Lucene search
+L
UbuntucveMost viewed

75842 matches found

UbuntuCve
UbuntuCve
added 2010/12/22 12:00 a.m.48 views

CVE-2010-4346

The installspecialmapping function in mm/mmap.c in the Linux kernel before 2.6.37-rc6 does not make an expected securityfilemmap function call, which allows local users to bypass intended mmapminaddr restrictions and possibly conduct NULL pointer dereference attacks via a crafted assembly-languag...

2.1CVSS6.3AI score0.00402EPSS
SaveExploits0References10
UbuntuCve
UbuntuCve
added 2010/07/23 12:00 a.m.48 views

CVE-2010-1213

The importScripts Web Worker method in Mozilla Firefox 3.5.x before 3.5.11 and 3.6.x before 3.6.7, Thunderbird 3.0.x before 3.0.6 and 3.1.x before 3.1.1, and SeaMonkey before 2.0.6 does not verify that content is valid JavaScript code, which allows remote attackers to bypass the Same Origin Polic...

4.3CVSS7.2AI score0.00957EPSS
SaveExploits1References4
UbuntuCve
UbuntuCve
added 2010/07/23 12:00 a.m.48 views

CVE-2010-2754

dom/base/nsJSEnvironment.cpp in Mozilla Firefox 3.5.x before 3.5.11 and 3.6.x before 3.6.7, Thunderbird 3.0.x before 3.0.6 and 3.1.x before 3.1.1, and SeaMonkey before 2.0.6 does not properly suppress a script's URL in certain circumstances involving a redirect and an error message, which allows...

5CVSS7.2AI score0.01069EPSS
SaveExploits1References4
UbuntuCve
UbuntuCve
added 2010/06/24 12:00 a.m.48 views

CVE-2010-1199

Integer overflow in the XSLT node sorting implementation in Mozilla Firefox 3.5.x before 3.5.10 and 3.6.x before 3.6.4, Thunderbird before 3.0.5, and SeaMonkey before 2.0.5 allows remote attackers to execute arbitrary code via a large text value for a node...

9.3CVSS7.5AI score0.11418EPSS
SaveExploits6References4
UbuntuCve
UbuntuCve
added 2010/06/07 12:00 a.m.48 views

CVE-2010-2024

transports/appendfile.c in Exim before 4.72, when MBX locking is enabled, allows local users to change permissions of arbitrary files or create arbitrary files, and cause a denial of service or possibly gain privileges, via a symlink attack on a lockfile in /tmp/...

4.4CVSS7.1AI score0.0028EPSS
SaveExploits0References4
UbuntuCve
UbuntuCve
added 2010/05/18 12:00 a.m.48 views

CVE-2010-1321

The kgacceptkrb5 function in krb5/acceptseccontext.c in the GSS-API library in MIT Kerberos 5 aka krb5 through 1.7.1 and 1.8 before 1.8.2, as used in kadmind and other applications, does not properly check for invalid GSS-API tokens, which allows remote authenticated users to cause a denial of...

6.8CVSS6.7AI score0.06884EPSS
SaveExploits2References3
UbuntuCve
UbuntuCve
added 2010/02/18 6:00 p.m.48 views

CVE-2010-0644

Google Chrome before 4.0.249.89, when a SOCKS 5 proxy server is configured, sends DNS queries directly, which allows remote DNS servers to obtain potentially sensitive information about the identity of a client user via request logging, as demonstrated by a proxy server that was configured for th...

4.3CVSS5.9AI score0.00859EPSS
SaveExploits0References2
UbuntuCve
UbuntuCve
added 2010/02/17 12:00 a.m.48 views

CVE-2009-1571

Use-after-free vulnerability in the HTML parser in Mozilla Firefox 3.0.x before 3.0.18 and 3.5.x before 3.5.8, Thunderbird before 3.0.2, and SeaMonkey before 2.0.3 allows remote attackers to execute arbitrary code via unspecified method calls that attempt to access freed objects in low-memory...

10CVSS7.5AI score0.06392EPSS
SaveExploits2References4
UbuntuCve
UbuntuCve
added 2010/01/04 9:30 p.m.48 views

CVE-2009-4565

sendmail before 8.14.4 does not properly handle a '\0' character in a Common Name CN field of an X.509 certificate, which 1 allows man-in-the-middle attackers to spoof arbitrary SSL-based SMTP servers via a crafted server certificate issued by a legitimate Certification Authority, and 2 allows...

7.5CVSS6AI score0.02374EPSS
SaveExploits1References2
UbuntuCve
UbuntuCve
added 2009/08/28 3:30 p.m.48 views

CVE-2009-3002

The Linux kernel before 2.6.31-rc7 does not initialize certain data structures within getname functions, which allows local users to read the contents of some kernel memory locations by calling getsockname on 1 an AFAPPLETALK socket, related to the atalkgetname function in net/appletalk/ddp.c; 2 ...

4.9CVSS5.9AI score0.01029EPSS
SaveExploits8References2
UbuntuCve
UbuntuCve
added 2009/08/05 12:00 a.m.48 views

CVE-2009-2687

The exifreaddata function in the Exif module in PHP before 5.2.10 allows remote attackers to cause a denial of service crash via a malformed JPEG image with invalid offset fields, a different issue than CVE-2005-3353...

4.3CVSS5.9AI score0.04378EPSS
SaveExploits1References2
UbuntuCve
UbuntuCve
added 2009/07/14 12:00 a.m.48 views

CVE-2009-0692

Stack-based buffer overflow in the scriptwriteparams method in client/dhclient.c in ISC DHCP dhclient 4.1 before 4.1.0p1, 4.0 before 4.0.1p1, 3.1 before 3.1.2p1, 3.0, and 2.0 allows remote DHCP servers to execute arbitrary code via a crafted subnet-mask option...

10CVSS7.5AI score0.2578EPSS
SaveExploits9References4
UbuntuCve
UbuntuCve
added 2009/04/24 3:30 p.m.48 views

CVE-2009-0798

ACPI Event Daemon acpid before 1.0.10 allows remote attackers to cause a denial of service CPU consumption and connectivity loss by opening a large number of UNIX sockets without closing them, which triggers an infinite loop...

5CVSS5.9AI score0.02312EPSS
SaveExploits1References2
UbuntuCve
UbuntuCve
added 2009/04/24 3:30 p.m.48 views

CVE-2009-0164

The web interface for CUPS before 1.3.10 does not validate the HTTP Host header in a client request, which makes it easier for remote attackers to conduct DNS rebinding attacks...

6.4CVSS7.2AI score0.02907EPSS
SaveExploits0References1
UbuntuCve
UbuntuCve
added 2009/04/23 12:00 a.m.48 views

CVE-2009-1183

The JBIG2 MMR decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, Poppler before 0.10.6, and other products allows remote attackers to cause a denial of service infinite loop and hang via a crafted PDF file...

4.3CVSS5.9AI score0.0377EPSS
SaveExploits1References2
UbuntuCve
UbuntuCve
added 2009/04/17 12:30 a.m.48 views

CVE-2009-0946

Multiple integer overflows in FreeType 2.3.9 and earlier allow remote attackers to execute arbitrary code via vectors related to large values in certain inputs in 1 smooth/ftsmooth.c, 2 sfnt/ttcmap.c, and 3 cff/cffload.c...

7.5CVSS6.2AI score0.08541EPSS
SaveExploits1References2
UbuntuCve
UbuntuCve
added 2009/01/21 2:30 a.m.48 views

CVE-2008-5916

gitweb/gitweb.perl in gitweb in Git 1.6.x before 1.6.0.6, 1.5.6.x before 1.5.6.6, 1.5.5.x before 1.5.5.6, 1.5.4.x before 1.5.4.7, and other versions after 1.4.3 allows local repository owners to execute arbitrary commands by modifying the diff.external configuration variable and executing a craft...

4.6CVSS6.1AI score0.00458EPSS
SaveExploits0References3
UbuntuCve
UbuntuCve
added 2009/01/07 5:30 p.m.48 views

CVE-2008-5077

OpenSSL 0.9.8i and earlier does not properly check the return value from the EVPVerifyFinal function, which allows remote attackers to bypass validation of the certificate chain via a malformed SSL/TLS signature for DSA and ECDSA keys...

5.8CVSS6.9AI score0.05146EPSS
SaveExploits1References2
UbuntuCve
UbuntuCve
added 2008/12/17 12:00 a.m.48 views

CVE-2008-5511

Mozilla Firefox 3.x before 3.0.5 and 2.x before 2.0.0.19, Thunderbird 2.x before 2.0.0.19, and SeaMonkey 1.x before 1.1.14 allows remote attackers to bypass the same origin policy and conduct cross-site scripting XSS attacks via an XBL binding to an "unloaded document."...

4.3CVSS7.2AI score0.01856EPSS
SaveExploits0References6
UbuntuCve
UbuntuCve
added 2008/12/05 12:00 a.m.48 views

CVE-2008-5359

Buffer overflow in Java Runtime Environment JRE for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; SDK and JRE 1.4.218 and earlier; and SDK and JRE 1.3.123 and earlier might allow remote attackers to execute arbitrary code, related to a ConvolveOp operation in the...

9.3CVSS7.4AI score0.10784EPSS
SaveExploits1References2
UbuntuCve
UbuntuCve
added 2008/12/05 12:00 a.m.48 views

CVE-2008-5354

Stack-based buffer overflow in Java Runtime Environment JRE for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; and SDK and JRE 1.4.218 and earlier allows locally-launched and possibly remote untrusted Java applications to execute arbitrary code via a JAR file with...

9.3CVSS7.6AI score0.04798EPSS
SaveExploits5References2
UbuntuCve
UbuntuCve
added 2008/11/21 2:30 a.m.48 views

CVE-2008-5183

cupsd in CUPS 1.3.9 and earlier allows local users, and possibly remote attackers, to cause a denial of service daemon crash by adding a large number of RSS Subscriptions, which triggers a NULL pointer dereference. NOTE: this issue can be triggered remotely by leveraging CVE-2008-5184...

7.5CVSS7.1AI score0.0921EPSS
SaveExploits2References5
UbuntuCve
UbuntuCve
added 2008/10/03 5:41 p.m.48 views

CVE-2008-4410

The vmiwriteldtentry function in arch/x86/kernel/vmi32.c in the Virtual Machine Interface VMI in the Linux kernel 2.6.26.5 invokes writeidtentry where writeldtentry was intended, which allows local users to cause a denial of service persistent application failure via crafted function calls, relat...

4.9CVSS5.9AI score0.00381EPSS
SaveExploits0References1
UbuntuCve
UbuntuCve
added 2008/08/01 2:41 p.m.48 views

CVE-2008-2315

Multiple integer overflows in Python 2.5.2 and earlier allow context-dependent attackers to have an unknown impact via vectors related to the 1 stringobject, 2 unicodeobject, 3 bufferobject, 4 longobject, 5 tupleobject, 6 stropmodule, 7 gcmodule, and 8 mmapmodule modules. NOTE: The expandtabs...

7.5CVSS6.8AI score0.04381EPSS
SaveExploits3References2
UbuntuCve
UbuntuCve
added 2008/07/07 12:00 a.m.48 views

CVE-2008-2799

Multiple unspecified vulnerabilities in Mozilla Firefox before 2.0.0.15, Thunderbird 2.0.0.14 and earlier, and SeaMonkey before 1.1.10 allow remote attackers to cause a denial of service application crash and possibly execute arbitrary code via unknown vectors related to the JavaScript engine...

10CVSS6AI score0.05565EPSS
SaveExploits1References3
UbuntuCve
UbuntuCve
added 2008/06/18 7:41 p.m.48 views

CVE-2008-2751

Multiple cross-site scripting XSS vulnerabilities in the Glassfish webadmin interface in Sun Java System Application Server 9.101 allow remote attackers to inject arbitrary web script or HTML via the 1 propertyForm:propertyContentPage:propertySheet:propertSectionTextField:jndiProp:JndiNew, 2...

4.3CVSS5.9AI score0.04376EPSS
SaveExploits7References1
UbuntuCve
UbuntuCve
added 2008/06/05 8:32 p.m.48 views

CVE-2008-2543

The ooh323 channel driver in Asterisk Addons 1.2.x before 1.2.9 and Asterisk-Addons 1.4.x before 1.4.7 creates a remotely accessible TCP port that is intended solely for localhost communication, and interprets some TCP application-data fields as addresses of memory to free, which allows remote...

5CVSS5.9AI score0.03622EPSS
SaveExploits0References1
UbuntuCve
UbuntuCve
added 2008/05/08 12:20 a.m.48 views

CVE-2008-1669

Linux kernel before 2.6.25.2 does not apply a certain protection mechanism for fcntl functionality, which allows local users to 1 execute code in parallel or 2 exploit a race condition to obtain "re-ordered access to the descriptor table."...

6.9CVSS6AI score0.00411EPSS
SaveExploits1References3
UbuntuCve
UbuntuCve
added 2008/05/02 4:05 p.m.48 views

CVE-2008-1294

Linux kernel 2.6.17, and other versions before 2.6.22, does not check when a user attempts to set RLIMITCPU to 0 until after the change is made, which allows local users to bypass intended resource limits...

2.1CVSS5.9AI score0.00506EPSS
SaveExploits0References2
UbuntuCve
UbuntuCve
added 2008/04/12 7:05 p.m.48 views

CVE-2007-6712

Integer overflow in the hrtimerforward function hrtimer.c in Linux kernel 2.6.21-rc4, when running on 64-bit systems, allows local users to cause a denial of service infinite loop via a timer with a large expiry value, which causes the timer to always be expired...

4.9CVSS5.9AI score0.00392EPSS
SaveExploits0References2
UbuntuCve
UbuntuCve
added 2008/04/09 9:05 p.m.48 views

CVE-2007-0071

Integer overflow in Adobe Flash Player 9.0.115.0 and earlier, and 8.0.39.0 and earlier, allows remote attackers to execute arbitrary code via a crafted SWF file with a negative Scene Count value, which passes a signed comparison, is used as an offset of a NULL pointer, and triggers a buffer...

9.3CVSS7.7AI score0.92501EPSS
SaveExploits2References1
UbuntuCve
UbuntuCve
added 2008/03/17 9:44 p.m.48 views

CVE-2008-0888

The NEEDBITS macro in the inflatedynamic function in inflate.c for unzip can be invoked using invalid buffers, which allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via unknown vectors that trigger a free of uninitialized or previously-freed data...

9.3CVSS6.6AI score0.0629EPSS
SaveExploits1References2
UbuntuCve
UbuntuCve
added 2008/03/06 9:44 p.m.48 views

CVE-2008-1192

Unspecified vulnerability in the Java Plug-in for Sun JDK and JRE 6 Update 4 and earlier, and 5.0 Update 14 and earlier; and SDK and JRE 1.4.216 and earlier, and 1.3.121 and earlier; allows remote attackers to bypass the same origin policy and "execute local applications" via unknown vectors...

6.8CVSS5.9AI score0.04458EPSS
SaveExploits0References1
UbuntuCve
UbuntuCve
added 2008/02/12 9:00 p.m.48 views

CVE-2008-0009

The vmsplicetouser function in fs/splice.c in the Linux kernel 2.6.22 through 2.6.24 does not validate a certain userspace pointer before dereference, which might allow local users to access arbitrary kernel memory locations...

2.1CVSS6AI score0.00959EPSS
SaveExploits4References1
UbuntuCve
UbuntuCve
added 2008/01/25 1:00 a.m.48 views

CVE-2008-0456

CRLF injection vulnerability in the modnegotiation module in the Apache HTTP Server 2.2.6 and earlier in the 2.2.x series, 2.0.61 and earlier in the 2.0.x series, and 1.3.39 and earlier in the 1.3.x series allows remote authenticated users to inject arbitrary HTTP headers and conduct HTTP respons...

2.6CVSS6AI score0.19036EPSS
SaveExploits1References1
UbuntuCve
UbuntuCve
added 2007/10/08 11:17 p.m.48 views

CVE-2007-5273

Sun Java Runtime Environment JRE in JDK and JRE 6 Update 2 and earlier, JDK and JRE 5.0 Update 12 and earlier, SDK and JRE 1.4.215 and earlier, and SDK and JRE 1.3.120 and earlier, when an HTTP proxy server is used, allows remote attackers to violate the security model for an applet's outbound...

2.6CVSS5.9AI score0.02678EPSS
SaveExploits0References1
UbuntuCve
UbuntuCve
added 2007/09/17 4:17 p.m.48 views

CVE-2007-4904

RealNetworks RealPlayer 10.1.0.3114 and earlier, and Helix Player 1.0.6.778 on Fedora Core 6 FC6 and possibly other platforms, allow user-assisted remote attackers to cause a denial of service application crash via a malformed .au file that triggers a divide-by-zero error...

4.3CVSS5.9AI score0.02787EPSS
SaveExploits2References1
UbuntuCve
UbuntuCve
added 2007/06/27 5:30 p.m.48 views

CVE-2007-1863

cacheutil.c in the modcache module in Apache HTTP Server httpd, when caching is enabled and a threaded Multi-Processing Module MPM is used, allows remote attackers to cause a denial of service child processing handler crash via a request with the 1 s-maxage, 2 max-age, 3 min-fresh, or 4 max-stale...

5CVSS7.2AI score0.11786EPSS
SaveExploits0References2
UbuntuCve
UbuntuCve
added 2007/06/06 1:30 a.m.48 views

CVE-2007-3056

Cross-site scripting XSS vulnerability in filedetails.php in WebSVN 2.0rc4, and possibly earlier, allows remote attackers to inject arbitrary web script or HTML via the path parameter...

4.3CVSS5.9AI score0.01562EPSS
SaveExploits0References1
UbuntuCve
UbuntuCve
added 2007/03/03 7:19 p.m.48 views

CVE-2006-7098

The Debian GNU/Linux 033-FNOSETSID patch for the Apache HTTP Server 1.3.34-4 does not properly disassociate httpd from a controlling tty when httpd is started interactively, which allows local users to gain privileges to that tty via a CGI program that calls the TIOCSTI ioctl...

6.6CVSS5.9AI score0.0056EPSS
SaveExploits1References1
UbuntuCve
UbuntuCve
added 2006/10/31 7:07 p.m.48 views

CVE-2006-5619

The seqfile handling ip6flgetn function in ip6flowlabel.c in Linux kernel 2.6 up to 2.6.18-stable allows local users to cause a denial of service hang or oops via unspecified manipulations that trigger an infinite loop while searching for flowlabels...

2.1CVSS5.8AI score0.00418EPSS
SaveExploits0References2
UbuntuCve
UbuntuCve
added 2006/07/27 12:00 a.m.48 views

CVE-2006-3918

httpprotocol.c in 1 IBM HTTP Server 6.0 before 6.0.2.13 and 6.1 before 6.1.0.1, and 2 Apache HTTP Server 1.3 before 1.3.35, 2.0 before 2.0.58, and 2.2 before 2.2.2, does not sanitize the Expect header from an HTTP request when it is reflected back in an error message, which might allow cross-site...

4.3CVSS7.2AI score0.94926EPSS
SaveExploits8References2
UbuntuCve
UbuntuCve
added 2006/07/07 6:05 p.m.48 views

CVE-2006-2451

The suiddumpable support in Linux kernel 2.6.13 up to versions before 2.6.17.4, and 2.6.16 before 2.6.16.24, allows a local user to cause a denial of service disk consumption and possibly gain privileges via the PRSETDUMPABLE argument of the prctl function and a program that causes a core dump fi...

4.6CVSS5.8AI score0.04387EPSS
SaveExploits19References2
UbuntuCve
UbuntuCve
added 2006/03/30 10:02 p.m.48 views

CVE-2006-1547

ActionForm in Apache Software Foundation ASF Struts before 1.2.9 with BeanUtils 1.7 allows remote attackers to cause a denial of service via a multipart/form-data encoded form with a parameter name that references the public getMultipartRequestHandler method, which provides further access to...

7.8CVSS7.2AI score0.54635EPSS
SaveExploits1References2
UbuntuCve
UbuntuCve
added 2006/02/22 2:02 a.m.48 views

CVE-2006-0839

The frag3 preprocessor in Sourcefire Snort 2.4.3 does not properly reassemble certain fragmented packets with IP options, which allows remote attackers to evade detection of certain attacks, possibly related to IP option lengths...

5CVSS5.9AI score0.01409EPSS
SaveExploits0References1
UbuntuCve
UbuntuCve
added 2005/12/31 5:00 a.m.48 views

CVE-2005-4351

The securelevels implementation in FreeBSD 7.0 and earlier, OpenBSD up to 3.8, DragonFly up to 1.2, and Linux up to 2.6.15 allows root users to bypass immutable settings for files by mounting another filesystem that masks the immutable files while the system is running...

4.3CVSS5.8AI score0.00426EPSS
SaveExploits2References1
UbuntuCve
UbuntuCve
added 2005/12/31 5:00 a.m.48 views

CVE-2005-4838

Multiple cross-site scripting XSS vulnerabilities in the example web applications for Jakarta Tomcat 5.5.6 and earlier allow remote attackers to inject arbitrary web script or HTML via 1 el/functions.jsp, 2 el/implicit-objects.jsp, and 3 jspx/textRotate.jspx in examples/jsp2/, as demonstrated via...

4.3CVSS5.8AI score0.07854EPSS
SaveExploits0References1
UbuntuCve
UbuntuCve
added 2005/10/27 10:02 a.m.48 views

CVE-2005-3319

The apache2handler SAPI sapiapache2.c in the Apache module modphp for PHP 5.x before 5.1.0 final and 4.4 before 4.4.1 final allows attackers to cause a denial of service segmentation fault via the session.savepath option in a .htaccess file or VirtualHost...

2.1CVSS5.9AI score0.00587EPSS
SaveExploits0References2
UbuntuCve
UbuntuCve
added 2005/05/02 4:00 a.m.48 views

CVE-2005-0404

KMail 1.7.1 in KDE 3.3.2 allows remote attackers to spoof email information, such as whether the email has been digitally signed or encrypted, via HTML formatted email...

5CVSS5.9AI score0.0298EPSS
SaveExploits2References1
UbuntuCve
UbuntuCve
added 2004/12/31 5:00 a.m.48 views

CVE-2004-0919

The syscons CONSSCRSHOT ioctl in FreeBSD 5.x allows local users to read arbitrary kernel memory via 1 negative coordinates or 2 large coordinates...

4.6CVSS5.9AI score0.00422EPSS
SaveExploits0References1
Total number of security vulnerabilities5000