Lucene search
+L

134 matches found

OSV
OSV
added 2012/06/01 8:55 p.m.6 views

DEBIAN-CVE-2012-2944

Buffer overflow in the addchar function in common/parseconf.c in upsd in Network UPS Tools NUT before 2.6.4 allows remote attackers to execute arbitrary code or cause a denial of service electric-power outage via a long string containing non-printable characters...

7.5CVSS7.7AI score0.06243EPSS
SaveExploits1References1
NVD
NVD
added 2012/06/01 8:55 p.m.16 views

CVE-2012-2944

Buffer overflow in the addchar function in common/parseconf.c in upsd in Network UPS Tools NUT before 2.6.4 allows remote attackers to execute arbitrary code or cause a denial of service electric-power outage via a long string containing non-printable characters...

7.5CVSS7.7AI score0.06243EPSS
SaveExploits1References11
Prion
Prion
added 2012/06/01 8:55 p.m.17 views

Buffer overflow

Buffer overflow in the addchar function in common/parseconf.c in upsd in Network UPS Tools NUT before 2.6.4 allows remote attackers to execute arbitrary code or cause a denial of service electric-power outage via a long string containing non-printable characters...

7.5CVSS8.4AI score0.06243EPSS
SaveExploits1References11Affected Software1
Debian CVE
Debian CVE
added 2012/06/01 8:00 p.m.49 views

CVE-2012-2944

Buffer overflow in the addchar function in common/parseconf.c in upsd in Network UPS Tools NUT before 2.6.4 allows remote attackers to execute arbitrary code or cause a denial of service electric-power outage via a long string containing non-printable characters...

7.5CVSS7.5AI score0.06243EPSS
SaveExploits1
UbuntuCve
UbuntuCve
added 2012/05/30 12:00 a.m.20 views

CVE-2012-2944

Buffer overflow in the addchar function in common/parseconf.c in upsd in Network UPS Tools NUT before 2.6.4 allows remote attackers to execute arbitrary code or cause a denial of service electric-power outage via a long string containing non-printable characters...

7.5CVSS6AI score0.06243EPSS
SaveExploits1References2
NVD
NVD
added 2011/02/08 10:00 p.m.24 views

CVE-2011-0919

Multiple stack-based buffer overflows in the 1 POP3 and 2 IMAP services in IBM Lotus Domino allow remote attackers to execute arbitrary code via non-printable characters in an envelope sender address, aka SPR KLYH87LLVJ...

10CVSS7.6AI score0.05912EPSS
SaveExploits0References4
Prion
Prion
added 2011/02/08 10:00 p.m.21 views

Stack overflow

Multiple stack-based buffer overflows in the 1 POP3 and 2 IMAP services in IBM Lotus Domino allow remote attackers to execute arbitrary code via non-printable characters in an envelope sender address, aka SPR KLYH87LLVJ...

10CVSS8.2AI score0.05912EPSS
SaveExploits0References4
Zero Day Initiative
Zero Day Initiative
added 2011/02/07 12:00 a.m.41 views

(0Day) IBM Lotus Domino IMAP/POP3 Non-Printable Character Expansion Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on systems with vulnerable installations of IBM Lotus Domino. Authentication is not required to exploit this vulnerability. The specific flaw exists within the POP3 and IMAP services while processing malformed e-mails. The...

10CVSS5.9AI score0.05912EPSS
SaveExploits0References1
NVD
NVD
added 2011/01/20 7:00 p.m.17 views

CVE-2010-3928

Ruby Version Manager RVM before 1.2.1 writes file contents to a terminal without sanitizing non-printable characters, which might allow remote attackers to execute arbitrary commands via a crafted file, related to an "escape sequence injection vulnerability." NOTE: some of these details are...

6.8CVSS7.8AI score0.01786EPSS
SaveExploits0References7
Prion
Prion
added 2011/01/20 7:00 p.m.15 views

Design/Logic Flaw

Ruby Version Manager RVM before 1.2.1 writes file contents to a terminal without sanitizing non-printable characters, which might allow remote attackers to execute arbitrary commands via a crafted file, related to an "escape sequence injection vulnerability." NOTE: some of these details are...

6.8CVSS8.3AI score0.01786EPSS
SaveExploits0References7Affected Software1
Cvelist
Cvelist
added 2011/01/20 6:00 p.m.24 views

CVE-2010-3928

Ruby Version Manager RVM before 1.2.1 writes file contents to a terminal without sanitizing non-printable characters, which might allow remote attackers to execute arbitrary commands via a crafted file, related to an "escape sequence injection vulnerability." NOTE: some of these details are...

7.8AI score0.01786EPSS
SaveExploits0References7
OSV
OSV
added 2010/02/08 9:30 p.m.6 views

DEBIAN-CVE-2010-0562

The sdump function in sdump.c in fetchmail 6.3.11, 6.3.12, and 6.3.13, when running in verbose mode on platforms for which char is signed, allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via an SSL X.509 certificate containing non-printabl...

6.8CVSS8.3AI score0.02508EPSS
SaveExploits0References1
Debian CVE
Debian CVE
added 2010/02/08 9:00 p.m.59 views

CVE-2010-0562

The sdump function in sdump.c in fetchmail 6.3.11, 6.3.12, and 6.3.13, when running in verbose mode on platforms for which char is signed, allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via an SSL X.509 certificate containing non-printabl...

6.8CVSS8.2AI score0.02508EPSS
SaveExploits0
Prion
Prion
added 2010/01/13 8:30 p.m.30 views

Design/Logic Flaw

Yaws 1.85 writes data to a log file without sanitizing non-printable characters, which might allow remote attackers to modify a window's title, or possibly execute arbitrary commands or overwrite files, via an HTTP request containing an escape sequence for a terminal emulator...

5CVSS8.2AI score0.09026EPSS
SaveExploits3References3Affected Software1
NVD
NVD
added 2010/01/13 8:30 p.m.22 views

CVE-2009-4492

WEBrick 1.3.1 in Ruby 1.8.6 through patchlevel 383, 1.8.7 through patchlevel 248, 1.8.8dev, 1.9.1 through patchlevel 376, and 1.9.2dev writes data to a log file without sanitizing non-printable characters, which might allow remote attackers to modify a window's title, or possibly execute arbitrar...

7.5CVSS7.5AI score0.15936EPSS
SaveExploits3References9
OSV
OSV
added 2010/01/13 8:30 p.m.11 views

UBUNTU-CVE-2009-4495

Yaws 1.85 writes data to a log file without sanitizing non-printable characters, which might allow remote attackers to modify a window's title, or possibly execute arbitrary commands or overwrite files, via an HTTP request containing an escape sequence for a terminal emulator...

5CVSS6.1AI score0.09026EPSS
SaveExploits3References2
UbuntuCve
UbuntuCve
added 2010/01/13 8:30 p.m.43 views

CVE-2009-4491

thttpd 2.25b0 writes data to a log file without sanitizing non-printable characters, which might allow remote attackers to modify a window's title, or possibly execute arbitrary commands or overwrite files, via an HTTP request containing an escape sequence for a terminal emulator...

9.8CVSS6.1AI score0.13467EPSS
SaveExploits4References1
Snyk
Snyk
added 2010/01/13 8:30 p.m.11 views

Improper Input Validation

Overview Affected versions of this package are vulnerable to Improper Input Validation. WEBrick 1.3.1 in Ruby 1.8.6 through patchlevel 383, 1.8.7 through patchlevel 248, 1.8.8dev, 1.9.1 through patchlevel 376, and 1.9.2dev writes data to a log file without sanitizing non-printable characters, whi...

7.5CVSS7.9AI score0.15936EPSS
SaveExploits3References2
UbuntuCve
UbuntuCve
added 2010/01/13 8:30 p.m.32 views

CVE-2009-4495

Yaws 1.85 writes data to a log file without sanitizing non-printable characters, which might allow remote attackers to modify a window's title, or possibly execute arbitrary commands or overwrite files, via an HTTP request containing an escape sequence for a terminal emulator...

5CVSS6.1AI score0.09026EPSS
SaveExploits3References1
OSV
OSV
added 2010/01/13 8:30 p.m.9 views

UBUNTU-CVE-2009-4494

AOLserver 4.5.1 writes data to a log file without sanitizing non-printable characters, which might allow remote attackers to modify a window's title, or possibly execute arbitrary commands or overwrite files, via an HTTP request containing an escape sequence for a terminal emulator...

5CVSS6.1AI score0.08777EPSS
SaveExploits3References2
Rows per page
Query Builder