Lucene search
+L

373 matches found

UbuntuCve
UbuntuCve
•added 2008/01/18 11:00 p.m.•55 views

CVE-2007-6427

The XInput extension in X.Org Xserver before 1.4.1 allows context-dependent attackers to execute arbitrary code via requests related to byte swapping and heap corruption within multiple functions, a different vulnerability than CVE-2007-4990...

9.3CVSS7.5AI score0.04278EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2008/01/18 10:00 p.m.•43 views

CVE-2007-6427

The XInput extension in X.Org Xserver before 1.4.1 allows context-dependent attackers to execute arbitrary code via requests related to byte swapping and heap corruption within multiple functions, a different vulnerability than CVE-2007-4990...

9.8AI score0.04278EPSS
SaveExploits0References67
CVE
CVE
•added 2008/01/18 10:00 p.m.•166 views

CVE-2007-6427

CVE-2007-6427 affects the X.Org Xserver (XInput-Misc extension) prior to version 1.4.1. The root cause is missing input sanitising within the XInput‑Misc code, which can lead to local privilege escalation. In public advisories, this is described as a vulnerability in the XInput‑Misc path that all...

9.3CVSS9.8AI score0.04278EPSS
SaveExploits0References67Affected Software1
Debian CVE
Debian CVE
•added 2008/01/18 10:00 p.m.•49 views

CVE-2007-6427

The XInput extension in X.Org Xserver before 1.4.1 allows context-dependent attackers to execute arbitrary code via requests related to byte swapping and heap corruption within multiple functions, a different vulnerability than CVE-2007-4990...

9.3CVSS6.4AI score0.04278EPSS
SaveExploits0
RedHat Linux
RedHat Linux
•added 2008/01/18 9:42 a.m.•9 views

xfree86: memory corruption via XInput extension

The XInput extension in X.Org Xserver before 1.4.1 allows context-dependent attackers to execute arbitrary code via requests related to byte swapping and heap corruption within multiple functions, a different vulnerability than CVE-2007-4990...

9.3CVSS7.7AI score0.04278EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
•added 2008/01/17 8:04 p.m.•15 views

xfree86: memory corruption via XInput extension

The XInput extension in X.Org Xserver before 1.4.1 allows context-dependent attackers to execute arbitrary code via requests related to byte swapping and heap corruption within multiple functions, a different vulnerability than CVE-2007-4990...

9.3CVSS7.7AI score0.04278EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
•added 2006/10/05 11:30 a.m.•15 views

security flaw

scanf.c in PHP 5.1.4 and earlier, and 4.4.3 and earlier, allows context-dependent attackers to execute arbitrary code via a sscanf PHP function call that performs argument swapping, which increments an index past the end of an array and triggers a buffer over-read...

4.6CVSS6.4AI score0.02011EPSS
SaveExploits2References4
RedHat Linux
RedHat Linux
•added 2006/09/21 10:53 a.m.•15 views

security flaw

scanf.c in PHP 5.1.4 and earlier, and 4.4.3 and earlier, allows context-dependent attackers to execute arbitrary code via a sscanf PHP function call that performs argument swapping, which increments an index past the end of an array and triggers a buffer over-read...

4.6CVSS6.4AI score0.02011EPSS
SaveExploits2References4
UbuntuCve
UbuntuCve
•added 2006/08/08 8:04 p.m.•45 views

CVE-2006-4020

scanf.c in PHP 5.1.4 and earlier, and 4.4.3 and earlier, allows context-dependent attackers to execute arbitrary code via a sscanf PHP function call that performs argument swapping, which increments an index past the end of an array and triggers a buffer over-read...

4.6CVSS6.5AI score0.02011EPSS
SaveExploits2References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2006/08/08 12:00 a.m.•6 views

CVE-2006-4020: Undefined Security Weakness

scanf.c in PHP 5.1.4 and earlier, and 4.4.3 and earlier, allows context-dependent attackers to execute arbitrary code via a sscanf PHP function call that performs argument swapping, which increments an index past the end of an array and triggers a buffer over-read...

4.6CVSS6.7AI score0.02011EPSS
SaveExploits2References1
CVE
CVE
•added 2000/10/13 4:00 a.m.•62 views

CVE-2000-0786

GNU userv 1.0.0 and earlier are affected by an issue where improper file descriptor swapping can corrupt the USERV_GROUPS and USERV_GIDS environment variables, potentially allowing local users to bypass some access restrictions. The public documentation identifies the affected component and the c...

4.6CVSS6.7AI score0.00337EPSS
SaveExploits0References4Affected Software1
Cvelist
Cvelist
•added 2000/10/13 4:00 a.m.•34 views

CVE-2000-0786

GNU userv 1.0.0 and earlier does not properly perform file descriptor swapping, which can corrupt the USERVGROUPS and USERVGIDS environmental variables and allow local users to bypass some access restrictions...

6.3AI score0.00337EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2000/10/13 12:00 a.m.•5 views

CVE-2000-0786: Undefined Security Weakness

GNU userv 1.0.0 and earlier does not properly perform file descriptor swapping, which can corrupt the USERVGROUPS and USERVGIDS environmental variables and allow local users to bypass some access restrictions...

4.6CVSS5.8AI score0.00337EPSS
SaveExploits0References1
Rows per page
Query Builder