1335 matches found
CVE-2006-0635
Tiny C Compiler TCC 0.9.23 aka TinyCC evaluates the "isizeofint" expression to false when i equals -1, which might introduce integer overflow vulnerabilities into applications that could be exploited by context-dependent attackers...
CVE-2006-0635
CVE-2006-0635 concerns Tiny C Compiler (TinyCC) version 0.9.23. The vulnerability occurs when evaluating the expression i>sizeof(int); the value is false if i equals -1, which could introduce integer overflow vulnerabilities into applications that could be exploited by context-dependent attack...
CVE-2006-0635
Tiny C Compiler TCC 0.9.23 aka TinyCC evaluates the "isizeofint" expression to false when i equals -1, which might introduce integer overflow vulnerabilities into applications that could be exploited by context-dependent attackers...
CVE-2006-0635
Tiny C Compiler TCC 0.9.23 aka TinyCC evaluates the "isizeofint" expression to false when i equals -1, which might introduce integer overflow vulnerabilities into applications that could be exploited by context-dependent attackers...
CVE-2006-0645: Undefined Security Weakness
Tiny ASN.1 Library libtasn1 before 0.2.18, as used by 1 GnuTLS 1.2.x before 1.2.10 and 1.3.x before 1.3.4, and 2 GNU Shishi, allows attackers to crash the DER decoder and possibly execute arbitrary code via "out-of-bounds access" caused by invalid input, as demonstrated by the ProtoVer SSL test...
CVE-2006-0635: Undefined Security Weakness
Tiny C Compiler TCC 0.9.23 aka TinyCC evaluates the "isizeofint" expression to false when i equals -1, which might introduce integer overflow vulnerabilities into applications that could be exploited by context-dependent attackers...
CVE-2001-1549
Tiny Personal Firewall 1.0 and 2.0 allows local users to bypass filtering via non-standard TCP packets created with non-Windows protocol adapters...
CVE-2001-1549
The CVE-2001-1549 entry affects Tiny Personal Firewall versions 1.0 and 2.0. The vulnerability permits local users to bypass filtering by sending non-standard TCP packets created with non-Windows protocol adapters, indicating a local-privilege or local-bypass risk depending on the deployment. The...
CVE-2001-1549: Undefined Security Weakness
Tiny Personal Firewall 1.0 and 2.0 allows local users to bypass filtering via non-standard TCP packets created with non-Windows protocol adapters...
CVE-2002-1925
CVE-2002-1925 affects Tiny Personal Firewall versions 3.0 through 3.0.6. The vulnerability arises when an administrator views the Log tab in the Personal Firewall Agent module, enabling remote attackers to cause a denial of service (crash) by sending SYN, UDP, ICMP, or TCP port scans. The availab...
CVE-2002-1925: Undefined Security Weakness
Tiny Personal Firewall 3.0 through 3.0.6 allows remote attackers to cause a denial of service crash by via SYN, UDP, ICMP and TCP portscans when the administrator selects the Log tab of the Personal Firewall Agent module...
CVE-2004-2116
CVE-2004-2116: Directory traversal in Tiny Server 1.1 allows read/download of arbitrary files via .. in the URL. Affected product: Tiny Server 1.1. Root cause described as a path traversal flaw in URL handling. Exploitation status is not provided in the documents; no remediation details are given.
CVE-2004-2119
The CVE-2004-2119 entry documents a Cross-site scripting (XSS) vulnerability in Tiny Server 1.1, where an attacker can inject arbitrary web script or HTML via the URL. The vulnerability affects Tiny Server 1.1’s URL handling and has a base severity of MEDIUM (CVSS v2: 4.3) with network attack vec...
CVE-2004-2116
Directory traversal vulnerability in Tiny Server 1.1 allows remote attackers to read or download arbitrary files via a .. dot dot in the URL...
CVE-2004-2119
Cross-site scripting XSS vulnerability in Tiny Server 1.1 allows remote attackers to inject arbitrary web script or HTML via the URL...
CVE-2004-2118
Tiny Server 1.1 allows remote attackers to cause a denial of service crash via a GET request with a long filename, possibly due to a buffer overflow...
CVE-2004-2117
CVE-2004-2117 : The Tiny Server 1.1 product is affected. It allows remote attackers to cause a denial of service (crash) by sending malformed HTTP requests, such as a GET request without an HTTP version (HTTP/1.1) or a request lacking both GET and the HTTP version. The provided documents do not i...
CVE-2004-2118
CVE-2004-2118 affects Tiny Server 1.1. The vulnerability allows remote attackers to cause a denial of service (crash) by sending a GET request with a long filename, possibly due to a buffer overflow. The provided documents do not include a confirmed patch or fix version. No exploitation details o...
CVE-2004-2117
Tiny Server 1.1 allows remote attackers to cause a denial of service crash via malformed HTTP requests such as 1 a GET request without the HTTP version HTTP/1.1, or 2 a request without GET or the HTTP version...
CVE-2004-2116: Undefined Security Weakness
Directory traversal vulnerability in Tiny Server 1.1 allows remote attackers to read or download arbitrary files via a .. dot dot in the URL...