7480 matches found
kernel: fs/partitions: Validate map_count in Mac partition tables
Buffer overflow in the macpartition function in fs/partitions/mac.c in the Linux kernel before 2.6.37.2 allows local users to cause a denial of service panic or possibly have unspecified other impact via a malformed Mac OS partition table...
Joomla! Component Map Locator - cid SQL Injection
Joomla! Component Map Locator - cid SQL Injection source: https://www.securityfocus.com/bid/47941/info The 'commaplocator' component for Joomla! is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this...
kernel: BUG_ON() in rds_send_xmit()
The Reliable Datagram Sockets RDS subsystem in the Linux kernel before 2.6.38 does not properly handle congestion map updates, which allows local users to cause a denial of service BUGON and system crash via vectors involving 1 a loopback aka loop transmit operation or 2 an InfiniBand aka ib...
kernel: fs/partitions: Validate map_count in Mac partition tables
Buffer overflow in the macpartition function in fs/partitions/mac.c in the Linux kernel before 2.6.37.2 allows local users to cause a denial of service panic or possibly have unspecified other impact via a malformed Mac OS partition table...
PT-2012-1503 · Linux +1 · Linux Kernel +1
Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 2.6.38 Description: The issue is related to the Reliable Datagram Sockets RDS subsystem in the Linux kernel, which does not properly handle congestion map updates. This can be exploited by local users to cause a...
kernel: fs/partitions: Validate map_count in Mac partition tables
Buffer overflow in the macpartition function in fs/partitions/mac.c in the Linux kernel before 2.6.37.2 allows local users to cause a denial of service panic or possibly have unspecified other impact via a malformed Mac OS partition table...
CVE-2011-0056
Buffer overflow in the JavaScript engine in Mozilla Firefox before 3.5.17 and 3.6.x before 3.6.14, and SeaMonkey before 2.0.12, might allow remote attackers to execute arbitrary code via vectors involving exception timing and a large number of string values, aka an "atom map" issue...
Buffer overflow
Buffer overflow in the JavaScript engine in Mozilla Firefox before 3.5.17 and 3.6.x before 3.6.14, and SeaMonkey before 2.0.12, might allow remote attackers to execute arbitrary code via vectors involving exception timing and a large number of string values, aka an "atom map" issue...
CVE-2011-0056
Buffer overflow in the JavaScript engine in Mozilla Firefox before 3.5.17 and 3.6.x before 3.6.14, and SeaMonkey before 2.0.12, might allow remote attackers to execute arbitrary code via vectors involving exception timing and a large number of string values, aka an "atom map" issue...
Mozilla Buffer overflow in JavaScript atom map (MFSA 2011-05)
Buffer overflow in the JavaScript engine in Mozilla Firefox before 3.5.17 and 3.6.x before 3.6.14, and SeaMonkey before 2.0.12, might allow remote attackers to execute arbitrary code via vectors involving exception timing and a large number of string values, aka an "atom map" issue...
CVE-2011-0056
Buffer overflow in the JavaScript engine in Mozilla Firefox before 3.5.17 and 3.6.x before 3.6.14, and SeaMonkey before 2.0.12, might allow remote attackers to execute arbitrary code via vectors involving exception timing and a large number of string values, aka an "atom map" issue...
rdesktop 1.6.0 Memory Corruption
rdestkop 1.6.0 Memory Corruption Copy from clipboard PoC By Dame Jovanoski badc0re This is the result of 262120 inserted into clipboard and coppied on remote machine using rdesktop 1.6.0 tested od Ubuntu 9.10. Use of this exploit: python rdeskop.py. And next is shift-insertor ctrl-v for copy. Thi...
DEBIAN-CVE-2010-4335
The validatePost function in libs/controller/components/security.php in CakePHP 1.3.x through 1.3.5 and 1.2.8 allows remote attackers to modify the internal Cake cache and execute arbitrary code via a crafted dataTokenfields value that is processed by the unserialize function, as demonstrated by...
kernel: panic when submitting certain 0-length I/O requests
The blkrqmapuseriov function in block/blk-map.c in the Linux kernel before 2.6.36.2 allows local users to cause a denial of service panic via a zero-length I/O request in a device ioctl to a SCSI device...
Design/Logic Flaw
Cisco IOS before 15.01XA1 does not clear the public key cache upon a change to a certificate map, which allows remote authenticated users to bypass a certificate ban by connecting with a banned certificate that had previously been valid, aka Bug ID CSCta79031...
CVE-2010-4685
Cisco IOS before 15.01XA1 does not clear the public key cache upon a change to a certificate map, which allows remote authenticated users to bypass a certificate ban by connecting with a banned certificate that had previously been valid, aka Bug ID CSCta79031...
Cross site request forgery (csrf)
The blkrqmapuseriov function in block/blk-map.c in the Linux kernel before 2.6.37-rc7 allows local users to cause a denial of service panic via a zero-length I/O request in a device ioctl to a SCSI device, related to an unaligned map. NOTE: this vulnerability exists because of an incomplete fix f...
PT-2011-1466 · Linux +1 · Linux Kernel +1
Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 2.6.36.2 Description: The issue allows local users to cause a denial of service, resulting in a system panic. This can be achieved by submitting a zero-length I/O request in a device ioctl to a SCSI device,...
Joomla! Component JE Auto - Local File Inclusion
Joomla! Component JE Auto - Local File Inclusion Name : Joomla comjeauto LFI Vulnerability Date : Dec,7 2010 Vendor Url :http://joomlaextensions.co.in/jeauto Dork:inurl:comjeauto Author : Sid3^effects aKa HaRi Big hugs : Th3 RDX,Hananbutt, special thanks to : r0073r inj3ct0r.com,L0rd...
Joomla! Component JE Auto - Local File Inclusion
Name : Joomla comjeauto LFI Vulnerability Date : Dec,7 2010 Vendor Url :http://joomlaextensions.co.in/jeauto Dork:inurl:comjeauto Author : Sid3^effects aKa HaRi Big hugs : Th3 RDX,Hananbutt, special thanks to : r0073r inj3ct0r.com,L0rd CruSad3r,SeeMe,MaYur,MA1201,KeDar,Sonic,gunslinger,Sn!pEr.S!...