Lucene search
+L

10315 matches found

RedhatCVE
RedhatCVE
•added 2015/10/30 9:34 a.m.•27 views

CVE-2007-1522

Double free vulnerability in the session extension in PHP 5.2.0 and 5.2.1 allows context-dependent attackers to execute arbitrary code via illegal characters in a session identifier, which is rejected by an internal session storage module, which calls the session identifier generator with an...

6.8CVSS8.6AI score0.06612EPSS
SaveExploits2References2
RedhatCVE
RedhatCVE
•added 2015/10/30 9:34 a.m.•35 views

CVE-2007-1521

Double free vulnerability in PHP before 4.4.7, and 5.x before 5.2.2, allows context-dependent attackers to execute arbitrary code by interrupting the sessionregenerateid function, as demonstrated by calling a userspace error handler or triggering a memory limit violation...

6.8CVSS8.2AI score0.08489EPSS
SaveExploits3References2
RedHat Linux
RedHat Linux
•added 2015/10/27 8:50 a.m.•14 views

qemu: vnc: insufficient resource limiting in VNC websockets decoder

It was found that the QEMU's websocket frame decoder processed incoming frames without limiting resources used to process the header and the payload. An attacker able to access a guest's VNC console could use this flaw to trigger a denial of service on the host by exhausting all available memory...

8.6CVSS7.1AI score0.06571EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
•added 2015/10/22 6:44 p.m.•15 views

OpenJDK: incomplete MaxXMLNameLimit enforcement (JAXP, 8086733)

Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60; Java SE Embedded 8u51; and JRockit R28.3.7 allows remote attackers to affect availability via vectors related to JAXP, a different vulnerability than CVE-2015-4803 and CVE-2015-4911...

5CVSS6.5AI score0.05332EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
•added 2015/10/22 6:34 p.m.•14 views

OpenJDK: incomplete MaxXMLNameLimit enforcement (JAXP, 8086733)

Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60; Java SE Embedded 8u51; and JRockit R28.3.7 allows remote attackers to affect availability via vectors related to JAXP, a different vulnerability than CVE-2015-4803 and CVE-2015-4911...

5CVSS6.5AI score0.05332EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
•added 2015/10/22 6:34 p.m.•26 views

OpenJDK: incomplete MaxXMLNameLimit enforcement (JAXP, 8086733)

Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60; Java SE Embedded 8u51; and JRockit R28.3.7 allows remote attackers to affect availability via vectors related to JAXP, a different vulnerability than CVE-2015-4803 and CVE-2015-4911...

5CVSS6.5AI score0.05332EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
•added 2015/10/21 9:07 p.m.•15 views

OpenJDK: incomplete MaxXMLNameLimit enforcement (JAXP, 8086733)

Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60; Java SE Embedded 8u51; and JRockit R28.3.7 allows remote attackers to affect availability via vectors related to JAXP, a different vulnerability than CVE-2015-4803 and CVE-2015-4911...

5CVSS6.5AI score0.05332EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
•added 2015/10/21 8:57 p.m.•16 views

OpenJDK: incomplete MaxXMLNameLimit enforcement (JAXP, 8086733)

Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60; Java SE Embedded 8u51; and JRockit R28.3.7 allows remote attackers to affect availability via vectors related to JAXP, a different vulnerability than CVE-2015-4803 and CVE-2015-4911...

5CVSS6.5AI score0.05332EPSS
SaveExploits0References5
OSV
OSV
•added 2015/10/15 1:14 p.m.•10 views

SUSE-SU-2015:1790-1 Security update for icu

icu was updated to fix one security issue. This security issue was fixed: - CVE-2014-9654: Insufficient size limit checks in regular expression compiler bsc917129...

9.8CVSS9.3AI score0.02422EPSS
SaveExploits0References3
WPVulnDB
WPVulnDB
•added 2015/10/09 12:00 a.m.•26 views

Limit Attempts < 1.1.1 - SQL Injection

The Limit Attempts by BestWebSoft WordPress plugin was affected by a SQL Injection security vulnerability...

7.5CVSS2.5AI score0.01795EPSS
SaveExploits0Affected Software1
OpenVAS
OpenVAS
•added 2015/10/06 12:00 a.m.•59 views

Oracle: Security Advisory (ELSA-2013-0276)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.8CVSS7.5AI score0.05774EPSS
SaveExploits0References2
zdt
zdt
•added 2015/10/04 12:00 a.m.•62 views

Telegram Denial Of Service / Bypass Limit Vulnerabilities

Exploit for multiple platform in category dos / poc + Title: Telegram - Multiple Vulnerabilities + Product: Telegram + Vendor: http://telegram.org/ + SoftWare Link : https://web.telegram.org / https://my.telegram.org Author : Eduardo Alves E-Mail : edudx1 at gmail dot com Website :...

7.1AI score
SaveExploits0
CNVD
CNVD
•added 2015/10/03 12:00 a.m.•18 views

Apple OS X SSH Link Denial of Service Vulnerability

Apple OS X is an operating system developed by Apple Inc. Apple OS X launchd fails to properly limit the number of processes, allowing attackers to exploit a vulnerability to submit multiple SSH links for denial of service attacks...

6.6AI score
SaveExploits0References1
Packet Storm
Packet Storm
•added 2015/10/02 12:00 a.m.•88 views

Telegram Denial Of Service / Bypass Limit

Title: Telegram - Multiple Vulnerabilities + Product: Telegram + Vendor: http://telegram.org/ + SoftWare Link : https://web.telegram.org / https://my.telegram.org Author : Eduardo Alves E-Mail : edudx1 at gmail dot com Website : tempest.com.br/en/ Info: As we know, the Telegram access uses by...

7.4AI score
SaveExploits0
The Hacker News
The Hacker News
•added 2015/09/30 12:26 a.m.•18 views

Google Play Store increases Android APK Size Limit from 50MB to 100MB

Google is doubling the maximum APK file size on the Play Store from 50 MB to 100 MB. That means... Android app developers can now build higher quality Apps and Games that users love. Of course, for an end user it may affect the overall app performance and installation time, as well as mobile data...

6.8AI score
SaveExploits0
OSV
OSV
•added 2015/09/28 8:59 p.m.•14 views

DEBIAN-CVE-2015-6806

The MScrollV function in ansi.c in GNU screen 4.3.1 and earlier does not properly limit recursion, which allows remote attackers to cause a denial of service stack consumption via an escape sequence with a large repeat count value...

5CVSS7.4AI score0.04148EPSS
SaveExploits1References1
NVD
NVD
•added 2015/09/28 8:59 p.m.•25 views

CVE-2015-6806

The MScrollV function in ansi.c in GNU screen 4.3.1 and earlier does not properly limit recursion, which allows remote attackers to cause a denial of service stack consumption via an escape sequence with a large repeat count value...

5CVSS6.3AI score0.04148EPSS
SaveExploits1References8
NVD
NVD
•added 2015/09/18 12:00 p.m.•31 views

CVE-2015-5869

The Neighbor Discovery ND protocol implementation in the IPv6 stack in Apple iOS before 9 allows remote attackers to reconfigure a hop-limit setting via a small hoplimit value in a Router Advertisement RA message...

3.3CVSS4.9AI score0.00913EPSS
SaveExploits0References9
Cvelist
Cvelist
•added 2015/09/18 10:00 a.m.•38 views

CVE-2015-5869

The Neighbor Discovery ND protocol implementation in the IPv6 stack in Apple iOS before 9 allows remote attackers to reconfigure a hop-limit setting via a small hoplimit value in a Router Advertisement RA message...

5.7AI score0.00913EPSS
SaveExploits0References9
Positive Technologies
Positive Technologies
•added 2015/09/18 12:00 a.m.•2 views

PT-2015-2115

Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 9 Description The issue is related to the implementation of the Neighbor Discovery ND protocol in the IPv6 stack, which allows remote attackers to reconfigure a hop-limit setting via a small hop limit value in a...

3.3CVSS0.00913EPSS
SaveExploits0References11
Rows per page
Query Builder