Lucene search
+L

4470 matches found

Cvelist
Cvelist
•added 2010/01/20 4:00 p.m.•50 views

CVE-2010-0037

Buffer overflow in Image RAW in Apple Mac OS X 10.5.8 and 10.6.2 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted DNG image...

7.8AI score0.04963EPSS
SaveExploits1References7
CVE
CVE
•added 2010/01/20 4:00 p.m.•85 views

CVE-2010-0037

CVE-2010-0037 concerns a buffer overflow in Apple Mac OS X 10.5.8 and 10.6.2’s Image RAW decoder when processing crafted DNG images. The vulnerability arises in the Image RAW (and related ImageIO) component, allowing remote attackers to cause an application crash or execute arbitrary code. Affect...

9.3CVSS7.8AI score0.04963EPSS
SaveExploits1References7Affected Software2
Positive Technologies
Positive Technologies
•added 2010/01/20 12:00 a.m.•17 views

PT-2010-1862 · Apple · Image Raw +1

Name of the Vulnerable Software and Affected Versions: Apple Mac OS X versions 10.5.8 through 10.6.2 Description: The issue allows remote attackers to execute arbitrary code or cause a denial of service, resulting in an application crash, via a crafted DNG image. This is due to a buffer overflow ...

9.3CVSS8.5AI score0.04963EPSS
SaveExploits1References9
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2010/01/20 12:00 a.m.•8 views

CVE-2010-0037: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in Image RAW in Apple Mac OS X 10.5.8 and 10.6.2 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted DNG image...

9.3CVSS6.5AI score0.04963EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
•added 2010/01/20 12:00 a.m.•60 views

Mac OS X Multiple Vulnerabilities (Security Update 2010-001)

The remote host is running a version of Mac OS X 10.6 or 10.5 that does not have Security Update 2010-001 applied. This security update contains fixes for the following products : - CoreAudio - CUPS - Flash Player plug-in - ImageIO - Image RAW - OpenSSL C Tenable Network Security, Inc. if...

9.8CVSS7AI score0.87264EPSS
SaveExploits25References15
PyPA
PyPA
•added 2009/12/23 9:30 p.m.•15 views

PYSEC-2009-7

Multiple unspecified vulnerabilities in Trac before 0.11.6 have unknown impact and attack vectors, possibly related to 1 "policy checks in report results when using alternate formats" or 2 a "check for the 'raw' role that is missing in docutils 0.6."...

7.5CVSS7AI score0.01968EPSS
SaveExploits1References8Affected Software1
Prion
Prion
•added 2009/12/23 9:30 p.m.•18 views

Code injection

Multiple unspecified vulnerabilities in Trac before 0.11.6 have unknown impact and attack vectors, possibly related to 1 "policy checks in report results when using alternate formats" or 2 a "check for the 'raw' role that is missing in docutils 0.6."...

7.5CVSS7.2AI score0.01968EPSS
SaveExploits1References7Affected Software1
UbuntuCve
UbuntuCve
•added 2009/12/23 9:30 p.m.•26 views

CVE-2009-4405

Multiple unspecified vulnerabilities in Trac before 0.11.6 have unknown impact and attack vectors, possibly related to 1 "policy checks in report results when using alternate formats" or 2 a "check for the 'raw' role that is missing in docutils 0.6."...

7.5CVSS5.9AI score0.01968EPSS
SaveExploits1References1
OSV
OSV
•added 2009/12/23 9:30 p.m.•15 views

DEBIAN-CVE-2009-4405

Multiple unspecified vulnerabilities in Trac before 0.11.6 have unknown impact and attack vectors, possibly related to 1 "policy checks in report results when using alternate formats" or 2 a "check for the 'raw' role that is missing in docutils 0.6."...

7.5CVSS7AI score0.01968EPSS
SaveExploits1References1
OSV
OSV
•added 2009/12/23 9:30 p.m.•16 views

CVE-2009-4405

Multiple unspecified vulnerabilities in Trac before 0.11.6 have unknown impact and attack vectors, possibly related to 1 "policy checks in report results when using alternate formats" or 2 a "check for the 'raw' role that is missing in docutils 0.6."...

6.6AI score
SaveExploits0References7
OSV
OSV
•added 2009/12/23 9:30 p.m.•25 views

PYSEC-2009-7

Multiple unspecified vulnerabilities in Trac before 0.11.6 have unknown impact and attack vectors, possibly related to 1 "policy checks in report results when using alternate formats" or 2 a "check for the 'raw' role that is missing in docutils 0.6."...

7.5CVSS6.2AI score0.01968EPSS
SaveExploits1References8
Debian CVE
Debian CVE
•added 2009/12/23 9:00 p.m.•63 views

CVE-2009-4405

Multiple unspecified vulnerabilities in Trac before 0.11.6 have unknown impact and attack vectors, possibly related to 1 "policy checks in report results when using alternate formats" or 2 a "check for the 'raw' role that is missing in docutils 0.6."...

7.5CVSS6.2AI score0.01968EPSS
SaveExploits1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2009/12/23 12:00 a.m.•3 views

CVE-2009-4405: Undefined Security Weakness

Multiple unspecified vulnerabilities in Trac before 0.11.6 have unknown impact and attack vectors, possibly related to 1 "policy checks in report results when using alternate formats" or 2 a "check for the 'raw' role that is missing in docutils 0.6."...

7.5CVSS5.9AI score0.01968EPSS
SaveExploits1References1
OpenVAS
OpenVAS
•added 2009/12/10 12:00 a.m.•26 views

Mandriva Security Advisory MDVSA-2009:157-1 (perl-Compress-Raw-Zlib)

The remote host is missing an update to perl-Compress-Raw-Zlib announced via advisory MDVSA-2009:157-1. OpenVAS Vulnerability Test $Id: mdksa20091571.nasl 6573 2017-07-06 13:10:50Z cfischer $ Description: Auto-generated from advisory MDVSA-2009:157-1 perl-Compress-Raw-Zlib Authors: Thomas Reinke...

6.8CVSS5.8AI score0.07441EPSS
SaveExploits3
OpenVAS
OpenVAS
•added 2009/12/10 12:00 a.m.•40 views

Mandriva Security Advisory MDVSA-2009:157-1 (perl-Compress-Raw-Zlib)

The remote host is missing an update to perl-Compress-Raw-Zlib announced via advisory MDVSA-2009:157-1. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

6.8CVSS5.8AI score0.07441EPSS
SaveExploits3References1
RedHat Linux
RedHat Linux
•added 2009/11/17 3:23 p.m.•15 views

kernel: SELinux and mmap_min_addr

The Linux kernel before 2.6.31-rc7 does not properly prevent mmap operations that target page zero and other low memory addresses, which allows local users to gain privileges by exploiting NULL pointer dereference vulnerabilities, related to 1 the default configuration of the allowunconfinedmmapl...

7.2CVSS7.1AI score0.00512EPSS
SaveExploits2References4
RedHat Linux
RedHat Linux
•added 2009/11/03 6:21 p.m.•14 views

kernel: numerous getname() infoleaks

The Linux kernel before 2.6.31-rc7 does not initialize certain data structures within getname functions, which allows local users to read the contents of some kernel memory locations by calling getsockname on 1 an AFAPPLETALK socket, related to the atalkgetname function in net/appletalk/ddp.c; 2 ...

4.9CVSS5.8AI score0.01029EPSS
SaveExploits8References4
OpenVAS
OpenVAS
•added 2009/09/02 12:00 a.m.•34 views

Fedora Core 11 FEDORA-2009-8868 (perl-Compress-Raw-Bzip2)

The remote host is missing an update to perl-Compress-Raw-Bzip2 announced via advisory FEDORA-2009-8868. OpenVAS Vulnerability Test $Id: fcore20098868.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-8868 perl-Compress-Raw-Bzip2 Authors: Thomas Reink...

6.8CVSS5.8AI score0.07441EPSS
SaveExploits4References1
OpenVAS
OpenVAS
•added 2009/09/02 12:00 a.m.•34 views

Fedora Core 11 FEDORA-2009-8868 (perl-Compress-Raw-Bzip2)

The remote host is missing an update to perl-Compress-Raw-Bzip2 announced via advisory FEDORA-2009-8868. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are...

6.8CVSS5.7AI score0.07441EPSS
SaveExploits4References2
OpenVAS
OpenVAS
•added 2009/09/02 12:00 a.m.•44 views

Fedora Core 10 FEDORA-2009-8888 (perl-Compress-Raw-Bzip2)

The remote host is missing an update to perl-Compress-Raw-Bzip2 announced via advisory FEDORA-2009-8888. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are...

6.8CVSS5.7AI score0.07441EPSS
SaveExploits4References2
Rows per page
Query Builder