Lucene search
K

17 matches found

AstraLinux
AstraLinux
added 2026/05/20 5:53 a.m.3 views

Astra Linux - уязвимость в wireshark

In Wireshark versions 3.2.0 to 3.2.6, 3.0.0 to 3.0.13, and 2.6.0 to 2.6.20, the MIME Multipart dissector could crash. This issue was addressed in the epan/dissectors/packet-multipart.c file by correcting the deallocation of invalid MIME parts...

7.5CVSS7.1AI score0.00181EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2026/01/29 9:24 a.m.5 views

CVE-2026-1466

Jirafeau normally prevents browser preview for text files due to the possibility that for example SVG and HTML documents could be exploited for cross site scripting. This was done by storing the MIME type of a file and allowing only browser preview for MIME types beginning with image except for...

6.1CVSS5AI score0.00166EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2026/01/28 6:33 a.m.4 views

CVE-2026-1466

Jirafeau normally prevents browser preview for text files due to the possibility that for example SVG and HTML documents could be exploited for cross site scripting. This was done by storing the MIME type of a file and allowing only browser preview for MIME types beginning with image except for...

6.1CVSS5AI score0.00166EPSS
Exploits0References5
Positive Technologies
Positive Technologies
added 2026/01/28 12:0 a.m.6 views

PT-2026-5062

CVE-2026-1466 Jirafeau normally prevents browser preview for text files due to the possibility that for example SVG and HTML documents could be exploited for cross site scripting. Th… https://t.co/rSEVfvxJRR...

6.1CVSS5.1AI score0.00166EPSS
Exploits0References11
CNNVD
CNNVD
added 2026/01/28 12:0 a.m.3 views

Jirafeau cross-site scripting vulnerability

Jirafeau is a simple method for uploading files developed by Jérôme Jutteau. Jirafeau has a cross-site scripting vulnerability; this vulnerability arises from the ability to bypass preview restrictions by sending HTTP requests with invalid MIME types, potentially leading to cross-site scripting...

6.1CVSS5.6AI score0.00166EPSS
Exploits0References5
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2015-0536

Malware in sbrugna...

7.8CVSS6.4AI score0.01324EPSS
Exploits0References4
EUVD
EUVD
added 2025/10/07 12:30 a.m.1 views

EUVD-2001-0536

Malware in sbrugna...

2.1CVSS6.4AI score0.01404EPSS
Exploits0References5
EUVD
EUVD
added 2025/10/07 12:30 a.m.4 views

EUVD-2007-4504

Malware in sbrugna...

5CVSS6.2AI score0.02514EPSS
Exploits1References11
SUSE CVE
SUSE CVE
added 2023/02/15 5:34 a.m.3 views

SUSE CVE-2013-6414

actionpack/lib/actionview/lookupcontext.rb in Action View in Ruby on Rails 3.x before 3.2.16 and 4.x before 4.0.2 allows remote attackers to cause a denial of service memory consumption via a header containing an invalid MIME type that leads to excessive caching...

5CVSS6.8AI score0.70843EPSS
Exploits2References10
SUSE CVE
SUSE CVE
added 2023/02/15 3:53 a.m.2 views

SUSE CVE-2020-25863

In Wireshark 3.2.0 to 3.2.6, 3.0.0 to 3.0.13, and 2.6.0 to 2.6.20, the MIME Multipart dissector could crash. This was addressed in epan/dissectors/packet-multipart.c by correcting the deallocation of invalid MIME parts...

4.3CVSS7.6AI score0.00181EPSS
Exploits1References6
OSV
OSV
added 2020/10/06 3:15 p.m.1 views

DEBIAN-CVE-2020-25863

In Wireshark 3.2.0 to 3.2.6, 3.0.0 to 3.0.13, and 2.6.0 to 2.6.20, the MIME Multipart dissector could crash. This was addressed in epan/dissectors/packet-multipart.c by correcting the deallocation of invalid MIME parts...

7.5CVSS8.8AI score0.00181EPSS
Exploits1References1
OSV
OSV
added 2020/10/06 3:15 p.m.0 views

UBUNTU-CVE-2020-25863

In Wireshark 3.2.0 to 3.2.6, 3.0.0 to 3.0.13, and 2.6.0 to 2.6.20, the MIME Multipart dissector could crash. This was addressed in epan/dissectors/packet-multipart.c by correcting the deallocation of invalid MIME parts...

7.5CVSS7.1AI score0.00181EPSS
Exploits1References5
CNVD
CNVD
added 2015/03/13 12:0 a.m.1 views

EMC RSA Certificate Manager and RSA Registration Manager Input Validation Vulnerability

EMC RSA Certificate Manager RCM and RSA Registration Manager RRM are both products of EMC Corporation, RCM is a digital certificate management system that provides automated implementation of encryption key and digital certificate management, and RRM is a certificate registration management syste...

7.8CVSS6.8AI score0.01324EPSS
Exploits0References1
OSV
OSV
added 2013/12/07 12:55 a.m.0 views

UBUNTU-CVE-2013-6414

actionpack/lib/actionview/lookupcontext.rb in Action View in Ruby on Rails 3.x before 3.2.16 and 4.x before 4.0.2 allows remote attackers to cause a denial of service memory consumption via a header containing an invalid MIME type that leads to excessive caching...

5CVSS5.8AI score0.70843EPSS
Exploits2References3
Debian CVE
Debian CVE
added 2013/12/07 12:0 a.m.58 views

CVE-2013-6414

actionpack/lib/actionview/lookupcontext.rb in Action View in Ruby on Rails 3.x before 3.2.16 and 4.x before 4.0.2 allows remote attackers to cause a denial of service memory consumption via a header containing an invalid MIME type that leads to excessive caching...

5CVSS6.1AI score0.70843EPSS
Exploits2
Cvelist
Cvelist
added 2002/03/09 5:0 a.m.19 views

CVE-2001-0544

IIS 5.0 allows local users to cause a denial of service hang via by installing content that produces a certain invalid MIME Content-Type header, which corrupts the File Type table...

6.2AI score0.01404EPSS
Exploits0References4
NVD
NVD
added 2001/10/30 5:0 a.m.13 views

CVE-2001-0544

IIS 5.0 allows local users to cause a denial of service hang via by installing content that produces a certain invalid MIME Content-Type header, which corrupts the File Type table...

2.1CVSS6.2AI score0.01404EPSS
Exploits0References4
Rows per page
Query Builder