Lucene search
+L

868 matches found

CVE
CVE
•added 2011/01/31 7:00 p.m.•73 views

CVE-2010-4713

The CVE-2010-4713 entry concerns a signed-integer/signedness error in gwia.exe of Novell GroupWise’s GroupWise Internet Agent (GWIA) prior to 8.02HP, allowing remote code execution via a crafted Content-Type header. The connected Red Hat advisory repeats the exact issue as described in NVD: an in...

10CVSS7.8AI score0.05697EPSS
SaveExploits0References4Affected Software1
Tenable Nessus
Tenable Nessus
•added 2011/01/31 12:00 a.m.•51 views

RHEL 5 : openoffice.org (RHSA-2011:0182)

The remote Redhat Enterprise Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2011:0182 advisory. - OpenOffice.org: directory traversal flaws in handling of XSLT jar filter descriptions and OXT extension files CVE-2010-3450 -...

9.3CVSS5.9AI score0.10731EPSS
SaveExploits0References18
RedHat Linux
RedHat Linux
•added 2011/01/28 12:57 p.m.•90 views

Important: Red Hat Security Advisory: openoffice.org security update

Updated openoffice.org packages that fix multiple security issues are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity...

9.3CVSS6.4AI score0.10731EPSS
SaveExploits0References9
Cvelist
Cvelist
•added 2011/01/12 12:00 a.m.•49 views

CVE-2011-0026

Integer signedness error in the SQLConnectW function in an ODBC API odbc32.dll in Microsoft Data Access Components MDAC 2.8 SP1 and SP2, and Windows Data Access Components WDAC 6.0, allows remote attackers to execute arbitrary code via a long string in the Data Source Name DSN and a crafted szDSN...

7.5AI score0.34399EPSS
SaveExploits0References10
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2010/12/09 12:00 a.m.•3 views

CVE-2010-3802: Undefined Security Weakness

Integer signedness error in Apple QuickTime before 7.6.9 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted panorama atom in a QuickTime Virtual Reality QTVR movie file...

9.3CVSS6.7AI score0.04937EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2010/11/16 9:00 p.m.•44 views

CVE-2010-3792

Integer signedness error in QuickTime in Apple Mac OS X 10.6.x before 10.6.5 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted MPEG movie file...

9.2AI score0.02905EPSS
SaveExploits0References5
CVE
CVE
•added 2010/11/16 9:00 p.m.•91 views

CVE-2010-3792

CVE-2010-3792 is a QuickTime vulnerability in MPEG-encoded movie file handling. A signedness error in QuickTime’s MPEG parsing could allow either an application crash or arbitrary code execution when processing a crafted movie file. The issue affected Mac OS X and related QuickTime components pri...

6.8CVSS9AI score0.02905EPSS
SaveExploits0References5Affected Software2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2010/11/16 12:00 a.m.•4 views

CVE-2010-4010: Undefined Security Weakness

Integer signedness error in Apple Type Services ATS in Apple Mac OS X 10.5.8 allows remote attackers to execute arbitrary code via a crafted embedded Compact Font Format CFF font in a document...

6.8CVSS6.5AI score0.02868EPSS
SaveExploits0References2
NVD
NVD
•added 2010/10/04 9:00 p.m.•29 views

CVE-2010-3437

Integer signedness error in the pktfinddevfromminor function in drivers/block/pktcdvd.c in the Linux kernel before 2.6.36-rc6 allows local users to obtain sensitive information from kernel memory or cause a denial of service invalid pointer dereference and system crash via a crafted index value i...

6.6CVSS5.8AI score0.02396EPSS
SaveExploits7References24
Cvelist
Cvelist
•added 2010/10/04 8:00 p.m.•48 views

CVE-2010-3437

Integer signedness error in the pktfinddevfromminor function in drivers/block/pktcdvd.c in the Linux kernel before 2.6.36-rc6 allows local users to obtain sensitive information from kernel memory or cause a denial of service invalid pointer dereference and system crash via a crafted index value i...

5.8AI score0.02396EPSS
SaveExploits7References24
UbuntuCve
UbuntuCve
•added 2010/10/04 12:00 a.m.•45 views

CVE-2010-3437

Integer signedness error in the pktfinddevfromminor function in drivers/block/pktcdvd.c in the Linux kernel before 2.6.36-rc6 allows local users to obtain sensitive information from kernel memory or cause a denial of service invalid pointer dereference and system crash via a crafted index value i...

6.6CVSS7.4AI score0.02396EPSS
SaveExploits7References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2010/09/29 12:00 a.m.•3 views

CVE-2010-3310: Undefined Security Weakness

Multiple integer signedness errors in net/rose/afrose.c in the Linux kernel before 2.6.36-rc5-next-20100923 allow local users to cause a denial of service heap memory corruption or possibly have unspecified other impact via a rosegetname function call, related to the rosebind and roseconnect...

1.9CVSS5.9AI score0.00405EPSS
SaveExploits0References2
Prion
Prion
•added 2010/08/26 9:00 p.m.•26 views

Integer overflow

Integer signedness error in Adobe Shockwave Player before 11.5.8.612 allows remote attackers to cause a denial of service memory corruption or execute arbitrary code via a length value associated with the tSAC chunk in a Director movie...

9.3CVSS8.1AI score0.04337EPSS
SaveExploits0References5Affected Software1
CVE
CVE
•added 2010/08/26 8:00 p.m.•72 views

CVE-2010-2875

CVE-2010-2875 concerns an integer signedness error in Adobe Shockwave Player before 11.5.8.612, triggered while parsing the tSAC chunk in Adobe Director files. The signedness issue can cause memory corruption, enabling a remote attacker to cause a denial of service or execute arbitrary code. Affe...

9.3CVSS7.7AI score0.04337EPSS
SaveExploits0References5Affected Software1
CVE
CVE
•added 2010/08/26 8:00 p.m.•77 views

CVE-2010-2866

CVE-2010-2866 is an Adobe Shockwave Player vulnerability caused by an integer signedness error in the DIRAPI module during parsing of tSAC chunks in Director movies. The flaw can allow remote code execution or memory corruption leading to a denial of service, if a negative/large count value is pr...

9.3CVSS7.7AI score0.13014EPSS
SaveExploits1References6Affected Software1
Cvelist
Cvelist
•added 2010/08/26 8:00 p.m.•48 views

CVE-2010-2866

Integer signedness error in the DIRAPI module in Adobe Shockwave Player before 11.5.8.612 allows remote attackers to cause a denial of service memory corruption or execute arbitrary code via a count value associated with an "undocumented structure" and the tSAC chunk in a Director movie...

7.5AI score0.13014EPSS
SaveExploits1References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2010/08/26 12:00 a.m.•3 views

CVE-2010-2875: Undefined Security Weakness

Integer signedness error in Adobe Shockwave Player before 11.5.8.612 allows remote attackers to cause a denial of service memory corruption or execute arbitrary code via a length value associated with the tSAC chunk in a Director movie...

9.3CVSS6.4AI score0.04337EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2010/08/26 12:00 a.m.•5 views

CVE-2010-2866: Undefined Security Weakness

Integer signedness error in the DIRAPI module in Adobe Shockwave Player before 11.5.8.612 allows remote attackers to cause a denial of service memory corruption or execute arbitrary code via a count value associated with an "undocumented structure" and the tSAC chunk in a Director movie...

9.3CVSS6.4AI score0.13014EPSS
SaveExploits1References2
OpenVAS
OpenVAS
•added 2010/08/20 12:00 a.m.•30 views

Mandriva Update for cabextract MDVSA-2010:154 (cabextract)

Check for the Version of cabextract OpenVAS Vulnerability Test Mandriva Update for cabextract MDVSA-2010:154 cabextract Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modif...

5.1CVSS0.5AI score0.04027EPSS
SaveExploits0References2
NVD
NVD
•added 2010/08/17 8:00 p.m.•48 views

CVE-2010-0134

Integer signedness error in rtfsr.dll in Autonomy KeyView 10.4 and 10.9, as used in multiple IBM, Symantec, and other products, allows remote attackers to execute arbitrary code via a crafted \ls keyword in a list override table entry in an RTF file, which triggers a buffer overflow...

9.3CVSS7.7AI score0.0397EPSS
SaveExploits0References4
Rows per page
Query Builder