Lucene search
+L

1825 matches found

securityvulns
securityvulns
•added 2008/01/17 12:00 a.m.•80 views

8e6 Technologies R3000 Internet Filter Bypass by Request Split

8e6 Technologies R3000 Internet Filter Bypass by Request Split Product: 8e6 Technologies R3000 Internet Filter http://www.8e6.com/network-security/internet-filtering/internet-filtering.html The HTTP URL filtering function provided by the 8e6 Technologies R3000 Internet Filter can be bypassed by...

0.1AI score
SaveExploits0
attackerkb
attackerkb
•added 2007/11/08 8:46 p.m.•23 views

CVE-2006-7224

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2006-7227, CVE-2005-4872, CVE-2006-7228. Reason: this candidate was SPLIT into other identifiers in order to reflect different affected versions and distinct vendor fixes. Notes: All CVE users should consult CVE-2006-7227,...

6.8CVSS5.8AI score0.03661EPSS
SaveExploits0References1
RedHat Linux
RedHat Linux
•added 2007/10/25 5:33 p.m.•15 views

php chunk_split integer overflow

Multiple integer overflows in the chunksplit function in PHP 5 before 5.2.3 and PHP 4 before 4.4.8 allow remote attackers to cause a denial of service crash or execute arbitrary code via the 1 chunks, 2 srclen, and 3 chunklen arguments...

6.8CVSS6.2AI score0.08878EPSS
SaveExploits1References4
RedHat Linux
RedHat Linux
•added 2007/10/23 3:56 p.m.•14 views

No title provided

The chunksplit function in string.c in PHP 5.2.3 does not properly calculate the needed buffer size due to precision loss when performing integer arithmetic with floating point numbers, which has unknown attack vectors and impact, possibly resulting in a heap-based buffer overflow. NOTE: this is...

7.5CVSS6.1AI score0.02358EPSS
SaveExploits1References3
RedHat Linux
RedHat Linux
•added 2007/10/23 3:54 p.m.•20 views

php chunk_split integer overflow

Multiple integer overflows in the chunksplit function in PHP 5 before 5.2.3 and PHP 4 before 4.4.8 allow remote attackers to cause a denial of service crash or execute arbitrary code via the 1 chunks, 2 srclen, and 3 chunklen arguments...

6.8CVSS6.2AI score0.08878EPSS
SaveExploits1References4
RedHat Linux
RedHat Linux
•added 2007/09/26 8:34 a.m.•18 views

php chunk_split integer overflow

Multiple integer overflows in the chunksplit function in PHP 5 before 5.2.3 and PHP 4 before 4.4.8 allow remote attackers to cause a denial of service crash or execute arbitrary code via the 1 chunks, 2 srclen, and 3 chunklen arguments...

6.8CVSS6.2AI score0.08878EPSS
SaveExploits1References4
RedHat Linux
RedHat Linux
•added 2007/09/20 1:10 p.m.•23 views

php chunk_split integer overflow

Multiple integer overflows in the chunksplit function in PHP 5 before 5.2.3 and PHP 4 before 4.4.8 allow remote attackers to cause a denial of service crash or execute arbitrary code via the 1 chunks, 2 srclen, and 3 chunklen arguments...

6.8CVSS6.2AI score0.08878EPSS
SaveExploits1References4
NVD
NVD
•added 2007/08/18 9:17 p.m.•29 views

CVE-2007-4406

ircu 2.10.12.01 through 2.10.12.04 does not remove ops privilege after a join from a server with an older timestamp TS, which allows remote attackers to gain control of a channel during a split...

7.5CVSS7AI score0.01501EPSS
SaveExploits1References4
Prion
Prion
•added 2007/08/18 9:17 p.m.•21 views

Design/Logic Flaw

ircu 2.10.12.01 through 2.10.12.04 does not remove ops privilege after a join from a server with an older timestamp TS, which allows remote attackers to gain control of a channel during a split...

7.5CVSS7.5AI score0.01501EPSS
SaveExploits1References4Affected Software1
UbuntuCve
UbuntuCve
•added 2007/08/18 9:17 p.m.•38 views

CVE-2007-4406

ircu 2.10.12.01 through 2.10.12.04 does not remove ops privilege after a join from a server with an older timestamp TS, which allows remote attackers to gain control of a channel during a split...

7.5CVSS5.9AI score0.01501EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2007/08/18 9:00 p.m.•41 views

CVE-2007-4406

ircu 2.10.12.01 through 2.10.12.04 does not remove ops privilege after a join from a server with an older timestamp TS, which allows remote attackers to gain control of a channel during a split...

7AI score0.01501EPSS
SaveExploits1References4
Debian CVE
Debian CVE
•added 2007/08/18 9:00 p.m.•53 views

CVE-2007-4406

ircu 2.10.12.01 through 2.10.12.04 does not remove ops privilege after a join from a server with an older timestamp TS, which allows remote attackers to gain control of a channel during a split...

7.5CVSS6.8AI score0.01501EPSS
SaveExploits1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2007/08/18 12:00 a.m.•3 views

CVE-2007-4406: Undefined Security Weakness

ircu 2.10.12.01 through 2.10.12.04 does not remove ops privilege after a join from a server with an older timestamp TS, which allows remote attackers to gain control of a channel during a split...

7.5CVSS5.9AI score0.01501EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2007/06/04 12:00 a.m.•18 views

PT-2007-4176 · Php +1 · Php +1

Name of the Vulnerable Software and Affected Versions: PHP versions prior to 5.2.3 PHP versions prior to 4.4.8 Description: The issue is related to multiple integer overflows in the chunk split function. This can be exploited by remote attackers to cause a denial of service crash or execute...

7.5CVSS7.4AI score0.90768EPSS
SaveExploits35References108
RedHat Linux
RedHat Linux
•added 2007/05/17 9:45 p.m.•13 views

libpng DoS

The sPLT chunk handling code pngsetsPLT function in pngset.c in libpng 1.0.6 through 1.2.12 uses a sizeof operator on the wrong data type, which allows context-dependent attackers to cause a denial of service crash via malformed sPLT chunks that trigger an out-of-bounds read...

2.6CVSS7.2AI score0.0176EPSS
SaveExploits1References4
zdt
zdt
•added 2007/03/21 12:00 a.m.•29 views

Mambo Component nfnaddressbook 0.4 Remote File Inclusion Vulnerability

Exploit for unknown platform in category web applications ====================================================================== Mambo Component nfnaddressbook 0.4 Remote File Inclusion Vulnerability ====================================================================== MAMBO & Joomla NFN Address...

7.1AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
•added 2007/01/17 12:00 a.m.•37 views

Fedora Core 6 : texinfo-4.8-14.fc6 (2006-1203)

Sun Nov 5 2006 Miloslav Trmac - 4.8-14 - Remove off-line sorting from texindex fixes CVE-2006-4810 - Mon Oct 9 2006 Miloslav Trmac - 4.8-13 - Don't use mode 0666 for the texindex temporary files - Mon Oct 9 2006 Miloslav Trmac - 4.8-12 - Don't leave around temporary files used by texindex - Add...

4.6CVSS5.4AI score0.00556EPSS
SaveExploits2References1
Packet Storm
Packet Storm
•added 2006/09/07 12:00 a.m.•49 views

forumv04c.txt

!/usr/bin/perl Affected.scr..: µforum v0.4c Poc.ID........: 08060901 Type..........: Member's passwords are stored in .dat file no protected by a .htaccess file Risk.level....: Medium Vendor.Status.: Unpatched Src.download..: comscripts.com/scripts/php.forum.1568.html Poc.link......:...

7.4AI score
SaveExploits0
NVD
NVD
•added 2006/08/23 7:04 p.m.•35 views

CVE-2006-2932

A regression error in the restoreall code path of the 4/4GB split support for non-hugemem Linux kernels on Red Hat Linux Desktop and Enterprise Linux 4 allows local users to cause a denial of service panic via unspecified vectors...

4.9CVSS6.3AI score0.00385EPSS
SaveExploits0References7
Cvelist
Cvelist
•added 2006/08/23 7:00 p.m.•48 views

CVE-2006-2932

A regression error in the restoreall code path of the 4/4GB split support for non-hugemem Linux kernels on Red Hat Linux Desktop and Enterprise Linux 4 allows local users to cause a denial of service panic via unspecified vectors...

7.3AI score0.00385EPSS
SaveExploits0References7
Rows per page
Query Builder