Lucene search
+L

1167 matches found

Cvelist
Cvelist
•added 2014/02/27 1:00 a.m.•48 views

CVE-2014-1261

Integer signedness error in CoreText in Apple OS X before 10.9.2 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted Unicode font...

7.5AI score0.02588EPSS
SaveExploits1References1
CVE
CVE
•added 2014/02/27 1:00 a.m.•81 views

CVE-2014-1261

CVE-2014-1261 concerns a signedness error in CoreText on Apple OS X Mavericks before 10.9.2. The vulnerability allows remoteCode execution or a denial of service via a crafted Unicode font when applications load fonts, per the NVD description. Affected product: OS X Mavericks (and OS X before 10....

7.5CVSS7.5AI score0.02588EPSS
SaveExploits1References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2014/02/27 12:00 a.m.•6 views

CVE-2014-1261: Undefined Security Weakness

Integer signedness error in CoreText in Apple OS X before 10.9.2 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted Unicode font...

7.5CVSS6.5AI score0.02588EPSS
SaveExploits1References2
UbuntuCve
UbuntuCve
•added 2014/02/20 12:00 a.m.•42 views

CVE-2013-4148

Integer signedness error in the virtionetload function in hw/net/virtio-net.c in QEMU 1.x before 1.7.2 allows remote attackers to execute arbitrary code via a crafted savevm image, which triggers a buffer overflow...

7.5CVSS7AI score0.04944EPSS
SaveExploits0References4
NVD
NVD
•added 2014/02/18 11:55 a.m.•37 views

CVE-2013-7328

Multiple integer signedness errors in the gdImageCrop function in ext/gd/gd.c in PHP 5.5.x before 5.5.9 allow remote attackers to cause a denial of service application crash or obtain sensitive information via an imagecrop function call with a negative value for the 1 x or 2 y dimension, a...

5.8CVSS6.5AI score0.01486EPSS
SaveExploits1References4
CVE
CVE
•added 2014/02/18 11:00 a.m.•95 views

CVE-2013-7328

CVE-2013-7328 affects PHP 5.5.x before 5.5.9 due to multiple integer signedness errors in the gdImageCrop function (ext/gd/gd.c). A remote attacker can trigger a denial of service (application crash) or information disclosure by calling imagecrop with a negative x or y dimension. The issue is tie...

5.8CVSS6.5AI score0.01486EPSS
SaveExploits1References4Affected Software1
Cvelist
Cvelist
•added 2014/02/18 11:00 a.m.•55 views

CVE-2013-7328

Multiple integer signedness errors in the gdImageCrop function in ext/gd/gd.c in PHP 5.5.x before 5.5.9 allow remote attackers to cause a denial of service application crash or obtain sensitive information via an imagecrop function call with a negative value for the 1 x or 2 y dimension, a...

9.2AI score0.01486EPSS
SaveExploits1References4
UbuntuCve
UbuntuCve
•added 2014/02/18 12:00 a.m.•35 views

CVE-2013-7328

Multiple integer signedness errors in the gdImageCrop function in ext/gd/gd.c in PHP 5.5.x before 5.5.9 allow remote attackers to cause a denial of service application crash or obtain sensitive information via an imagecrop function call with a negative value for the 1 x or 2 y dimension, a...

5.8CVSS5.9AI score0.01486EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2014/02/18 12:00 a.m.•4 views

CVE-2013-7328: Undefined Security Weakness

Multiple integer signedness errors in the gdImageCrop function in ext/gd/gd.c in PHP 5.5.x before 5.5.9 allow remote attackers to cause a denial of service application crash or obtain sensitive information via an imagecrop function call with a negative value for the 1 x or 2 y dimension, a...

5.8CVSS5.9AI score0.01486EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
•added 2014/02/14 12:00 a.m.•85 views

PHP 5.5.x < 5.5.9 GD Extension Multiple Vulnerabilities

Binary data 8125.prm...

6.8CVSS6.9AI score0.06732EPSS
SaveExploits3References8
OSV
OSV
•added 2014/02/06 4:10 p.m.•13 views

CVE-2013-6477

Multiple integer signedness errors in libpurple in Pidgin before 2.10.8 allow remote attackers to cause a denial of service application crash via a crafted timestamp value in an XMPP message...

6.2AI score
SaveExploits0References7
Cvelist
Cvelist
•added 2014/02/06 4:00 p.m.•36 views

CVE-2013-6489

Integer signedness error in the MXit functionality in Pidgin before 2.10.8 allows remote attackers to cause a denial of service segmentation fault via a crafted emoticon value, which triggers an integer overflow and a buffer overflow...

6.5AI score0.0581EPSS
SaveExploits0References6
Debian CVE
Debian CVE
•added 2014/02/06 4:00 p.m.•30 views

CVE-2013-6489

Integer signedness error in the MXit functionality in Pidgin before 2.10.8 allows remote attackers to cause a denial of service segmentation fault via a crafted emoticon value, which triggers an integer overflow and a buffer overflow...

5CVSS6.4AI score0.0581EPSS
SaveExploits0
CVE
CVE
•added 2014/02/06 4:00 p.m.•91 views

CVE-2013-6489

CVE-2013-6489 is a Pidgin vulnerability in the MXit functionality where an integer signedness error on a crafted MXit emoticon value can trigger an integer overflow and a buffer overflow, leading to a DoS (segmentation fault) or application crash. Affected product is Pidgin (libpurple) up through...

5CVSS6.6AI score0.0581EPSS
SaveExploits0References6Affected Software1
Debian CVE
Debian CVE
•added 2014/02/06 3:00 p.m.•34 views

CVE-2013-6477

Multiple integer signedness errors in libpurple in Pidgin before 2.10.8 allow remote attackers to cause a denial of service application crash via a crafted timestamp value in an XMPP message...

5CVSS6.1AI score0.03913EPSS
SaveExploits0
CVE
CVE
•added 2014/02/06 3:00 p.m.•103 views

CVE-2013-6477

Pidgin/libpurple prior to version 2.10.8 is vulnerable to a denial of service via a crafted timestamp in an XMPP message, caused by multiple integer signedness errors in the codepath handling XMPP timestamps. The issue is explicitly identified as CVE-2013-6477. Connected advisories show that the ...

5CVSS6.2AI score0.03913EPSS
SaveExploits0References7Affected Software1
Cvelist
Cvelist
•added 2014/02/06 3:00 p.m.•34 views

CVE-2013-6477

Multiple integer signedness errors in libpurple in Pidgin before 2.10.8 allow remote attackers to cause a denial of service application crash via a crafted timestamp value in an XMPP message...

6.1AI score0.03913EPSS
SaveExploits0References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2014/02/06 12:00 a.m.•5 views

CVE-2013-6477: Undefined Security Weakness

Multiple integer signedness errors in libpurple in Pidgin before 2.10.8 allow remote attackers to cause a denial of service application crash via a crafted timestamp value in an XMPP message...

5CVSS5.8AI score0.03913EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2014/02/06 12:00 a.m.•5 views

CVE-2013-6489: Undefined Security Weakness

Integer signedness error in the MXit functionality in Pidgin before 2.10.8 allows remote attackers to cause a denial of service segmentation fault via a crafted emoticon value, which triggers an integer overflow and a buffer overflow...

5CVSS6.2AI score0.0581EPSS
SaveExploits0References2
UbuntuCve
UbuntuCve
•added 2014/02/05 12:00 a.m.•25 views

CVE-2013-6489

Integer signedness error in the MXit functionality in Pidgin before 2.10.8 allows remote attackers to cause a denial of service segmentation fault via a crafted emoticon value, which triggers an integer overflow and a buffer overflow...

5CVSS6AI score0.0581EPSS
SaveExploits0References3
Rows per page
Query Builder