Lucene search
K

11 matches found

Tenable Nessus
Tenable Nessus
added 2021/02/22 12:0 a.m.33 views

EulerOS 2.0 SP2 : libksba (EulerOS-SA-2021-1317)

According to the versions of the libksba package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - The appendutf8value function in the DN decoder dn.c in Libksba before 1.3.3 allows remote attackers to cause a denial of service out-of-bounds...

7.5CVSS7.4AI score0.01327EPSS
Exploits0References4
Debian CVE
Debian CVE
added 2016/06/13 7:0 p.m.27 views

CVE-2016-4574

Off-by-one error in the appendutf8value function in the DN decoder dn.c in Libksba before 1.3.4 allows remote attackers to cause a denial of service out-of-bounds read via invalid utf-8 encoded data. NOTE: this vulnerability exists because of an incomplete fix for CVE-2016-4356...

7.5CVSS7.6AI score0.0109EPSS
Exploits0
Prion
Prion
added 2016/04/07 9:59 p.m.21 views

Design/Logic Flaw

The HTTP header parsing code in Node.js 0.10.x before 0.10.42, 0.11.6 through 0.11.16, 0.12.x before 0.12.10, 4.x before 4.3.0, and 5.x before 5.6.0 allows remote attackers to bypass an HTTP response-splitting protection mechanism via UTF-8 encoded Unicode characters in the HTTP header, as...

4.3CVSS7.2AI score0.01835EPSS
Exploits0References8Affected Software2
Cvelist
Cvelist
added 2016/04/07 9:0 p.m.34 views

CVE-2016-2216

The HTTP header parsing code in Node.js 0.10.x before 0.10.42, 0.11.6 through 0.11.16, 0.12.x before 0.12.10, 4.x before 4.3.0, and 5.x before 5.6.0 allows remote attackers to bypass an HTTP response-splitting protection mechanism via UTF-8 encoded Unicode characters in the HTTP header, as...

7.6AI score0.01835EPSS
Exploits0References8
Tenable Nessus
Tenable Nessus
added 2013/01/25 12:0 a.m.21 views

SuSE 11.1 Security Update : finch, libpurple and pidgin (SAT Patch Number 6294)

Various remote triggerable crashes in pidgin have been fixed : - In some situations the MSN server sends text that isn't UTF-8 encoded, and Pidgin fails to verify the text's encoding. In some cases this can lead to a crash when attempting to display the text . CVE-2012-1178 - Incoming messages wi...

5CVSS5.4AI score0.01136EPSS
Exploits2References9
OpenVAS
OpenVAS
added 2012/03/19 12:0 a.m.25 views

Pidgin Multiple Denial of Service Vulnerabilities - Windows

Pidgin is prone to multiple denial of service vulnerabilities. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.4CVSS6.3AI score0.01136EPSS
Exploits1References7
OpenVAS
OpenVAS
added 2012/03/19 12:0 a.m.25 views

Pidgin Multiple Denial of Service Vulnerabilities (Windows)

This host is installed with Pidgin and is prone to multiple denial of service vulnerabilities. OpenVAS Vulnerability Test $Id: gbpidginmultdosvulnwin.nasl 5940 2017-04-12 09:02:05Z teissa $ Pidgin Multiple Denial of Service Vulnerabilities Windows Authors: Madhuri D Copyright: Copyright c 2012...

6.4CVSS6.3AI score0.01136EPSS
Exploits1References5
RedHat Linux
RedHat Linux
added 2008/09/22 1:32 p.m.50 views

Important: Red Hat Security Advisory: jbossweb security update

An updated jbossweb package that fixes various security issues is now available for JBoss Enterprise Application Platform JBoss EAP 4.2 and 4.3. This update has been rated as having important security impact by the Red Hat Security Response Team. JBoss Web Server jbossweb is an enterprise ready w...

5CVSS6.7AI score0.92704EPSS
Exploits25References3
NVD
NVD
added 2006/07/28 11:4 p.m.13 views

CVE-2006-3921

Sun Java System Application Server SJSAS 7 through 8.1 and Web Server SJSWS 6.0 and 6.1 allows remote authenticated users to read files outside of the "document root directory" via a direct request using a UTF-8 encoded URI...

4CVSS6.1AI score0.00976EPSS
Exploits0References9
Cvelist
Cvelist
added 2006/06/13 7:0 p.m.23 views

CVE-2006-2382

Heap-based buffer overflow in Microsoft Internet Explorer 5.01 SP4 and 6 SP1 and earlier allows remote attackers to execute arbitrary code via crafted UTF-8 encoded HTML that results in size discrepancies during conversion to Unicode, aka "HTML Decoding Memory Corruption Vulnerability."...

7.8AI score0.65921EPSS
Exploits0References17
UbuntuCve
UbuntuCve
added 2006/01/20 9:3 p.m.24 views

CVE-2006-0019

Heap-based buffer overflow in the encodeURI and decodeURI functions in the kjs JavaScript interpreter engine in KDE 3.2.0 through 3.5.0 allows remote attackers to execute arbitrary code via a crafted, UTF-8 encoded URI...

7.5CVSS6.5AI score0.06387EPSS
Exploits0References2
Rows per page
Query Builder