Lucene search
+L

2045 matches found

zdt
zdt
added 2015/12/18 12:00 a.m.74 views

Adobe Flash TextField.replaceSel - Use-After-Free

Exploit for windows platform in category dos / poc Source: https://code.google.com/p/google-security-research/issues/detail?id=585 There is a use-after-free in TextField.replaceSel. If the string parameter of the method is set to an object with toString defined, this method can delete the...

10CVSS0.3AI score0.43408EPSS
SaveExploits2
exploitpack
exploitpack
added 2015/12/18 12:00 a.m.15 views

Adobe Flash TextField.replaceText - Use-After-Free

Adobe Flash TextField.replaceText - Use-After-Free Source: https://code.google.com/p/google-security-research/issues/detail?id=584 There is a use-after-free in the TextField.replaceText function. If the function is called with a string parameter with toString defined, or an integer parameter with...

0.2AI score
SaveExploits0
zdt
zdt
added 2015/12/18 12:00 a.m.59 views

Adobe Flash TextField.tabIndex Setter - Use-After-Free

Exploit for windows platform in category dos / poc Source: https://code.google.com/p/google-security-research/issues/detail?id=574 There is a use-after-free in the TextField.tabIndex setter. If the integer parameter is an object with valueOf defined, then it can free the TextField's parent, leadi...

10CVSS0.1AI score0.43408EPSS
SaveExploits2
exploitpack
exploitpack
added 2015/12/18 12:00 a.m.14 views

Adobe Flash TextField.tabIndex Setter - Use-After-Free

Adobe Flash TextField.tabIndex Setter - Use-After-Free Source: https://code.google.com/p/google-security-research/issues/detail?id=574 There is a use-after-free in the TextField.tabIndex setter. If the integer parameter is an object with valueOf defined, then it can free the TextField's parent,...

SaveExploits0
Exploit DB
Exploit DB
added 2015/12/18 12:00 a.m.25 views

Adobe Flash TextField.replaceText - Use-After-Free

Source: https://code.google.com/p/google-security-research/issues/detail?id=584 There is a use-after-free in the TextField.replaceText function. If the function is called with a string parameter with toString defined, or an integer parameter with valueOf defined, the parent object of the TextFiel...

10CVSS7.8AI score0.43408EPSS
SaveExploits2
Exploit DB
Exploit DB
added 2015/12/18 12:00 a.m.31 views

Adobe Flash TextField.replaceSel - Use-After-Free

Source: https://code.google.com/p/google-security-research/issues/detail?id=585 There is a use-after-free in TextField.replaceSel. If the string parameter of the method is set to an object with toString defined, this method can delete the TextField's parent, leading to a use-after-free. A minimal...

10CVSS7.8AI score0.43408EPSS
SaveExploits2
OSV
OSV
added 2015/11/17 3:59 p.m.7 views

DEBIAN-CVE-2015-7995

The xsltStylePreCompute function in preproc.c in libxslt 1.1.28 does not check if the parent node is an element, which allows attackers to cause a denial of service via a crafted XML file, related to a "type confusion" issue...

5CVSS8.8AI score0.04236EPSS
SaveExploits1References1
attackerkb
attackerkb
added 2015/11/17 3:59 p.m.2 views

CVE-2015-7995

The xsltStylePreCompute function in preproc.c in libxslt 1.1.28 does not check if the parent node is an element, which allows attackers to cause a denial of service via a crafted XML file, related to a "type confusion" issue...

5CVSS5.5AI score0.04236EPSS
SaveExploits1References24
Cvelist
Cvelist
added 2015/11/17 3:00 p.m.48 views

CVE-2015-7995

The xsltStylePreCompute function in preproc.c in libxslt 1.1.28 does not check if the parent node is an element, which allows attackers to cause a denial of service via a crafted XML file, related to a "type confusion" issue...

7.5AI score0.04236EPSS
SaveExploits1References22
OSV
OSV
added 2015/11/17 12:00 a.m.13 views

UBUNTU-CVE-2015-7995

The xsltStylePreCompute function in preproc.c in libxslt 1.1.28 does not check if the parent node is an element, which allows attackers to cause a denial of service via a crafted XML file, related to a "type confusion" issue...

5CVSS7.1AI score0.04236EPSS
SaveExploits1References4
Atlassian
Atlassian
added 2014/12/02 7:41 a.m.36 views

XSS vulnerability in "children" macro when displaying excerpts

panel:bgColor=e7f4fa NOTE: This bug report is for Confluence Server. Using Confluence Cloud? See the corresponding bug report|http://jira.atlassian.com/browse/CONFCLOUD-35777. panel - Create a parent page A with a child page B - Add an \excerpt\ macro to B containing the text alert"Gotcha!"; - Ad...

0.9AI score
SaveExploits0Affected Software1
Atlassian
Atlassian
added 2014/12/02 7:41 a.m.27 views

XSS vulnerability in "children" macro when displaying excerpts

Create a parent page A with a child page B - Add an \excerpt\ macro to B containing the text alert"Gotcha!"; - Add the \children\ macro to page A, with "Show excerpts" checked - Alert is shown when viewing A This is currently present on EAC - likely to be in released versions; not tested yet...

2.7AI score
SaveExploits0Affected Software1
Atlassian
Atlassian
added 2014/12/02 7:41 a.m.23 views

XSS vulnerability in "children" macro when displaying excerpts

panel:bgColor=e7f4fa NOTE: This bug report is for Confluence Cloud. Using Confluence Server? See the corresponding bug report|http://jira.atlassian.com/browse/CONFSERVER-35777. panel - Create a parent page A with a child page B - Add an \excerpt\ macro to B containing the text alert"Gotcha!"; - A...

0.9AI score
SaveExploits0Affected Software1
Atlassian
Atlassian
added 2014/12/02 7:41 a.m.30 views

XSS vulnerability in "children" macro when displaying excerpts

panel:bgColor=e7f4fa NOTE: This bug report is for Confluence Server. Using Confluence Cloud? See the corresponding bug report|http://jira.atlassian.com/browse/CONFCLOUD-35777. panel - Create a parent page A with a child page B - Add an \excerpt\ macro to B containing the text alert"Gotcha!"; - Ad...

0.9AI score
SaveExploits0
OSV
OSV
added 2014/08/14 5:42 p.m.10 views

USN-2316-1 subversion vulnerabilities

Lieven Govaerts discovered that the Subversion moddavsvn module incorrectly handled certain request methods when SVNListParentPath was enabled. A remote attacker could use this issue to cause the server to crash, resulting in a denial of service. This issue only affected Ubuntu 12.04 LTS...

4.3CVSS7.2AI score0.11052EPSS
SaveExploits0References4
exploitpack
exploitpack
added 2014/08/02 12:00 a.m.27 views

Photo WiFi Transfer 1.01 - Directory Traversal

Photo WiFi Transfer 1.01 - Directory Traversal Document Title: =============== Photo WiFi Transfer 1.01 - Directory Traversal Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1285 Release Date: ============= 2014-07-31 Vulnerability Laborato...

0.4AI score
SaveExploits0
seebug.org
seebug.org
added 2014/07/01 12:00 a.m.48 views

Online Grades & Attendance 3.2.6 Credentials Changer SQL Exploit

No description provided by source. !/usr/bin/perl || || || -----------------------------------------\ == -- ----------- ---------------------------- ------------------/ ¡VIVA SPAIN!...¡GANAREMOS EL MUNDIAL!...o.O ¡PROUD TO BE SPANISH!...

7.1AI score
SaveExploits0
seebug.org
seebug.org
added 2014/07/01 12:00 a.m.48 views

Online Grades & Attendance 3.2.6 - Multiple SQL Injection Vulnerabilities

No description provided by source. || || || -----------------------------------------\ == -- ----------- ---------------------------- ------------------/ ¡VIVA SPAIN!...¡GANAREMOS EL MUNDIAL!...o.O ¡PROUD TO BE SPANISH! --...

7.1AI score
SaveExploits0
CVE
CVE
added 2014/05/21 10:00 a.m.114 views

CVE-2014-1748

The vulnerability CVE-2014-1748 affects Blink in Google Chrome prior to 35.0.1916.114. It targets ScrollView::paint in platform/scroll/ScrollView.cpp, allowing a remote attacker to spoof the UI by extending scrollbar painting into the parent frame. Impact: UI spoofing could mislead users. Affecte...

5CVSS5.9AI score0.01538EPSS
SaveExploits0References14Affected Software1
Debian CVE
Debian CVE
added 2014/05/21 10:00 a.m.42 views

CVE-2014-1748

Removed by vendor...

5CVSS8.7AI score0.01538EPSS
SaveExploits0
Rows per page
Query Builder