Lucene search
+L

1446 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2006/10/18 12:00 a.m.•7 views

CVE-2006-5379: Undefined Security Weakness

The accelerated rendering functionality of NVIDIA Binary Graphics Driver binary blob driver For Linux v8774 and v8762, and probably on other operating systems, allows local and remote attackers to execute arbitrary code via a large width value in a font glyph, which can be used to overwrite...

7.5CVSS6.5AI score0.27375EPSS
SaveExploits2References1
securityvulns
securityvulns
•added 2006/06/27 12:00 a.m.•51 views

Winged Gallery v1.0

Winged Gallery v1.0 Homepage: http://winged.info/index.php?p=gallery XSS vuln on thumb.php: http://example.com/gallery/thumb.php?image=data/Example+Folder/firefox+icon.jpg"''"""SCRIPT20SRC=http://youfucktard.com/xss.js/SCRIPT"''''&size=75&type=2&w=128&h=128"''"""...

0.1AI score
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2006/02/15 12:00 a.m.•12 views

CVE-2005-4720: Undefined Security Weakness

Mozilla Firefox 1.0.7 and earlier on Linux allows remote attackers to cause a denial of service client crash via an IFRAME element with a large value of the WIDTH attribute, which triggers a problem related to representation of floating-point numbers, leading to an infinite loop of widget resizes...

5CVSS5.9AI score0.0841EPSS
SaveExploits2References1
Cvelist
Cvelist
•added 2006/01/11 6:00 p.m.•46 views

CVE-2005-3710

Integer overflow in Apple Quicktime before 7.0.4 allows remote attackers to execute arbitrary code via a TIFF image file with modified image height and width ImageWidth tags...

7.5AI score0.07339EPSS
SaveExploits0References12
RedHat Linux
RedHat Linux
•added 2005/10/06 7:46 p.m.•17 views

security flaw

Firefox before 1.0.7 and Mozilla Suite before 1.7.12 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via Unicode sequences with "zero-width non-joiner" characters...

7.5CVSS6.2AI score0.03616EPSS
SaveExploits0References4
UbuntuCve
UbuntuCve
•added 2005/09/23 7:03 p.m.•34 views

CVE-2005-2702

Firefox before 1.0.7 and Mozilla Suite before 1.7.12 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via Unicode sequences with "zero-width non-joiner" characters...

7.5CVSS6AI score0.03616EPSS
SaveExploits0References2
NVD
NVD
•added 2005/09/23 7:03 p.m.•27 views

CVE-2005-2702

Firefox before 1.0.7 and Mozilla Suite before 1.7.12 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via Unicode sequences with "zero-width non-joiner" characters...

7.5CVSS7.4AI score0.03616EPSS
SaveExploits0References31
Cvelist
Cvelist
•added 2005/09/23 4:00 a.m.•44 views

CVE-2005-2702

Firefox before 1.0.7 and Mozilla Suite before 1.7.12 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via Unicode sequences with "zero-width non-joiner" characters...

7.4AI score0.03616EPSS
SaveExploits0References31
CVE
CVE
•added 2005/09/23 4:00 a.m.•124 views

CVE-2005-2702

CVE-2005-2702 affects Mozilla/Firefox: vulnerable when processing Unicode sequences, specifically zero-width non-joiner characters. Firefox prior to 1.0.7 and Mozilla Suite prior to 1.7.12 are at risk. Reported impact: remote attacker could cause a crash and, in some scenarios, may execute arbitr...

7.5CVSS7.4AI score0.03616EPSS
SaveExploits0References31Affected Software2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2005/09/23 12:00 a.m.•5 views

CVE-2005-2702: Undefined Security Weakness

Firefox before 1.0.7 and Mozilla Suite before 1.7.12 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via Unicode sequences with "zero-width non-joiner" characters...

7.5CVSS6.3AI score0.03616EPSS
SaveExploits0References1
RedHat Linux
RedHat Linux
•added 2005/09/22 8:36 p.m.•16 views

security flaw

Firefox before 1.0.7 and Mozilla Suite before 1.7.12 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via Unicode sequences with "zero-width non-joiner" characters...

7.5CVSS6.2AI score0.03616EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
•added 2005/09/22 8:16 p.m.•15 views

security flaw

Firefox before 1.0.7 and Mozilla Suite before 1.7.12 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via Unicode sequences with "zero-width non-joiner" characters...

7.5CVSS6.2AI score0.03616EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2005/07/10 4:00 a.m.•38 views

CVE-2004-2179

asycpict.dll, as used in Microsoft products such as Front Page 97 and 98, allows remote attackers to cause a denial of service hang via a JPEG image with maximum height and width values...

6.5AI score0.12034EPSS
SaveExploits1References3
Cvelist
Cvelist
•added 2005/04/16 4:00 a.m.•31 views

CVE-2005-1142

Heap-based buffer overflow in the readpgm function in pnm.c for GOCR 0.40, when it is not using netpbm, allows remote attackers to execute arbitrary code via a P3 format PNM file with more data than implied by its width and height values...

8.1AI score0.03145EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2005/04/13 12:00 a.m.•8 views

CVE-2005-0562: Undefined Security Weakness

GIF file validation error in MSN Messenger 6.2 allows remote attackers in a user's contact list to execute arbitrary code via a GIF image with an improper height and width...

7.5CVSS6.5AI score0.23171EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2005/02/08 12:00 a.m.•9 views

CVE-2004-1244: Undefined Security Weakness

Windows Media Player 9 allows remote attackers to execute arbitrary code via a PNG file containing large 1 width or 2 height values, aka the "PNG Processing Vulnerability."...

7.5CVSS6.5AI score0.33199EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2005/02/06 12:00 a.m.•6 views

CVE-2005-0215: Undefined Security Weakness

Mozilla 1.6 and possibly other versions allows remote attackers to cause a denial of service application crash via a XBM X BitMap file with a large 1 height or 2 width value...

5CVSS5.8AI score0.01106EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2004/09/01 12:00 a.m.•11 views

CVE-2002-1277: Undefined Security Weakness

Buffer overflow in Window Maker wmaker 0.80.0 and earlier may allow remote attackers to execute arbitrary code via a certain image file that is not properly handled when Window Maker uses width and height information to allocate a buffer...

7.5CVSS6.5AI score0.04637EPSS
SaveExploits0References1
exploitpack
exploitpack
•added 2003/10/22 12:00 a.m.•28 views

Coreutils 4.5.x - LS Width Argument Integer Overflow

Coreutils 4.5.x - LS Width Argument Integer Overflow source: https://www.securityfocus.com/bid/8875/info Coreutils 'ls' has been reported prone to an integer overflow vulnerability. The issue reportedly presents itself when handling width and column display command line arguments. It has been...

0.1AI score
SaveExploits0
osv_debian
osv_debian
•added 2002/11/12 5:00 a.m.•22 views

DEBIAN-CVE-2002-1277

Buffer overflow in Window Maker wmaker 0.80.0 and earlier may allow remote attackers to execute arbitrary code via a certain image file that is not properly handled when Window Maker uses width and height information to allocate a buffer...

7.5CVSS8AI score0.04637EPSS
SaveExploits0References1
Rows per page
Query Builder