Lucene search
K

9558 matches found

Prion
Prion
added 2012/02/09 4:10 a.m.19 views

Code injection

Google Chrome before 17.0.963.46 does not properly perform casts of variables during handling of a column span, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted document...

6.8CVSS7.6AI score0.02292EPSS
Exploits0References9Affected Software4
RedHat Linux
RedHat Linux
added 2012/02/02 10:24 p.m.2 views

php: remote code exec flaw introduced in the CVE-2011-4885 hashdos fix

The phpregistervariableex function in phpvariables.c in PHP 5.3.9 allows remote attackers to execute arbitrary code via a request containing a large number of variables, related to improper handling of array variables. NOTE: this vulnerability exists because of an incorrect fix for CVE-2011-4885...

7.5CVSS7.8AI score0.86573EPSS
Exploits16References4
OSV
OSV
added 2012/02/02 12:0 a.m.15 views

DSA-2403-1 php5 - code injection

Bulletin has no description...

7.5CVSS6.4AI score0.25931EPSS
Exploits16
Tenable Nessus
Tenable Nessus
added 2012/01/11 12:0 a.m.63 views

PHP 5.x < 5.2.2 Multiple vulnerabilities

According to its banner, the version of PHP 5.x installed on the remote host is older than 5.2.2. It is, therefore, affected by multiple vulnerabilities: - A heap-based buffer overflow vulnerability was found in PHP's gd extension. A script that could be forced to process WBMP images from an...

7.8CVSS6.5AI score0.28052EPSS
Exploits4References6
Prion
Prion
added 2011/12/22 3:29 p.m.13 views

Crlf injection

CRLF injection vulnerability in calendar/set.php in the Calendar component in Moodle 1.9.x before 1.9.15, 2.0.x before 2.0.6, 2.1.x before 2.1.3, and 2.2 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via vectors involving the url variable...

5CVSS7.4AI score0.00483EPSS
Exploits1References2Affected Software1
Tenable Nessus
Tenable Nessus
added 2011/11/22 12:0 a.m.19 views

Asterisk SIP Channel Driver Uninitialized Variable Request Parsing DoS (AST-2011-012)

According to the version in its SIP banner, the version of Asterisk running on the remote host can be crashed remotely by an authenticated user when parsing an invalid SIP URI. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if descripti...

6.8CVSS5.4AI score0.06434EPSS
Exploits0References2
myhack58
myhack58
added 2011/11/15 12:0 a.m.19 views

DEDECMS global variable overwrite vulnerability science-vulnerability warning-the black bar safety net

DEDECMS global variable overwrite vulnerability was first wolves security team 0 9 published in the official soften up until now didn't repair the vulnerability, and now covers substantially DEDECMS full version. Personal guess is not the official deliberately left the back door. The following...

0.5AI score
Exploits0
OpenVAS
OpenVAS
added 2011/11/15 12:0 a.m.41 views

Google Chrome Multiple Vulnerabilities - November11 (Linux)

The host is installed with Google Chrome and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbgooglechromemultvulnnov11lin.nasl 7044 2017-09-01 11:50:59Z teissa $ Google Chrome Multiple Vulnerabilities - November11 Linux Authors: Rachana Shetty Copyright: Copyright c 2011...

7.5CVSS0.9AI score0.03034EPSS
Exploits2References2
OpenVAS
OpenVAS
added 2011/11/15 12:0 a.m.37 views

Google Chrome Multiple Vulnerabilities - November11 (Mac OS X)

The host is installed with Google Chrome and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbgooglechromemultvulnnov11macosx.nasl 7044 2017-09-01 11:50:59Z teissa $ Google Chrome Multiple Vulnerabilities - November11 Mac OS X Authors: Rachana Shetty Copyright: Copyright c...

7.5CVSS1.2AI score0.03034EPSS
Exploits2References2
OpenVAS
OpenVAS
added 2011/11/14 12:0 a.m.30 views

Google Chrome Multiple Vulnerabilities (Nov 2011) - Windows

Google Chrome is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS9.5AI score0.03034EPSS
Exploits2References3
NVD
NVD
added 2011/11/11 11:55 a.m.15 views

CVE-2011-3896

Buffer overflow in Google Chrome before 15.0.874.120 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to shader variable mapping...

7.5CVSS7.3AI score0.00777EPSS
Exploits0References4
Prion
Prion
added 2011/11/11 11:55 a.m.25 views

Buffer overflow

Buffer overflow in Google Chrome before 15.0.874.120 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to shader variable mapping...

7.5CVSS7.9AI score0.00777EPSS
Exploits0References4Affected Software1
UbuntuCve
UbuntuCve
added 2011/11/11 11:55 a.m.23 views

CVE-2011-3896

Buffer overflow in Google Chrome before 15.0.874.120 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to shader variable mapping...

7.5CVSS5.9AI score0.00777EPSS
Exploits0References1
Cvelist
Cvelist
added 2011/11/11 11:0 a.m.23 views

CVE-2011-3896

Buffer overflow in Google Chrome before 15.0.874.120 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to shader variable mapping...

7.1AI score0.00777EPSS
Exploits0References4
Debian CVE
Debian CVE
added 2011/11/11 11:0 a.m.28 views

CVE-2011-3896

Removed by vendor...

7.5CVSS6.7AI score0.00777EPSS
Exploits0
Tenable Nessus
Tenable Nessus
added 2011/11/11 12:0 a.m.36 views

Google Chrome < 15.0.874.120 Multiple Vulnerabilities

The version of Google Chrome installed on the remote host is earlier than 15.0.874.120. It is, therefore, potentially affected by the following vulnerabilities : - A double-free error exists in the Theora decoder. CVE-2011-3892 - Out-of-bounds read errors exist in the MVK and Vorbis media handler...

7.5CVSS7.5AI score0.03034EPSS
Exploits2References10
NVD
NVD
added 2011/11/08 11:55 a.m.30 views

CVE-2011-4415

The appregsub function in server/util.c in the Apache HTTP Server 2.0.x through 2.0.64 and 2.2.x through 2.2.21, when the modsetenvif module is enabled, does not restrict the size of values of environment variables, which allows local users to cause a denial of service memory consumption or NULL...

1.2CVSS8.6AI score0.00473EPSS
Exploits4References4
securityvulns
securityvulns
added 2011/11/06 12:0 a.m.58 views

[PT-2011-20] Authorization bypass vulnerability in OneOrZero AIMS

---------------------------------------------------------------------- PT-2011-20 Positive Technologies Security Advisory Authorization bypass vulnerability in OneOrZero AIMS ---------------------------------------------------------------------- ---Vulnerable software OneOrZero AIMS Version: 2.7....

0.2AI score
Exploits0
OSV
OSV
added 2011/11/03 3:55 p.m.1 views

DEBIAN-CVE-2011-4100

The csnStreamDissector function in epan/dissectors/packet-csn1.c in the CSN.1 dissector in Wireshark 1.6.x before 1.6.3 does not initialize a certain variable, which allows remote attackers to cause a denial of service application crash via a malformed packet...

4.3CVSS6.8AI score0.01015EPSS
Exploits0References1
Prion
Prion
added 2011/11/01 7:55 p.m.12 views

Sql injection

SQL injection vulnerability in lib/oozaccess.php in OneOrZero Action & Information Management System AIMS 2.7.0 allows remote attackers to execute arbitrary SQL commands via the cookieName variable...

7.5CVSS9AI score0.01374EPSS
Exploits0References3Affected Software1
Rows per page
Query Builder