Lucene search
+L

4285 matches found

securityvulns
securityvulns
added 2013/07/01 12:0 a.m.40 views

libcurl uninitialized memory reference

Uninitialized memory access in curleasyunescape...

6.8CVSS3.2AI score0.11118EPSS
Exploits2References1Affected Software1
Mozilla
Mozilla
added 2013/05/14 12:0 a.m.44 views

Uninitialized functions in DOMSVGZoomEvent — Mozilla

Mozilla community member Ms2ger discovered that some DOMSVGZoomEvent functions are used without being properly initialized, causing uninitialized memory to be used when they are called by web content. This could lead to a information leakage to sites depending on the contents of this uninitialize...

6.5CVSS2.1AI score0.06696EPSS
Exploits1References2Affected Software4
NVD
NVD
added 2013/05/04 3:24 a.m.30 views

CVE-2013-1232

The HTTP implementation in Cisco WebEx Node for MCS, WebEx Meetings Server, and WebEx Node for ASR 1000 Series allows remote attackers to read the contents of uninitialized memory locations via a crafted request, aka Bug IDs CSCue36672, CSCue31363, CSCuf17466, and CSCug61252...

5CVSS6.5AI score0.01186EPSS
Exploits1References1
Prion
Prion
added 2013/05/04 3:24 a.m.16 views

Design/Logic Flaw

The HTTP implementation in Cisco WebEx Node for MCS, WebEx Meetings Server, and WebEx Node for ASR 1000 Series allows remote attackers to read the contents of uninitialized memory locations via a crafted request, aka Bug IDs CSCue36672, CSCue31363, CSCuf17466, and CSCug61252...

5CVSS7AI score0.01186EPSS
Exploits1References1
Cvelist
Cvelist
added 2013/05/04 1:0 a.m.29 views

CVE-2013-1232

The HTTP implementation in Cisco WebEx Node for MCS, WebEx Meetings Server, and WebEx Node for ASR 1000 Series allows remote attackers to read the contents of uninitialized memory locations via a crafted request, aka Bug IDs CSCue36672, CSCue31363, CSCuf17466, and CSCug61252...

6.5AI score0.01186EPSS
Exploits1References1
Tenable Nessus
Tenable Nessus
added 2013/04/20 12:0 a.m.34 views

Mandriva Linux Security Advisory : poppler (MDVSA-2013:143)

Multiple vulnerabilities has been found and corrected in poppler : poppler before 0.22.1 allows context-dependent attackers to cause a denial of service crash and possibly execute arbitrary code via vectors that trigger an invalid memory access in 1 splash/Splash.cc, 2 poppler/Function.cc, and 3...

6.8CVSS7.8AI score0.03866EPSS
Exploits2References2
NVD
NVD
added 2013/04/09 8:55 p.m.15 views

CVE-2013-1790

poppler/Stream.cc in poppler before 0.22.1 allows context-dependent attackers to have an unspecified impact via vectors that trigger a read of uninitialized memory by the CCITTFaxStream::lookChar function...

6.8CVSS7.4AI score0.02578EPSS
Exploits1References11
OSV
OSV
added 2013/04/09 8:55 p.m.8 views

CVE-2013-1790

poppler/Stream.cc in poppler before 0.22.1 allows context-dependent attackers to have an unspecified impact via vectors that trigger a read of uninitialized memory by the CCITTFaxStream::lookChar function...

6.1AI score
Exploits0References12
OSV
OSV
added 2013/04/09 8:55 p.m.3 views

DEBIAN-CVE-2013-1790

poppler/Stream.cc in poppler before 0.22.1 allows context-dependent attackers to have an unspecified impact via vectors that trigger a read of uninitialized memory by the CCITTFaxStream::lookChar function...

6.8CVSS7.4AI score0.02578EPSS
Exploits1References1
CVE
CVE
added 2013/04/09 8:0 p.m.86 views

CVE-2013-1790

CVE-2013-1790 affects poppler’s CCITTFaxStream implementation: poppler/Stream.cc before 0.22.1 may read uninitialized memory via CCITTFaxStream::lookChar, leading to an unspecified impact. The vulnerability is tied to reading uninitialized memory and is documented with a CVSS base of 6.8 (MEDIUM)...

6.8CVSS7.2AI score0.02578EPSS
Exploits1References11Affected Software1
Debian CVE
Debian CVE
added 2013/04/09 8:0 p.m.69 views

CVE-2013-1790

poppler/Stream.cc in poppler before 0.22.1 allows context-dependent attackers to have an unspecified impact via vectors that trigger a read of uninitialized memory by the CCITTFaxStream::lookChar function...

6.8CVSS7.2AI score0.02578EPSS
Exploits1
OSV
OSV
added 2013/03/15 8:55 p.m.4 views

DEBIAN-CVE-2012-6549

The isofsexportencodefh function in fs/isofs/export.c in the Linux kernel before 3.6 does not initialize a certain structure member, which allows local users to obtain sensitive information from kernel heap memory via a crafted application...

1.9CVSS5.9AI score0.00394EPSS
Exploits0References1
UbuntuCve
UbuntuCve
added 2013/02/28 12:0 a.m.22 views

CVE-2013-1790

poppler/Stream.cc in poppler before 0.22.1 allows context-dependent attackers to have an unspecified impact via vectors that trigger a read of uninitialized memory by the CCITTFaxStream::lookChar function...

6.8CVSS7.1AI score0.02578EPSS
Exploits1References3
RedHat Linux
RedHat Linux
added 2012/10/17 4:5 p.m.4 views

OpenJDK: uninitialized Array JVM memory disclosure (Hotspot, 7198606)

Unspecified vulnerability in the Java Runtime Environment JRE component in Oracle Java SE 7 Update 7 and earlier, and 6 Update 35 and earlier, allows remote attackers to affect confidentiality and integrity via unknown vectors related to Hotspot...

6.4CVSS7.4AI score0.03388EPSS
Exploits1References5
OSV
OSV
added 2012/10/03 11:2 a.m.2 views

DEBIAN-CVE-2012-3430

The rdsrecvmsg function in net/rds/recv.c in the Linux kernel before 3.0.44 does not initialize a certain structure member, which allows local users to obtain potentially sensitive information from kernel stack memory via a 1 recvfrom or 2 recvmsg system call on an RDS socket...

2.1CVSS5.7AI score0.00952EPSS
Exploits2References1
CVE
CVE
added 2012/09/20 9:0 p.m.53 views

CVE-2012-3729

CVE-2012-3729 is a kernel vulnerability in Apple iOS (pre-6) related to the Berkeley Packet Filter (BPF) interpreter. The issue is an uninitialized memory access in the kernel’s BPF path, which could allow a local attacker to read kernel memory layout information via a crafted BPF program. The vu...

1.9CVSS4.5AI score0.00292EPSS
Exploits0References4Affected Software1
OpenVAS
OpenVAS
added 2012/09/11 12:0 a.m.24 views

Slackware Advisory SSA:2009-170-01 libpng

The remote host is missing an update as announced via advisory SSA:2009-170-01. OpenVAS Vulnerability Test $Id: esoftslkssa200917001.nasl 6598 2017-07-07 09:36:44Z cfischer $ Description: Auto-generated from the corresponding slackware advisory Authors: Thomas Reinke Copyright: Copyright c 2012...

4.3CVSS0.2AI score0.02278EPSS
Exploits0
OpenVAS
OpenVAS
added 2012/09/10 12:0 a.m.28 views

Slackware: Security Advisory (SSA:2008-333-01)

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.5CVSS6.5AI score0.04331EPSS
Exploits1References2
0day.today
0day.today
added 2012/08/31 12:0 a.m.21 views

Internet Explorer MSXML Uninitialized Memory (MS12-043)

Exploit for windows platform in category remote exploits Title : Internet Explorer MSXML Uninitialized Memory MS12-043 Date : 2012-09-01 Auther : Senator of Pirates E-Mail : email protected FaceBook : /SenatorofPirates : /SenatorofPiratesInfo Greetz : i greet to my best friends and every Moroccan...

7.1AI score
Exploits0
Tenable Nessus
Tenable Nessus
added 2012/08/01 12:0 a.m.48 views

Scientific Linux Security Update : php on SL4.x, SL5.x, SL6.x i386/x86_64 (20120202)

PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. It was discovered that the fix for CVE-2011-4885 released via previous php packages introduced an uninitialized memory use flaw. A remote attacker could send a specially crafted HTTP request to cause the PHP...

7.5CVSS8.4AI score0.83911EPSS
Exploits16References2
Rows per page
Query Builder