Lucene search
+L

2920 matches found

Prion
Prion
•added 2008/04/12 8:05 p.m.•19 views

Memory corruption

Opera before 9.27 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted scaled image pattern in an HTML CANVAS element, which triggers memory corruption...

9.3CVSS8AI score0.07595EPSS
SaveExploits1References10Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2008/04/12 12:00 a.m.•5 views

CVE-2008-1762: Undefined Security Weakness

Opera before 9.27 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted scaled image pattern in an HTML CANVAS element, which triggers memory corruption...

9.3CVSS6.4AI score0.07595EPSS
SaveExploits1References2
RedHat Linux
RedHat Linux
•added 2007/11/29 3:06 p.m.•11 views

pcre miscalculation of memory requirements if options are changed during pattern compilation

Perl-Compatible Regular Expression PCRE library before 7.0 does not properly calculate the amount of memory needed for a compiled regular expression pattern when the 1 -x or 2 -i UTF-8 options change within the pattern, which allows context-dependent attackers to cause a denial of service PCRE or...

4.3CVSS5.8AI score0.01666EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
•added 2007/11/29 2:50 p.m.•14 views

pcre miscalculation of memory requirements if options are changed during pattern compilation

Perl-Compatible Regular Expression PCRE library before 7.0 does not properly calculate the amount of memory needed for a compiled regular expression pattern when the 1 -x or 2 -i UTF-8 options change within the pattern, which allows context-dependent attackers to cause a denial of service PCRE or...

4.3CVSS5.8AI score0.01666EPSS
SaveExploits0References4
Prion
Prion
•added 2007/11/07 11:46 p.m.•28 views

Code injection

Perl-Compatible Regular Expression PCRE library before 7.3 allows context-dependent attackers to cause a denial of service crash and possibly execute arbitrary code via regex patterns containing unmatched "\Q\E" sequences with orphan "\E" codes...

6.8CVSS7.4AI score0.0353EPSS
SaveExploits0References58Affected Software1
OSV
OSV
•added 2007/11/07 11:46 p.m.•17 views

CVE-2007-4768

Heap-based buffer overflow in Perl-Compatible Regular Expression PCRE library before 7.3 allows context-dependent attackers to execute arbitrary code via a singleton Unicode sequence in a character class in a regex pattern, which is incorrectly optimized...

7.6AI score
SaveExploits0References60
OSV
OSV
•added 2007/11/07 11:46 p.m.•13 views

DEBIAN-CVE-2007-4768

Heap-based buffer overflow in Perl-Compatible Regular Expression PCRE library before 7.3 allows context-dependent attackers to execute arbitrary code via a singleton Unicode sequence in a character class in a regex pattern, which is incorrectly optimized...

6.8CVSS8.3AI score0.04097EPSS
SaveExploits0References1
Prion
Prion
•added 2007/11/07 11:46 p.m.•33 views

Heap overflow

Heap-based buffer overflow in Perl-Compatible Regular Expression PCRE library before 7.3 allows context-dependent attackers to execute arbitrary code via a singleton Unicode sequence in a character class in a regex pattern, which is incorrectly optimized...

6.8CVSS7.7AI score0.04097EPSS
SaveExploits0References60Affected Software1
UbuntuCve
UbuntuCve
•added 2007/11/07 11:46 p.m.•35 views

CVE-2007-4768

Heap-based buffer overflow in Perl-Compatible Regular Expression PCRE library before 7.3 allows context-dependent attackers to execute arbitrary code via a singleton Unicode sequence in a character class in a regex pattern, which is incorrectly optimized...

6.8CVSS6.2AI score0.04097EPSS
SaveExploits0References2
NVD
NVD
•added 2007/11/07 11:46 p.m.•27 views

CVE-2007-4768

Heap-based buffer overflow in Perl-Compatible Regular Expression PCRE library before 7.3 allows context-dependent attackers to execute arbitrary code via a singleton Unicode sequence in a character class in a regex pattern, which is incorrectly optimized...

6.8CVSS7.5AI score0.04097EPSS
SaveExploits0References60
Debian CVE
Debian CVE
•added 2007/11/07 8:00 p.m.•40 views

CVE-2007-4768

Heap-based buffer overflow in Perl-Compatible Regular Expression PCRE library before 7.3 allows context-dependent attackers to execute arbitrary code via a singleton Unicode sequence in a character class in a regex pattern, which is incorrectly optimized...

6.8CVSS7.6AI score0.04097EPSS
SaveExploits0
Cvelist
Cvelist
•added 2007/11/07 8:00 p.m.•41 views

CVE-2007-4768

Heap-based buffer overflow in Perl-Compatible Regular Expression PCRE library before 7.3 allows context-dependent attackers to execute arbitrary code via a singleton Unicode sequence in a character class in a regex pattern, which is incorrectly optimized...

9.7AI score0.04097EPSS
SaveExploits0References60
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2007/11/07 12:00 a.m.•5 views

CVE-2007-4768: Improper Restriction of Operations within the Bounds of a Memory Buffer

Heap-based buffer overflow in Perl-Compatible Regular Expression PCRE library before 7.3 allows context-dependent attackers to execute arbitrary code via a singleton Unicode sequence in a character class in a regex pattern, which is incorrectly optimized...

6.8CVSS6.7AI score0.04097EPSS
SaveExploits0References2
myhack58
myhack58
•added 2007/09/07 12:00 a.m.•25 views

In the hierarchical architecture looking for java web vulnerability-vulnerability warning-the black bar safety net

web application development sites, is currently the most widely used program. But the developers of the level is uneven, resulting in a wide variety of web vulnerabilities. This article standing in a layered architecture perspective, the analysis about how to in a java web program to find the may...

7.7AI score
SaveExploits0
Packet Storm
Packet Storm
•added 2007/08/24 12:00 a.m.•36 views

olatedownload-xss.txt

-Summary- Software: Olate Download Sowtwares Web Site: http://www.olate.co.uk/ Versions: 3.4.2 Class: Remote Status: Unpatched Exploit: Available Solution: Not Available Discovered by: imei addmimistrator Risk Level: Middel Description Olate download is prone to Cross site scripting, cause of...

7.4AI score
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2007/05/24 12:00 a.m.•6 views

CVE-2007-2832: Undefined Security Weakness

Cross-site scripting XSS vulnerability in the web application firewall in Cisco CallManager before 3.35sr3, 4.1 before 4.13sr5, 4.2 before 4.23sr2, and 4.3 before 4.31sr1 allows remote attackers to inject arbitrary web script or HTML via the pattern parameter to CCMAdmin/serverlist.asp aka the...

4.3CVSS6AI score0.06492EPSS
SaveExploits2References1
Tenable Nessus
Tenable Nessus
•added 2007/03/15 12:00 a.m.•40 views

Trend Micro VsapiNT.sys UPX File Parsing DoS

The version of Trend Micro Antivirus installed on the remote Windows host contains a divide-by-zero error in its 'VsapiNT.sys' kernel driver. Using a specially crafted UPX file, a remote attacker may be able to leverage this flaw to crash the affected host. C Tenable Network Security, Inc...

7.8CVSS5.5AI score0.02525EPSS
SaveExploits0References4
NVD
NVD
•added 2007/02/08 6:28 p.m.•24 views

CVE-2007-0851

Buffer overflow in the Trend Micro Scan Engine 8.000 and 8.300 before virus pattern file 4.245.00, as used in other products such as Cyber Clean Center CCC Cleaner, allows remote attackers to execute arbitrary code via a malformed UPX compressed executable...

9.3CVSS7.8AI score0.08361EPSS
SaveExploits0References15
CVE
CVE
•added 2007/02/08 6:00 p.m.•79 views

CVE-2007-0851

CVE-2007-0851 describes a buffer overflow in Trend Micro Scan Engine 8.000 and 8.300 before virus pattern file 4.245.00, exploitable when processing UPX-packed executables (as used in CCC Cleaner). The CCC Cleaner component is affected when the UPX-packed file is scanned, enabling arbitrary code ...

9.3CVSS7.8AI score0.08361EPSS
SaveExploits0References15Affected Software23
Positive Technologies
Positive Technologies
•added 2006/06/05 12:00 a.m.•17 views

PT-2006-3745 · X Cart · X-Cart

Name of the Vulnerable Software and Affected Versions: X-Cart Gold and Pro versions 4.0.18 through 4.1.0 beta 1 Description: The issue allows remote attackers to execute arbitrary SQL commands via the "Search for pattern" field in search.php, when the settings specify only "Search in Detailed...

9.8CVSS8.5AI score0.01329EPSS
SaveExploits0References6
Rows per page
Query Builder