Lucene search
+L

963 matches found

Tenable Nessus
Tenable Nessus
•added 2010/10/11 12:00 a.m.•29 views

SuSE 10 Security Update : Mozilla Firefox (ZYPP Patch Number 7083)

Mozilla Firefox has been updated to version 3.5.10, fixing various bugs and security issues. - Security researcher Amit Klein reported that it was possible to reverse engineer the value used to seed Math.random. Since the pseudo-random number generator was only seeded once per browsing session,...

10CVSS9.4AI score0.11418EPSS
SaveExploits9References32
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2010/08/11 12:00 a.m.•3 views

CVE-2010-1897: Improper Input Validation

The Windows kernel-mode drivers in win32k.sys in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 do not properly validate pseudo-handle values in callback parameters during window creation, which allows loc...

7.2CVSS5.8AI score0.03428EPSS
SaveExploits6References2
Positive Technologies
Positive Technologies
•added 2010/08/11 12:00 a.m.•10 views

PT-2010-3520 · Microsoft · Windows Server 2003 +5

Name of the Vulnerable Software and Affected Versions: Microsoft Windows XP versions SP2 and SP3 Microsoft Windows Server 2003 version SP2 Microsoft Windows Vista versions SP1 and SP2 Microsoft Windows Server 2008 versions Gold, SP2, and R2 Microsoft Windows 7 Description: The issue arises from t...

7.2CVSS7.5AI score0.03428EPSS
SaveExploits6References7
Tenable Nessus
Tenable Nessus
•added 2010/06/23 12:00 a.m.•36 views

Firefox < 3.5.10 Multiple Vulnerabilities

The installed version of Firefox is earlier than 3.5.10. Such versions are potentially affected by the following security issues : - A memory corruption vulnerability can lead to arbitrary code execution if garbage collection is carefully timed after DOM nodes are moved between documents. MFSA...

10CVSS8AI score0.11418EPSS
SaveExploits9References17
Tenable Nessus
Tenable Nessus
•added 2010/06/23 12:00 a.m.•48 views

SeaMonkey < 2.0.5 Multiple Vulnerabilities

The installed version of SeaMonkey is earlier than 2.0.5. Such versions are potentially affected by the following security issues : - A memory corruption vulnerability can lead to arbitrary code execution if garbage collection is carefully timed after DOM nodes are moved between documents. MFSA...

10CVSS7.7AI score0.11418EPSS
SaveExploits8References17
Prion
Prion
•added 2010/06/11 7:30 p.m.•40 views

Design/Logic Flaw

The Cascading Style Sheets CSS implementation in WebKit in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1 on Mac OS X 10.4, does not properly handle the :visited pseudo-class, which allows remote attackers to obtain sensitive information about visited web pages...

4.3CVSS5.4AI score0.02597EPSS
SaveExploits0References15Affected Software1
UbuntuCve
UbuntuCve
•added 2010/06/11 7:30 p.m.•32 views

CVE-2010-2264

The Cascading Style Sheets CSS implementation in WebKit in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1 on Mac OS X 10.4, does not properly handle the :visited pseudo-class, which allows remote attackers to obtain sensitive information about visited web pages...

4.3CVSS5.9AI score0.02597EPSS
SaveExploits0References2
UbuntuCve
UbuntuCve
•added 2010/06/11 6:00 p.m.•44 views

CVE-2010-1417

The Cascading Style Sheets CSS implementation in WebKit in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1 on Mac OS X 10.4, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via HTML content th...

9.3CVSS7.6AI score0.06563EPSS
SaveExploits0References2
UbuntuCve
UbuntuCve
•added 2010/06/11 6:00 p.m.•42 views

CVE-2010-1401

Use-after-free vulnerability in the Cascading Style Sheets CSS implementation in WebKit in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1 on Mac OS X 10.4, allows remote attackers to execute arbitrary code or cause a denial of service application crash via vecto...

9.3CVSS7.5AI score0.08732EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2010/06/11 5:28 p.m.•43 views

CVE-2010-1401

Use-after-free vulnerability in the Cascading Style Sheets CSS implementation in WebKit in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1 on Mac OS X 10.4, allows remote attackers to execute arbitrary code or cause a denial of service application crash via vecto...

9AI score0.08732EPSS
SaveExploits0References23
Cvelist
Cvelist
•added 2010/06/11 5:28 p.m.•28 views

CVE-2010-1417

The Cascading Style Sheets CSS implementation in WebKit in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1 on Mac OS X 10.4, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via HTML content th...

9AI score0.06563EPSS
SaveExploits0References25
Debian CVE
Debian CVE
•added 2010/06/11 5:28 p.m.•35 views

CVE-2010-1401

Removed by vendor...

9.3CVSS8.4AI score0.08732EPSS
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2010/06/11 12:00 a.m.•4 views

CVE-2010-2264: Exposure of Sensitive Information to an Unauthorized Actor

The Cascading Style Sheets CSS implementation in WebKit in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1 on Mac OS X 10.4, does not properly handle the :visited pseudo-class, which allows remote attackers to obtain sensitive information about visited web pages...

4.3CVSS5.8AI score0.02597EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2010/06/11 12:00 a.m.•5 views

CVE-2010-1417: Improper Restriction of Operations within the Bounds of a Memory Buffer

The Cascading Style Sheets CSS implementation in WebKit in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1 on Mac OS X 10.4, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via HTML content th...

9.3CVSS8.4AI score0.06563EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2010/06/11 12:00 a.m.•4 views

CVE-2009-4888: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in poster.php in PHortail 1.2.1 allows remote attackers to inject arbitrary web script or HTML via the 1 pseudo, 2 email, 3 ti, and 4 txt parameters...

4.3CVSS6AI score0.01756EPSS
SaveExploits2References2
OpenVAS
OpenVAS
•added 2010/03/02 12:00 a.m.•41 views

Mandriva Update for sudo MDVSA-2010:049 (sudo)

Check for the Version of sudo OpenVAS Vulnerability Test Mandriva Update for sudo MDVSA-2010:049 sudo Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the ter...

6.9CVSS7.3AI score0.01082EPSS
SaveExploits2References2
OSV
OSV
•added 2010/02/24 6:30 p.m.•8 views

DEBIAN-CVE-2010-0426

sudo 1.6.x before 1.6.9p21 and 1.7.x before 1.7.2p4, when a pseudo-command is enabled, permits a match between the name of the pseudo-command and the name of an executable file in an arbitrary directory, which allows local users to gain privileges via a crafted executable file, as demonstrated by...

6.9CVSS7.1AI score0.01082EPSS
SaveExploits2References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2010/02/24 12:00 a.m.•3 views

CVE-2010-0426: Undefined Security Weakness

sudo 1.6.x before 1.6.9p21 and 1.7.x before 1.7.2p4, when a pseudo-command is enabled, permits a match between the name of the pseudo-command and the name of an executable file in an arbitrary directory, which allows local users to gain privileges via a crafted executable file, as demonstrated by...

6.9CVSS6AI score0.01082EPSS
SaveExploits2References2
UbuntuCve
UbuntuCve
•added 2010/02/23 12:00 a.m.•50 views

CVE-2010-0426

sudo 1.6.x before 1.6.9p21 and 1.7.x before 1.7.2p4, when a pseudo-command is enabled, permits a match between the name of the pseudo-command and the name of an executable file in an arbitrary directory, which allows local users to gain privileges via a crafted executable file, as demonstrated by...

6.9CVSS7.2AI score0.01082EPSS
SaveExploits2References4
FreeBSD
FreeBSD
•added 2010/01/29 12:00 a.m.•70 views

sudo -- Privilege escalation with sudoedit

Todd Miller reports: When sudo performs its command matching, there is a special case for pseudo-commands in the sudoers file currently, the only pseudo-command is sudoedit. Unlike a regular command, pseudo-commands do not begin with a slash '/'. The flaw is that sudo's the matching code would on...

6.9CVSS7.3AI score0.01082EPSS
SaveExploits2References3
Rows per page
Query Builder