5342 matches found
DEBIAN-CVE-2013-1578
The dissectpwethheuristic function in epan/dissectors/packet-pw-eth.c in Wireshark 1.6.x before 1.6.13 and 1.8.x before 1.8.5 does not properly handle apparent Ethernet address values at the beginning of MPLS data, which allows remote attackers to cause a denial of service loop via a malformed...
CVE-2012-2997
creationtimestamp| type| source ---|---|--- 2013-01-21 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/38233...
Mozilla: Miscellaneous memory safety hazards (rv:10.0.8) (MFSA 2012-74)
Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey before 2.13 allow remote attackers to cause a denial of service memory corruption and application...
Mozilla: Use-after-free, buffer overflow, and out of bounds read issues found using Address Sanitizer (MFSA 2012-85)
Use-after-free vulnerability in the nsHTMLCSSUtils::CreateCSSPropertyTxn function in Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey before 2.13 allows remote attackers to execute arbitrary code or cause a...
php: incomplete CVE-2012-1823 fix - missing filtering of -T and -h
sapi/cgi/cgimain.c in PHP before 5.3.13 and 5.4.x before 5.4.3, when configured as a CGI script aka php-cgi, does not properly handle query strings that lack an = equals sign character, which allows remote attackers to cause a denial of service resource consumption by placing command-line options...
Mozilla: Miscellaneous memory safety hazards (rv:13.0/ rv:10.0.5) (MFSA 2012-34)
Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 13.0, Thunderbird before 13.0, and SeaMonkey before 2.10 allow remote attackers to cause a denial of service memory corruption and application crash or possibly execute arbitrary code via vectors related to 1...
PT-2011-3915
Name of the Vulnerable Software and Affected Versions Zope versions 2.12.x through 2.12.18 Zope versions 2.13.x through 2.13.7 PloneHotfix20110720 for Plone 3.x Description The issue allows attackers to gain privileges via unspecified vectors, related to a highly serious vulnerability. This...
PT-2010-4084 · Php +1 · Php +1
Name of the Vulnerable Software and Affected Versions: PHP versions 5.2.0 through 5.2.13 PHP versions 5.3.0 through 5.3.2 Description: The issue allows remote attackers to obtain sensitive information by causing the application to exceed limits for memory, execution time, or recursion, due to the...
OpenJDK JDK13Services grants unnecessary privileges (6777448)
JDK13Services.getProviders in Sun Java SE 5.0 before Update 20 and 6 before Update 15, and OpenJDK, grants full privileges to instances of unspecified object types, which allows context-dependent attackers to bypass intended access restrictions via an untrusted 1 applet or 2 application...
PT-2009-4155 · Sun +1 · Sun Java Runtime Environment +1
Name of the Vulnerable Software and Affected Versions: Sun Java SE Runtime Environment aka JRE 6 Update 13 Description: The issue is related to multiple buffer overflows in the Deployment Toolkit ActiveX control. These overflows can be triggered by a long string argument to certain methods,...
Untrusted applet and application privilege escalation (CVE-2008-1186)
Unspecified vulnerability in the Virtual Machine for Sun Java Runtime Environment JRE and JDK 5.0 Update 13 and earlier, and SDK/JRE 1.4.216 and earlier, allows remote attackers to gain privileges via an untrusted application or applet, a different issue than CVE-2008-1185, aka "the second issue....
CVE-2007-6679
Unspecified vulnerability in the Administrative Console in IBM WebSphere Application Server 6.1 before Fix Pack 13 has unknown impact and attack vectors, related to "security concerns with monitor role users." NOTE: it was later reported that 6.0.2 before Fix Pack 25 is also affected...
Update Rollup 13 for Exchange Server 2010 Service Pack 3 (KB3141339)
Update Rollup 13 for Exchange Server 2010 Service Pack 3 KB3141339...
PowerShell LTS v7.4.13 (x64)
PowerShell LTS v7.4.13 x64...
SQL Server 2022 RTM Cumulative Update (CU) 13 KB5036432
SQL Server 2022 RTM Cumulative Update CU 13 KB5036432...
SQL Server 2014 Service Pack 1 Cumulative Update (CU) 13 KB4019099
SQL Server 2014 Service Pack 1 Cumulative Update CU 13 KB4019099...
2025-02 .NET 8.0.13 Update for x64 Client (KB5052978)
2025-02 .NET 8.0.13 Update for x64 Client KB5052978...
Microsoft SQL Server 2012 SP2 Cumulative Update (CU) 13 KB3165266
Microsoft SQL Server 2012 SP2 Cumulative Update CU 13 KB3165266...
PT-2014-9107 · Linux +2 · Linux Kernel +2
Name of the Vulnerable Software and Affected Versions: openSUSE kernel versions prior to 3.13.6 Description: The issue is related to multiple vulnerabilities in the openSUSE operating system, specifically in various kernel packages. These vulnerabilities can lead to a violation of confidentiality...
