Lucene search
+L

868 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2011/08/15 12:00 a.m.•3 views

CVE-2011-0257: Undefined Security Weakness

Integer signedness error in Apple QuickTime before 7.7 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted PnSize opcode in a PICT file that triggers a stack-based buffer overflow...

9.3CVSS6.8AI score0.60106EPSS
SaveExploits14References2
OpenVAS
OpenVAS
•added 2011/08/02 12:00 a.m.•45 views

Mandriva Update for freetype2 MDVSA-2011:120 (freetype2)

Check for the Version of freetype2 OpenVAS Vulnerability Test Mandriva Update for freetype2 MDVSA-2011:120 freetype2 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify i...

9.3CVSS5.9AI score0.06646EPSS
SaveExploits0References2
OpenVAS
OpenVAS
•added 2011/08/02 12:00 a.m.•33 views

Mandriva Update for freetype2 MDVSA-2011:120 (freetype2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

9.3CVSS6AI score0.06646EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2011/07/19 12:00 a.m.•4 views

CVE-2011-0226: Undefined Security Weakness

Integer signedness error in psaux/t1decode.c in FreeType before 2.4.6, as used in CoreGraphics in Apple iOS before 4.2.9 and 4.3.x before 4.3.4 and other products, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted...

9.3CVSS6.9AI score0.06646EPSS
SaveExploits0References2
UbuntuCve
UbuntuCve
•added 2011/07/19 12:00 a.m.•36 views

CVE-2011-0226

Integer signedness error in psaux/t1decode.c in FreeType before 2.4.6, as used in CoreGraphics in Apple iOS before 4.2.9 and 4.3.x before 4.3.4 and other products, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted...

9.3CVSS6.9AI score0.06646EPSS
SaveExploits0References4
NVD
NVD
•added 2011/05/09 7:55 p.m.•26 views

CVE-2011-1013

Integer signedness error in the drmmodesetctl function in 1 drivers/gpu/drm/drmirq.c in the Direct Rendering Manager DRM subsystem in the Linux kernel before 2.6.38 and 2 sys/dev/pci/drm/drmirq.c in the kernel in OpenBSD before 4.9 allows local users to trigger out-of-bounds write operations, and...

7.2CVSS7.1AI score0.00407EPSS
SaveExploits2References7
Cvelist
Cvelist
•added 2011/05/09 7:00 p.m.•37 views

CVE-2011-1013

Integer signedness error in the drmmodesetctl function in 1 drivers/gpu/drm/drmirq.c in the Direct Rendering Manager DRM subsystem in the Linux kernel before 2.6.38 and 2 sys/dev/pci/drm/drmirq.c in the kernel in OpenBSD before 4.9 allows local users to trigger out-of-bounds write operations, and...

7AI score0.00407EPSS
SaveExploits2References7
CVE
CVE
•added 2011/05/09 7:00 p.m.•147 views

CVE-2011-1013

CVE-2011-1013 is an integer signedness error in the drm_modeset_ctl ioctl handling that affects the Linux kernel prior to 2.6.38 and OpenBSD prior to 4.9, allowing local users to trigger out-of-bounds writes and potentially crash the system or cause other impact via a crafted vb_num in an ioctl. ...

7.2CVSS7AI score0.00407EPSS
SaveExploits2References7Affected Software1
UbuntuCve
UbuntuCve
•added 2011/05/09 12:00 a.m.•33 views

CVE-2011-1013

Integer signedness error in the drmmodesetctl function in 1 drivers/gpu/drm/drmirq.c in the Direct Rendering Manager DRM subsystem in the Linux kernel before 2.6.38 and 2 sys/dev/pci/drm/drmirq.c in the kernel in OpenBSD before 4.9 allows local users to trigger out-of-bounds write operations, and...

7.2CVSS5.9AI score0.00407EPSS
SaveExploits2References9
Cvelist
Cvelist
•added 2011/04/13 6:00 p.m.•43 views

CVE-2011-0098

Integer signedness error in Microsoft Excel 2002 SP3, 2003 SP3, 2007 SP2, and 2010; Office 2004 and 2008 for Mac; Open XML File Format Converter for Mac; Excel Viewer SP2; and Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP2 allows remote attackers to execute...

7.5AI score0.30499EPSS
SaveExploits1References9
CVE
CVE
•added 2011/04/13 6:00 p.m.•113 views

CVE-2011-0098

CVE-2011-0098 corresponds to a remote code execution vulnerability in Microsoft Office Excel. The issue is a buffer/heap overflow in parsing the Label record (Excel file format), allowing remote attackers to run arbitrary code by convincing a user to open a malicious XLS file. Affected products i...

9.3CVSS7.6AI score0.30499EPSS
SaveExploits1References9Affected Software5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2011/04/13 12:00 a.m.•6 views

CVE-2011-0098: Undefined Security Weakness

Integer signedness error in Microsoft Excel 2002 SP3, 2003 SP3, 2007 SP2, and 2010; Office 2004 and 2008 for Mac; Open XML File Format Converter for Mac; Excel Viewer SP2; and Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP2 allows remote attackers to execute...

9.3CVSS6.5AI score0.30499EPSS
SaveExploits1References2
NVD
NVD
•added 2011/03/20 2:00 a.m.•17 views

CVE-2011-1471

Integer signedness error in zipstream.c in the Zip extension in PHP before 5.3.6 allows context-dependent attackers to cause a denial of service CPU consumption via a malformed archive file that triggers errors in zipfread function calls...

4.3CVSS9AI score0.13189EPSS
SaveExploits3References10
Cvelist
Cvelist
•added 2011/03/20 1:00 a.m.•31 views

CVE-2011-1471

Integer signedness error in zipstream.c in the Zip extension in PHP before 5.3.6 allows context-dependent attackers to cause a denial of service CPU consumption via a malformed archive file that triggers errors in zipfread function calls...

8.8AI score0.13189EPSS
SaveExploits3References10
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2011/03/20 12:00 a.m.•4 views

CVE-2011-1471: Undefined Security Weakness

Integer signedness error in zipstream.c in the Zip extension in PHP before 5.3.6 allows context-dependent attackers to cause a denial of service CPU consumption via a malformed archive file that triggers errors in zipfread function calls...

4.3CVSS5.8AI score0.13189EPSS
SaveExploits3References2
UbuntuCve
UbuntuCve
•added 2011/03/19 12:00 a.m.•25 views

CVE-2011-1471

Integer signedness error in zipstream.c in the Zip extension in PHP before 5.3.6 allows context-dependent attackers to cause a denial of service CPU consumption via a malformed archive file that triggers errors in zipfread function calls...

4.3CVSS5.9AI score0.13189EPSS
SaveExploits3References2
OpenVAS
OpenVAS
•added 2011/02/11 12:00 a.m.•48 views

CentOS Update for openoffice.org CESA-2011:0181 centos4 i386

Check for the Version of openoffice.org OpenVAS Vulnerability Test CentOS Update for openoffice.org CESA-2011:0181 centos4 i386 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/...

9.3CVSS0.1AI score0.10731EPSS
SaveExploits0References2
CVE
CVE
•added 2011/02/08 9:00 p.m.•90 views

CVE-2011-0914

CVE-2011-0914 affects IBM Lotus Domino prior to 8.5.3 via the DIIOP GIOP path in ndiiop.exe, causing a heap-based buffer overflow that allows remote code execution. Other sources corroborate remote code execution; affected products are Domino 8.5.x before 8.5.3. Remediation evidenced in connected...

10CVSS7.7AI score0.04658EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
•added 2011/02/08 9:00 p.m.•39 views

CVE-2011-0914

Integer signedness error in ndiiop.exe in the DIIOP implementation in the server in IBM Lotus Domino before 8.5.3 allows remote attackers to execute arbitrary code via a GIOP client request, leading to a heap-based buffer overflow...

7.5AI score0.04658EPSS
SaveExploits0References3
NVD
NVD
•added 2011/01/31 8:00 p.m.•36 views

CVE-2010-4713

Integer signedness error in gwia.exe in GroupWise Internet Agent GWIA in Novell GroupWise before 8.02HP allows remote attackers to execute arbitrary code via a signed integer value in the Content-Type header...

10CVSS7.6AI score0.05697EPSS
SaveExploits0References4
Rows per page
Query Builder