Lucene search
+L

27 matches found

SUSE CVE
SUSE CVE
added 2023/02/15 5:24 a.m.7 views

SUSE CVE-2014-9488

The isutf8wellformed function in GNU less before 475 allows remote attackers to have unspecified impact via malformed UTF-8 characters, which triggers an out-of-bounds read...

2.5CVSS7.4AI score0.03989EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
added 2011/06/22 11:14 p.m.12 views

expat: buffer over-read and crash on XML with malformed UTF-8 sequences

The updatePosition function in lib/xmltokimpl.c in libexpat in Expat 2.0.1, as used in Python, PyXML, w3c-libwww, and other software, allows context-dependent attackers to cause a denial of service application crash via an XML document with crafted UTF-8 sequences that trigger a buffer over-read,...

5CVSS6.8AI score0.27924EPSS
SaveExploits1References4
OSV
OSV
added 2009/12/04 12:00 a.m.20 views

UBUNTU-CVE-2009-3560

The big2toUtf8 function in lib/xmltok.c in libexpat in Expat 2.0.1, as used in the XML-Twig module for Perl, allows context-dependent attackers to cause a denial of service application crash via an XML document with malformed UTF-8 sequences that trigger a buffer over-read, related to the doProlo...

5CVSS6.9AI score0.24313EPSS
SaveExploits2References8
OpenVAS
OpenVAS
added 2009/09/28 12:00 a.m.37 views

Fedora Core 10 FEDORA-2009-9799 (rubygem-activesupport)

The remote host is missing an update to rubygem-activesupport announced via advisory FEDORA-2009-9799. OpenVAS Vulnerability Test $Id: fcore20099799.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-9799 rubygem-activesupport Authors: Thomas Reinke...

4.3CVSS9.5AI score0.03022EPSS
SaveExploits1References1
Debian CVE
Debian CVE
added 2009/09/08 6:00 p.m.44 views

CVE-2009-3009

Cross-site scripting XSS vulnerability in Ruby on Rails 2.x before 2.2.3, and 2.3.x before 2.3.4, allows remote attackers to inject arbitrary web script or HTML by placing malformed Unicode strings into a form helper...

4.3CVSS4.6AI score0.03022EPSS
SaveExploits1
Cvelist
Cvelist
added 2009/09/08 6:00 p.m.29 views

CVE-2009-3009

Cross-site scripting XSS vulnerability in Ruby on Rails 2.x before 2.2.3, and 2.3.x before 2.3.4, allows remote attackers to inject arbitrary web script or HTML by placing malformed Unicode strings into a form helper...

7.9AI score0.03022EPSS
SaveExploits1References14
OpenVAS
OpenVAS
added 2009/04/09 12:00 a.m.25 views

Mandriva Update for qt MDKSA-2007:183 (qt)

Check for the Version of qt OpenVAS Vulnerability Test Mandriva Update for qt MDKSA-2007:183 qt Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of...

7.5CVSS0.2AI score0.0234EPSS
SaveExploits0References2
Rows per page
Query Builder