Lucene search
+L
PrionMost viewed

213680 matches found

Prion
Prion
added 2012/05/14 10:55 p.m.41 views

Sql injection

SQL injection vulnerability in the Maintenance tool in IBM Rational ClearQuest 7.1.1.x before 7.1.1.9, 7.1.2.x before 7.1.2.6, and 8.x before 8.0.0.2 allows remote attackers to execute arbitrary SQL commands by leveraging an error in the user-database upgrade feature...

7.5CVSS8.8AI score0.02056EPSS
SaveExploits0References6Affected Software1
Prion
Prion
added 2012/04/21 11:55 p.m.41 views

Cross site scripting

Cross-site scripting XSS vulnerability in swfupload.swf in SWFupload 2.2.0.1 and earlier, as used in WordPress before 3.5.2, TinyMCE Image Manager 1.1 and earlier, and other products allows remote attackers to inject arbitrary web script or HTML via the buttonText parameter, a different...

10CVSS5.8AI score0.09088EPSS
SaveExploits11References15Affected Software1
Prion
Prion
added 2012/04/18 10:33 a.m.41 views

Directory traversal

envvars aka envvars-std in the Apache HTTP Server before 2.4.2 places a zero-length directory name in the LDLIBRARYPATH, which allows local users to gain privileges via a Trojan horse DSO in the current working directory during execution of apachectl...

6.9CVSS6.8AI score0.00946EPSS
SaveExploits4References32Affected Software2
Prion
Prion
added 2012/01/10 11:55 a.m.41 views

Directory traversal

Directory traversal vulnerability in the HP-ChaiSOE/1.0 web server on the HP LaserJet P3015 printer with firmware before 07.080.3, LaserJet 4650 printer with firmware 07.006.0, and LaserJet 2430 printer with firmware 08.113.0I35128 allows remote attackers to read arbitrary files via unspecified...

7.8CVSS7AI score0.03514EPSS
SaveExploits0References7Affected Software1
Prion
Prion
added 2011/11/30 4:05 a.m.41 views

Design/Logic Flaw

The modproxy module in the Apache HTTP Server 2.0.x through 2.0.64 and 2.2.x before 2.2.18, when the Revision 1179239 patch is in place, does not properly interact with use of 1 RewriteRule and 2 ProxyPassMatch pattern matches for configuration of a reverse proxy, which allows remote attackers to...

4.3CVSS6.9AI score0.90734EPSS
SaveExploits14References4Affected Software1
Prion
Prion
added 2011/08/29 3:55 p.m.41 views

Code injection

The byterange filter in the Apache HTTP Server 1.3.x, 2.0.x through 2.0.64, and 2.2.x through 2.2.19 allows remote attackers to cause a denial of service memory and CPU consumption via a Range header that expresses multiple overlapping ranges, as exploited in the wild in August 2011, a different...

7.8CVSS6.7AI score0.98828EPSS
SaveExploits18References72Affected Software5
Prion
Prion
added 2011/08/25 2:22 p.m.41 views

Default credentials

cryptblowfish before 1.1, as used in PHP before 5.3.7 on certain platforms, PostgreSQL before 8.4.9, and other products, does not properly handle 8-bit characters, which makes it easier for context-dependent attackers to determine a cleartext password by leveraging knowledge of a password hash...

5CVSS6.8AI score0.04972EPSS
SaveExploits0References22Affected Software3
Prion
Prion
added 2011/03/20 2:00 a.m.41 views

Design/Logic Flaw

Unspecified vulnerability in the NumberFormatter::setSymbol aka numfmtsetsymbol function in the Intl extension in PHP before 5.3.6 allows context-dependent attackers to cause a denial of service application crash via an invalid argument, a related issue to CVE-2010-4409...

5CVSS6.6AI score0.18878EPSS
SaveExploits7References8Affected Software1
Prion
Prion
added 2011/03/02 8:00 p.m.41 views

Design/Logic Flaw

The glob implementation in the GNU C Library aka glibc or libc6 allows remote authenticated users to cause a denial of service CPU and memory consumption via crafted glob expressions that do not match any pathnames, as demonstrated by glob expressions in STAT commands to an FTP daemon, a differen...

4CVSS6.5AI score0.35013EPSS
SaveExploits11References5
Prion
Prion
added 2011/02/17 7:00 p.m.41 views

Code injection

Unspecified vulnerability in the Java Runtime Environment JRE in Oracle Java SE and Java for Business 6 Update 23 and earlier, 5.0 Update 27 and earlier, and 1.4.229 earlier allows remote untrusted Java Web Start applications and untrusted Java applets to affect integrity via unknown vectors...

2.6CVSS7.9AI score0.02407EPSS
SaveExploits0References21Affected Software3
Prion
Prion
added 2011/02/17 7:00 p.m.41 views

Design/Logic Flaw

Unspecified vulnerability in the Java Runtime Environment JRE in Oracle Java SE and Java for Business 6 Update 23 and earlier, 5.0 Update 27 and earlier, and 1.4.229 and earlier allows remote untrusted Java Web Start applications and untrusted Java applets to affect confidentiality, integrity, an...

10CVSS8.1AI score0.02921EPSS
SaveExploits0References18Affected Software3
Prion
Prion
added 2011/01/22 10:00 p.m.41 views

Design/Logic Flaw

libavcodec/vorbisdec.c in the Vorbis decoder in FFmpeg 0.6.1 and earlier allows remote attackers to cause a denial of service application crash via a crafted .ogg file, related to the vorbisfloor0decode function. NOTE: this might overlap CVE-2011-0480...

4.3CVSS6.5AI score0.03005EPSS
SaveExploits2References16Affected Software1
Prion
Prion
added 2010/11/22 1:00 p.m.41 views

Sql injection

The JavaScript implementation in WebKit in Apple Safari before 5.0.3 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.3 on Mac OS X 10.4, uses a weak algorithm for generating values of random numbers, which makes it easier for remote attackers to track a user by predicting a value, a...

5CVSS6.4AI score0.09126EPSS
SaveExploits5References11Affected Software1
Prion
Prion
added 2010/11/09 9:00 p.m.41 views

Stack overflow

Multiple stack-based buffer overflows in the prnetiotelnetgets function in netio.c in ProFTPD before 1.3.3c allow remote attackers to execute arbitrary code via vectors involving a TELNET IAC escape character to a 1 FTP or 2 FTPS server...

10CVSS8.2AI score0.91303EPSS
SaveExploits13References13Affected Software1
Prion
Prion
added 2010/11/09 1:00 a.m.41 views

Null pointer dereference

The ZipArchive::getArchiveComment function in PHP 5.2.x through 5.2.14 and 5.3.x through 5.3.3 allows context-dependent attackers to cause a denial of service NULL pointer dereference and application crash via a crafted ZIP archive...

4.3CVSS6.7AI score0.13333EPSS
SaveExploits6References26Affected Software2
Prion
Prion
added 2010/09/16 9:00 p.m.41 views

Memory corruption

Google Chrome before 6.0.472.59 does not properly implement Geolocation, which allows remote attackers to cause a denial of service memory corruption or possibly have unspecified other impact via unknown vectors...

10CVSS7.5AI score0.01553EPSS
SaveExploits0References3Affected Software1
Prion
Prion
added 2010/05/12 4:05 p.m.41 views

Cross site scripting

Cross-site scripting XSS vulnerability in admin/editprefs.php in the backend in CMS Made Simple CMSMS before 1.7.1 might allow remote attackers to inject arbitrary web script or HTML via the dateformatstring parameter...

4.3CVSS6AI score0.01085EPSS
SaveExploits3References4Affected Software1
Prion
Prion
added 2010/04/27 3:30 p.m.41 views

Authorization

VMware Authentication Daemon 1.0 in vmware-authd.exe in the VMware Authorization Service in VMware Workstation 7.0 before 7.0.1 build 227600 and 6.5.x before 6.5.4 build 246459, VMware Player 3.0 before 3.0.1 build 227600 and 2.5.x before 2.5.4 build 246459, VMware ACE 2.6 before 2.6.1 build 2276...

5CVSS6.7AI score0.11106EPSS
SaveExploits3References8Affected Software4
Prion
Prion
added 2010/03/16 7:30 p.m.41 views

Code injection

The gfs2lock function in the Linux kernel before 2.6.34-rc1-next-20100312, and the gfslock function in the Linux kernel on Red Hat Enterprise Linux RHEL 5 and 6, does not properly remove POSIX locks on files that are setgid without group-execute permission, which allows local users to cause a...

4.9CVSS6.1AI score0.0056EPSS
SaveExploits2References12Affected Software3
Prion
Prion
added 2010/02/23 8:30 p.m.41 views

Cross site scripting

Cross-site scripting XSS vulnerability in the console in Symantec IM Manager 8.3 and 8.4 before 8.4.13 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

4.3CVSS6AI score0.02252EPSS
SaveExploits0References5Affected Software1
Prion
Prion
added 2010/02/10 2:30 a.m.41 views

Stack overflow

FFmpeg 0.5 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via unknown vectors that trigger a stack-based buffer overflow...

10CVSS8AI score0.17038EPSS
SaveExploits3References9Affected Software1
Prion
Prion
added 2010/02/08 8:30 p.m.41 views

Sql injection

The readfromcmdsocket function in cmdmon.c in chronyd in Chrony before 1.23.1, and 1.24-pre1, allows remote attackers to cause a denial of service CPU and bandwidth consumption by sending a spoofed cmdmon packet that triggers a continuous exchange of NOHOSTACCESS messages between two daemons, a...

5CVSS6.8AI score0.32059EPSS
SaveExploits3References7Affected Software1
Prion
Prion
added 2010/01/22 10:00 p.m.41 views

Memory corruption

Microsoft Internet Explorer 8 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing an object that 1 was not properly initialized or 2 is deleted, leading to memory corruption, aka "Uninitialized Memory Corruption Vulnerability," a...

9.3CVSS7.7AI score0.26261EPSS
SaveExploits4References3Affected Software1
Prion
Prion
added 2009/08/05 7:30 p.m.41 views

Design/Logic Flaw

Microsoft Internet Explorer 6 through 6.0.2900.2180 and 7 through 7.0.6000.16473 allows remote attackers to cause a denial of service CPU consumption via an XML document composed of a long series of start-tags with no corresponding end-tags, a related issue to CVE-2009-1232...

7.8CVSS6.8AI score0.1447EPSS
SaveExploits3References2Affected Software1
Prion
Prion
added 2009/07/30 7:30 p.m.41 views

Code injection

Mozilla Network Security Services NSS before 3.12.3, Firefox before 3.0.13, Thunderbird before 2.0.0.23, and SeaMonkey before 1.1.18 do not properly handle a '\0' character in a domain name in the subject's Common Name CN field of an X.509 certificate, which allows man-in-the-middle attackers to...

6.8CVSS8.9AI score0.04959EPSS
SaveExploits4References30Affected Software9
Prion
Prion
added 2009/07/14 8:30 p.m.41 views

Integer overflow

Multiple integer overflows in inter-color spaces conversion tools in libtiff 3.8 through 3.8.2, 3.9, and 4.0 allow context-dependent attackers to execute arbitrary code via a TIFF image with large 1 width and 2 height values, which triggers a heap-based buffer overflow in the a cvtwholeimage...

9.3CVSS8.3AI score0.04152EPSS
SaveExploits1References29Affected Software1
Prion
Prion
added 2009/02/20 7:30 p.m.41 views

Buffer overflow

Buffer overflow in Adobe Reader 9.0 and earlier, and Acrobat 9.0 and earlier, allows remote attackers to execute arbitrary code via a crafted PDF document, related to a non-JavaScript function call and possibly an embedded JBIG2 image stream, as exploited in the wild in February 2009 by...

9.3CVSS8AI score0.87832EPSS
SaveExploits10References26Affected Software2
Prion
Prion
added 2009/01/14 1:30 a.m.41 views

Design/Logic Flaw

Unspecified vulnerability in the Oracle Secure Backup component in Oracle Secure Backup 10.2.0.2 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors, a different vulnerability than CVE-2008-5444 and CVE-2008-5449...

10CVSS6AI score0.60625EPSS
SaveExploits16References4Affected Software1
Prion
Prion
added 2009/01/02 7:30 p.m.41 views

Design/Logic Flaw

The Nokia 6131 Near Field Communication NFC phone with 05.12 firmware allows remote attackers to cause a denial of service device crash via 1 a large value in the payload length field in an NDEF record, or a certain length for a 2 tel: or 3 sms: NDEF URI...

7.8CVSS7.3AI score0.0242EPSS
SaveExploits1References9Affected Software1
Prion
Prion
added 2008/12/12 6:30 p.m.41 views

Design/Logic Flaw

K7AntiVirus 7.10.541 and possibly 7.10.454, when Internet Explorer 6 or 7 is used, allows remote attackers to bypass detection of malware in an HTML document by placing an MZ header aka "EXE info" at the beginning, and modifying the filename to have 1 no extension, 2 a .txt extension, or 3 a .jpg...

9.3CVSS6.3AI score0.7609EPSS
SaveExploits11References4Affected Software1
Prion
Prion
added 2008/09/03 2:12 p.m.41 views

Design/Logic Flaw

Unspecified vulnerability in a certain ActiveX control in VMware Workstation 5.5.x before 5.5.8 build 108000, VMware Workstation 6.0.x before 6.0.5 build 109488, VMware Player 1.x before 1.0.8 build 108000, VMware Player 2.x before 2.0.5 build 109488, VMware ACE 1.x before 1.0.7 build 108880,...

10CVSS6.5AI score0.03912EPSS
SaveExploits1References18Affected Software4
Prion
Prion
added 2008/02/19 12:00 a.m.41 views

Unrestricted file upload

Unrestricted file upload vulnerability in image.php in PHPizabi 0.848b C1 HFP1 allows remote attackers to execute arbitrary code by uploading a file with an executable extension from the event page, then accessing it via a direct request to the file in system/cache/pictures...

9.3CVSS8.2AI score0.05194EPSS
SaveExploits1References3Affected Software1
Prion
Prion
added 2008/01/12 12:46 a.m.41 views

Memory corruption

Unspecified vulnerability in modproxybalancer for Apache HTTP Server 2.2.x before 2.2.7-dev, when running on Windows, allows remote attackers to trigger memory corruption via a long URL. NOTE: the vendor could not reproduce this issue...

7.8CVSS6.8AI score0.03901EPSS
SaveExploits1References3Affected Software1
Prion
Prion
added 2007/11/14 1:46 a.m.41 views

Cross site scripting

Cross-site scripting XSS vulnerability in Servlet Engine / Web Container in IBM WebSphere Application Server WAS 5.1.1.4 through 5.1.1.16 allows remote attackers to inject arbitrary web script or HTML via the Expect HTTP header. NOTE: this might be the same issue as CVE-2006-3918, but there are...

4.3CVSS5.3AI score0.95103EPSS
SaveExploits9References7Affected Software1
Prion
Prion
added 2007/10/11 10:17 a.m.41 views

Hardcoded credentials

Interpretation conflict in the Sun Java Virtual Machine JVM allows user-assisted remote attackers to conduct a multi-pin DNS rebinding attack and execute arbitrary JavaScript in an intranet context, when an intranet web server has an HTML document that references a "mayscript=true" Java applet...

2.6CVSS7.4AI score0.01442EPSS
SaveExploits0References2
Prion
Prion
added 2007/07/30 11:17 p.m.41 views

Integer overflow

Integer overflow in the StreamPredictor::StreamPredictor function in xpdf 3.02, as used in 1 poppler before 0.5.91, 2 gpdf before 2.8.2, 3 kpdf, 4 kdegraphics, 5 CUPS, 6 PDFedit, and other products, might allow remote attackers to execute arbitrary code via a crafted PDF file that triggers a...

6.8CVSS7.9AI score0.08565EPSS
SaveExploits0References94Affected Software6
Prion
Prion
added 2007/07/16 11:30 p.m.41 views

Design/Logic Flaw

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2007-0447. Reason: This candidate is a duplicate of CVE-2007-0447. Notes: All CVE users should reference CVE-2007-0447 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...

6.6AI score0.05957EPSS
SaveExploits1
Prion
Prion
added 2007/03/10 10:19 p.m.41 views

Stack overflow

Stack-based buffer overflow in the zip:// URL wrapper in PECL ZIP 1.8.3 and earlier, as bundled with PHP 5.2.0 and 5.2.1, allows remote attackers to execute arbitrary code via a long zip:// URL, as demonstrated by actively triggering URL access from a remote PHP interpreter via avatar upload or...

10CVSS8.3AI score0.1983EPSS
SaveExploits2References10Affected Software1
Prion
Prion
added 2024/03/14 10:53 p.m.40 views

Cross site scripting

Deno is a JavaScript, TypeScript, and WebAssembly runtime. Starting in version 1.35.1 and prior to version 1.36.3, a vulnerability in Deno's Node.js compatibility runtime allows for cross-session data contamination during simultaneous asynchronous reads from Node.js streams sourced from sockets o...

7.3AI score0.00722EPSS
SaveExploits1References3Affected Software1
Prion
Prion
added 2024/03/14 10:52 p.m.40 views

CVE-2024-25649

RESERVED This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided...

7.3AI score0.00076EPSS
SaveExploits0
Prion
Prion
added 2024/03/14 10:52 p.m.40 views

CVE-2024-25228

RESERVED This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided...

7.2AI score0.25887EPSS
SaveExploits2
Prion
Prion
added 2024/03/13 4:15 p.m.40 views

Cross site scripting

The Exclusive Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Call To Action widget in all versions up to, and including, 2.6.9 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...

5.5CVSS6.1AI score0.00423EPSS
SaveExploits0References2
Prion
Prion
added 2024/03/13 2:15 p.m.40 views

Cross site scripting

The Prime Slider – Addons For Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'titletags' attribute of the Rubix widget in all versions up to, and including, 3.13.2 due to insufficient input sanitization and output escaping. This makes it possible for...

5.5CVSS5.7AI score0.00434EPSS
SaveExploits0References2
Prion
Prion
added 2024/03/12 5:15 p.m.40 views

Spoofing

Azure SDK Spoofing Vulnerability...

5CVSS7.1AI score0.01838EPSS
SaveExploits0References1
Prion
Prion
added 2024/03/12 3:15 p.m.40 views

Sql injection

A improper neutralization of special elements used in an sql command 'sql injection' in Fortinet FortiClientEMS version 7.2.0 through 7.2.2, FortiClientEMS 7.0.1 through 7.0.10 allows attacker to execute unauthorized code or commands via specially crafted packets...

7.5CVSS9.6AI score0.98446EPSS
SaveExploits4References1
Prion
Prion
added 2024/03/12 11:15 a.m.40 views

Design/Logic Flaw

A vulnerability has been identified in SENTRON 7KM PAC3120 AC/DC 7KM3120-0BA01-1DA0 All versions = V3.2.3 = V3.2.3 = V3.2.3 = V3.2.3 V3.3.0 only when manufactured between LQN231003... and LQN231215... with LQNYYMMDD.... The read out protection of the internal flash of affected devices was not...

2.1CVSS4.5AI score0.00223EPSS
SaveExploits0References1
Prion
Prion
added 2024/03/12 9:15 a.m.40 views

Design/Logic Flaw

An unauthenticated remote attacker can DoS a control agent due to access of a uninitialized pointer which may prevent or disrupt the charging functionality...

5CVSS7.6AI score0.01EPSS
SaveExploits0References1
Prion
Prion
added 2024/03/11 7:15 p.m.40 views

Out-of-bounds

In configgovtimewindows of tmu.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

7.4AI score0.00084EPSS
SaveExploits0References1
Prion
Prion
added 2024/03/11 7:15 p.m.40 views

Null pointer dereference

In ssSendCallBarringPwdRequiredIndMsg of ssCallBarring.c, there is a possible null pointer deref due to a missing null check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation...

6.9AI score0.00367EPSS
SaveExploits0References1
Prion
Prion
added 2024/03/11 7:15 p.m.40 views

Out-of-bounds

In strncpy of strncpy.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

7.1AI score0.0008EPSS
SaveExploits0References1
Total number of security vulnerabilities5000