495 matches found
Vulnerabilities of the CentOS operating system that allow malicious actors to compromise the confidentiality, integrity, and accessibility of protected information
Multiple vulnerabilities exist in the glibc-2.3.4 package of the CentOS operating system. Exploitation of these vulnerabilities may lead to breaches of confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited locally...
PT-2014-5352 · Ovirt · Ovirt
Name of the Vulnerable Software and Affected Versions: oVirt versions 3.4 Description: The issue is related to an XML External Entity XXE problem in the REST API of the ovirt-engine in oVirt. This allows remote authenticated users to read arbitrary files and potentially have other impacts via...
PT-2013-3541 · Python +1 · Python-Backports-Ssl Match Hostname +2
Name of the Vulnerable Software and Affected Versions: Python versions prior to 3.4 python-backports-ssl match hostname affected versions not specified Description: The issue allows remote attackers to cause a denial of service, specifically CPU consumption, by exploiting the ssl.match hostname...
DEBIAN-CVE-2012-4398
The requestmodule function in kernel/kmod.c in the Linux kernel before 3.4 does not set a certain killable attribute, which allows local users to cause a denial of service memory consumption via a crafted application...
kernel: ext4: AIO vs fallocate stale data exposure
Race condition in fs/ext4/extents.c in the Linux kernel before 3.4.16 allows local users to obtain sensitive information from a deleted file by reading an extent that was not properly marked as uninitialized...
PT-2011-1487 · Linux +1 · Linux Kernel +1
Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 2.6.34 Description: The issue is related to the socket implementation in the Linux kernel, which does not properly manage a backlog of received packets. This allows remote attackers to cause a denial of service ...
PT-2010-1171 · Php +1 · Php +1
Name of the Vulnerable Software and Affected Versions: PHP versions prior to 5.3.4 Description: The issue arises from the utf8 decode function not properly handling non-shortest form UTF-8 encoding and ill-formed subsequences in UTF-8 data. This makes it easier for remote attackers to bypass...
PT-2008-5344 · Microsoft · Xml Core Services
Name of the Vulnerable Software and Affected Versions: Microsoft XML Core Services versions 3.0 through 4.0 Description: The issue allows remote attackers to obtain sensitive information from another domain via a crafted XML document, related to improper error checks for external DTDs...
CVE-2006-6309
Multiple array index errors in IBM Tivoli Storage Manager TSM before 5.2.9 and 5.3.x before 5.3.4 allow remote attackers to read arbitrary memory locations and cause a denial of service crash via a large index value in unspecified messages, a different issue than CVE-2006-5855...
CVE-2001-0134
Buffer overflow in cpqlogin.htm in web-enabled agents for various Compaq management software products such as Insight Manager and Management Agents allows remote attackers to execute arbitrary commands via a long user name...
CVE-2025-34353
CVE-2025-34353 is rejected/not used and does not represent an active vulnerability entry.