398 matches found
Silicon Graphics LibTiff rgb2ycbcr Tool Denial of Service Vulnerability
Silicon Graphics LibTiff is a library for reading and writing TIFF Tagged Image File Format files from the U.S. company Silicon Graphics. The library contains a number of command-line tools to deal with TIFF files. A denial of service vulnerability exists in the 'cvtClump' function in the rgb2ycb...
PT-2014-2050 · Adobe · Reader +1
Name of the Vulnerable Software and Affected Versions: Adobe Reader and Acrobat versions 10.x through 10.1.8 Adobe Reader and Acrobat versions 11.x through 11.0.05 Description: The issue is related to resource management errors in Adobe Acrobat and Adobe Reader. It allows a remote attacker to cau...
UBUNTU-CVE-2011-1797
WebKit, as used in Apple Safari before 5.0.6, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2011-07-20-1...
CVE-2010-5062
creationtimestamp| type| source ---|---|--- 2010-03-09 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/11671...
CVE-2008-5706
creationtimestamp| type| source ---|---|--- 2008-11-21 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/7183...
UBUNTU-CVE-2008-5146
add-accession-numbers in ctn 3.0.6 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/accession temporary file...
CVE-2008-6206
creationtimestamp| type| source ---|---|--- 2008-04-04 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/31611 2008-04-04 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/31610...
PYSEC-2008-14
Multiple cross-site request forgery CSRF vulnerabilities in Plone CMS 3.0.5 and 3.0.6 allow remote attackers to 1 add arbitrary accounts via the joinform page and 2 change the privileges of arbitrary groups via the prefsgroupsoverview page...
Insufficient boundary check in ImageMagick's SGIDecode()
Multiple buffer overflows in Imagemagick 6.0 before 6.0.6.2, and 6.2 before 6.2.4.5, has unknown impact and user-assisted attack vectors via a crafted SGI image...
PT-2004-1622 · Sco · Openserver +2
Name of the Vulnerable Software and Affected Versions: OpenServer versions 5.0.6 through 5.0.7 Description: The issue is related to multiple buffer overflows in MMDF, which may allow attackers to execute arbitrary code. This can be demonstrated via the execmail program. Recommendations: For...
PT-2004-2864 · Openbb · Openbb
Name of the Vulnerable Software and Affected Versions: OpenBB versions 1.0.6 and earlier Description: The issue allows remote attackers to execute arbitrary code by including the code in an image tag or a link, due to cross-site request forgery CSRF vulnerabilities in several files, including cp...
OpenBB < 1.0.6 - Multiple Vulnerabilities
OpenBB Multiple Vulnerabilities Vendor: OpenBB Group Product: OpenBB Version: getrow; $ftype = $querytype-field'type'; As we can see from this code, the $FID variable seems to get pas...
CVE-2002-0638
setpwnam.c in the util-linux package, as included in Red Hat Linux 7.3 and earlier, and other operating systems, does not properly lock a temporary file when modifying /etc/passwd, which may allow local users to gain privileges via a complex race condition that uses an open file descriptor in...
CVE-2002-0096
The installation of Geeklog 1.3 creates an extra groupassignments record which is not properly deleted, which causes the first newly created user to be added to the GroupAdmin and UserAdmin groups, which could provide that user with administrative privileges that were not intended...
CVE-2023-5069
CVE-2023-5069 is rejected/not used; not an active vulnerability entry.
