 3:0 p.m.20 views

CVE-2012-1149

Integer overflow in the vclmi.dll module in OpenOffice.org OOo 3.3, 3.4 Beta, and possibly earlier, and LibreOffice before 3.5.3, allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via a crafted embedded image object, as demonstrated by a JP...

7AI score0.01193EPSS
Exploits0References23
UbuntuCve
UbuntuCve
added 2012/06/21 12:0 a.m.21 views

CVE-2012-1149

Integer overflow in the vclmi.dll module in OpenOffice.org OOo 3.3, 3.4 Beta, and possibly earlier, and LibreOffice before 3.5.3, allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via a crafted embedded image object, as demonstrated by a JP...

7.5CVSS6.1AI score0.01193EPSS
Exploits0References6
RedHat Linux
RedHat Linux
added 2012/06/04 8:53 p.m.2 views

libreoffice: Integer overflows, leading to heap-buffer overflows in JPEG, PNG and BMP reader implementations

Integer overflow in the vclmi.dll module in OpenOffice.org OOo 3.3, 3.4 Beta, and possibly earlier, and LibreOffice before 3.5.3, allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via a crafted embedded image object, as demonstrated by a JP...

7.5CVSS6.6AI score0.01193EPSS
Exploits0References4
OpenVAS
OpenVAS
added 2012/01/25 12:0 a.m.17 views

IBM Lotus Symphony Image Object Integer Overflow Vulnerability - Linux

IBM Lotus Symphony is prone to an integer overflow vulnerability. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.3CVSS6.6AI score0.08597EPSS
Exploits0References4
OpenVAS
OpenVAS
added 2008/01/17 12:0 a.m.25 views

Debian Security Advisory DSA 007-1 (zope)

The remote host is missing an update to zope announced via advisory DSA 007-1. OpenVAS Vulnerability Test $Id: deb0071.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 007-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

5CVSS0.00862EPSS
Exploits0
NVD
NVD
added 2007/09/12 8:17 p.m.13 views

CVE-2007-4848

Microsoft Internet Explorer 4.0 through 7 allows remote attackers to determine the existence of local files that have associated images via a res:// URI in the src property of a JavaScript Image object, as demonstrated by the URI for a bitmap image resource within a 1 .exe or 2 .dll file...

4.3CVSS6.3AI score0.23388EPSS
Exploits1References2
Prion
Prion
added 2007/09/12 8:17 p.m.14 views

Code injection

Microsoft Internet Explorer 4.0 through 7 allows remote attackers to determine the existence of local files that have associated images via a res:// URI in the src property of a JavaScript Image object, as demonstrated by the URI for a bitmap image resource within a 1 .exe or 2 .dll file...

4.3CVSS6.9AI score0.23388EPSS
Exploits1References2Affected Software2
CVE
CVE
added 2007/09/12 8:0 p.m.47 views

CVE-2007-4848

CVE-2007-4848 affects Microsoft Internet Explorer 4.0–7. The issue allows remote attackers to determine whether local files have associated images by using a res:// URI in the src property of a JavaScript Image object, demonstrated with bitmap data inside a (1) .exe or (2) .dll file. The connecte...

4.3CVSS6.4AI score0.23388EPSS
Exploits1References2Affected Software2
Rows per page
Query Builder