648 matches found
UBUNTU-CVE-2014-1268
WebKit, as used in Apple Safari before 6.1.2 and 7.x before 7.0.2, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than CVE-2014-1269 and CVE-2014-1270...
dhcp: NULL pointer dereference crash via crafted DHCPv6 packet
ISC DHCP server 4.0 before 4.0.2, 4.1 before 4.1.2, and 4.2 before 4.2.0-P1 allows remote attackers to cause a denial of service NULL pointer dereference and crash via a DHCPv6 packet containing a Relay-Forward message without an address in the Relay-Forward link-address field...
PT-2009-5921 · Power · Power Bulletin Board
Name of the Vulnerable Software and Affected Versions: Power Bulletin Board versions 2.0.2 and earlier Description: A cross-site scripting issue allows remote attackers to inject arbitrary web script or HTML via the id parameter in a "new topic" action. This occurs in the forums/index.php file...
PT-2004-2549 · Ipswitch · Ws Ftp
Name of the Vulnerable Software and Affected Versions: WS FTP version 5.0.2 Description: The issue allows remote authenticated users to cause a denial of service, specifically CPU consumption, by sending a CD command with an invalid path containing a "../" sequence. Recommendations: For WS FTP...
CVE-2002-0638
setpwnam.c in the util-linux package, as included in Red Hat Linux 7.3 and earlier, and other operating systems, does not properly lock a temporary file when modifying /etc/passwd, which may allow local users to gain privileges via a complex race condition that uses an open file descriptor in...
2022-10 Cumulative Update for Windows 10 Version 20H2 for ARM64-based Systems (KB5020435)
2022-10 Cumulative Update for Windows 10 Version 20H2 for ARM64-based Systems KB5020435...