Lucene search
K

1441 matches found

Zero Day Initiative
Zero Day Initiative
added 2011/11/28 12:0 a.m.36 views

RealNetworks RealPlayer RV10 Sample Height Parsing Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of RealNetworks Real Player. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists when the...

7.5CVSS4.6AI score0.037EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2011/11/28 12:0 a.m.28 views

RealNetworks RealPlayer RV30 Uninitialized Index Value Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of RealNetworks Real Player. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within how the...

7.5CVSS5.9AI score0.04317EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2011/11/28 12:0 a.m.22 views

RealNetworks RealPlayer genr Sample Size Parsing Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of RealNetworks RealPlayer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within how the...

7.5CVSS5.1AI score0.03017EPSS
Exploits0References1
NVD
NVD
added 2011/11/24 11:55 a.m.21 views

CVE-2011-4251

RealNetworks RealPlayer before 15.0.0 allows remote attackers to execute arbitrary code via a crafted sample size in a RealAudio file...

9.3CVSS7.4AI score0.03017EPSS
Exploits0References1
Prion
Prion
added 2011/11/24 11:55 a.m.22 views

Design/Logic Flaw

The RV10 codec in RealNetworks RealPlayer before 15.0.0 and Mac RealPlayer before 12.0.0.1703 allows remote attackers to execute arbitrary code via a crafted sample height...

9.3CVSS8AI score0.037EPSS
Exploits0References1Affected Software1
The Hacker News
The Hacker News
added 2011/10/12 1:21 a.m.6 views

blueHOMES hacked - 500k users data and Password in Plain text leaked

blueHOMES hacked - 500k users data and Password in Plain text leaked Some Anonymous Hacker hack the French property and property Germany Dealers website blueHOMES.com . About 500,000 Users data claim to be hacked by Hacker and also database include all customer passwords in plaintext, including...

6.8AI score
Exploits0
RedHat Linux
RedHat Linux
added 2011/09/21 6:32 p.m.3 views

qt buffer overflow in greyscale images

Buffer overflow in the TIFF reader in gui/image/qtiffhandler.cpp in Qt 4.7.4 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via the TIFFTAGSAMPLESPERPIXEL tag in a greyscale TIFF image with multiple samples per pixel...

9.3CVSS6.3AI score0.07326EPSS
Exploits0References4
RedHat Linux
RedHat Linux
added 2011/09/21 5:12 p.m.3 views

qt buffer overflow in greyscale images

Buffer overflow in the TIFF reader in gui/image/qtiffhandler.cpp in Qt 4.7.4 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via the TIFFTAGSAMPLESPERPIXEL tag in a greyscale TIFF image with multiple samples per pixel...

9.3CVSS6.3AI score0.07326EPSS
Exploits0References4
The Hacker News
The Hacker News
added 2011/09/16 5:42 a.m.5 views

WAVSEP 1.0.3 – Web Application Vulnerability Scanner Evaluation Project

WAVSEP 1.0.3 – Web Application Vulnerability Scanner Evaluation Project A vulnerable web application designed to help assessing the features, quality and accuracy of web application vulnerability scanners. This evaluation platform contains a collection of unique vulnerable web pages that can be...

7.2AI score
Exploits0
securityvulns
securityvulns
added 2011/08/10 12:0 a.m.66 views

ZDI-11-251: Apple QuickTime STSS atom Parsing Remote Code Execution Vulnerability

ZDI-11-251: Apple QuickTime STSS atom Parsing Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-11-251 August 9, 2011 -- CVE ID: CVE-2011-0250 -- CVSS: 9, AV:N/AC:L/Au:N/C:P/I:P/A:C -- Affected Vendors: Apple -- Affected Products: Apple Quicktime -- TippingPointT...

9.3CVSS0.6AI score0.05084EPSS
Exploits1
Zero Day Initiative
Zero Day Initiative
added 2011/08/09 12:0 a.m.35 views

Apple QuickTime STTS atom Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Apple Quicktime. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the way Quicktim...

9CVSS2.9AI score0.05084EPSS
Exploits1References1
0day.today
0day.today
added 2011/07/21 12:0 a.m.12 views

Dell IT Assistant detectIESettingsForITA.ocx ActiveX Control

Exploit for windows platform in category remote exploits ob...

7.1AI score
Exploits0
NVD
NVD
added 2011/06/24 8:55 p.m.17 views

CVE-2011-0210

QuickTime in Apple Mac OS X before 10.6.8 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via crafted sample tables in a movie file...

6.8CVSS7.6AI score0.02895EPSS
Exploits2References4
Prion
Prion
added 2011/06/24 8:55 p.m.15 views

Memory corruption

QuickTime in Apple Mac OS X before 10.6.8 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via crafted sample tables in a movie file...

6.8CVSS8.2AI score0.02895EPSS
Exploits2References4Affected Software2
Cvelist
Cvelist
added 2011/06/24 8:0 p.m.24 views

CVE-2011-0210

QuickTime in Apple Mac OS X before 10.6.8 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via crafted sample tables in a movie file...

6.4AI score0.02895EPSS
Exploits2References4
Exploit DB
Exploit DB
added 2011/04/19 12:0 a.m.19 views

Dalbum 1.43 - 'editini.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/47427/info Dalbum is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of...

7.4AI score
Exploits0
OSV
OSV
added 2011/03/28 4:55 p.m.2 views

DEBIAN-CVE-2011-1167

Heap-based buffer overflow in the thunder aka ThunderScan decoder in tifthunder.c in LibTIFF 3.9.4 and earlier allows remote attackers to execute arbitrary code via crafted THUNDER2BITDELTAS data in a .tiff file that has an unexpected BitsPerSample value...

6.8CVSS9.5AI score0.06233EPSS
Exploits0References1
Packet Storm
Packet Storm
added 2011/03/18 12:0 a.m.19 views

Tugux CMS Blind SQL Injection

=================================================================== Tugux CMS nid BLIND sql injection vulnerability =================================================================== Software: Tugux CMS Vendor: www.tugux.com Vuln Type: BLind SQL Injection Download link:...

7.4AI score
Exploits0
Exploit DB
Exploit DB
added 2011/03/18 12:0 a.m.23 views

Tugux CMS - 'nid' Blind SQL Injection

=================================================================== Tugux CMS nid BLIND sql injection vulnerability =================================================================== Software: Tugux CMS Vendor: www.tugux.com Vuln Type: BLind SQL Injection Download link:...

7.4AI score
Exploits0
securityvulns
securityvulns
added 2011/02/04 12:0 a.m.60 views

ZDI-11-038: Apple Quicktime Sprite Transformation Remote Code Execution Vulnerability

ZDI-11-038: Apple Quicktime Sprite Transformation Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-11-038 February 1, 2011 -- CVE ID: CVE-2010-3790 -- CVSS: 9, AV:N/AC:L/Au:N/C:P/I:P/A:C -- Affected Vendors: Apple -- Affected Products: Apple Quicktime --...

6.8CVSS0.6AI score0.04837EPSS
Exploits0
Rows per page
Query Builder