225 matches found
CVE-2014-2580: Undefined Security Weakness
The netback driver in Xen, when using certain Linux versions that do not allow sleeping in softirq context, allows local guest administrators to cause a denial of service "scheduling while atomic" error and host crash via a malformed packet, which causes a mutex to be taken when trying to disable...
Adobe Flash Player 11.3 Font Parsing Code Execution
This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3 "Adobe Flash Player 11.3 Font Parsing...
Apple Safari多个拒绝服务及欺骗漏洞
BUGTRAQ ID: 28891 Safari是苹果家族操作系统默认所捆绑的WEB浏览器。 Safari在处理畸形恶意的JavaScript时存在漏洞,用户访问包含有恶意代码的网页时会导致浏览器崩溃。 在通过document.write写入到同一页面时,无限的while循环可能导致Safari出现以下错误崩溃: Access violation when writing to 0FDFFFEE 如果使用safari打开了file://类链接的话,浏览器可能出现以下错误崩溃: Access violation when reading 00000004...
CVE-2006-6846: Undefined Security Weakness
Multiple SQL injection vulnerabilities in While You Were Out WYWO InOut Board 1.0 allow remote attackers to execute arbitrary SQL commands via 1 the num parameter in a phonemessage.asp, 2 the catcode parameter in b faqDsp.asp, and the 3 Username and 4 Password fields in c login.asp...
CVE-2001-0435: Undefined Security Weakness
The split key mechanism used by PGP 7.0 allows a key share holder to obtain access to the entire key by setting the "Cache passphrase while logged on" option and capturing the passphrases of other share holders as they authenticate...