Lucene search
+L
UbuntucveMost viewed

75842 matches found

UbuntuCve
UbuntuCve
•added 2012/06/22 2:55 p.m.•48 views

CVE-2012-2694

actionpack/lib/actiondispatch/http/request.rb in Ruby on Rails before 3.0.14, 3.1.x before 3.1.6, and 3.2.x before 3.2.6 does not properly consider differences in parameter handling between the Active Record component and the Rack interface, which allows remote attackers to bypass intended...

4.3CVSS7.1AI score0.03931EPSS
SaveExploits2References2
UbuntuCve
UbuntuCve
•added 2012/05/30 8:55 p.m.•48 views

CVE-2010-5099

The fileDenyPattern functionality in the PHP file inclusion protection API in TYPO3 4.2.x before 4.2.16, 4.3.x before 4.3.9, and 4.4.x before 4.4.5 does not properly filter file types, which allows remote attackers to bypass intended access restrictions and access arbitrary PHP files, as...

6.8CVSS6AI score0.03117EPSS
SaveExploits2References2
UbuntuCve
UbuntuCve
•added 2012/03/13 10:55 a.m.•48 views

CVE-2012-1099

Cross-site scripting XSS vulnerability in actionpack/lib/actionview/helpers/formoptionshelper.rb in the select helper in Ruby on Rails 3.0.x before 3.0.12, 3.1.x before 3.1.4, and 3.2.x before 3.2.2 allows remote attackers to inject arbitrary web script or HTML via vectors involving certain...

4.3CVSS6AI score0.02476EPSS
SaveExploits0References2
UbuntuCve
UbuntuCve
•added 2012/01/18 10:55 p.m.•48 views

CVE-2012-0495

Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.x allows remote authenticated users to affect availability via unknown vectors, a different vulnerability than CVE-2012-0117, CVE-2012-0486, CVE-2012-0487, CVE-2012-0488, CVE-2012-0489, CVE-2012-0491, and CVE-2012-0493...

4CVSS5.9AI score0.02394EPSS
SaveExploits0References3
UbuntuCve
UbuntuCve
•added 2011/12/29 12:00 a.m.•48 views

CVE-2011-4885

PHP before 5.3.9 computes hash values for form parameters without restricting the ability to trigger hash collisions predictably, which allows remote attackers to cause a denial of service CPU consumption by sending many crafted parameters...

5CVSS7.2AI score0.8337EPSS
SaveExploits15References5
UbuntuCve
UbuntuCve
•added 2011/12/15 3:57 a.m.•48 views

CVE-2011-4339

ipmievd aka the IPMI event daemon in OpenIPMI, as used in the ipmitool package 1.8.11 in Red Hat Enterprise Linux RHEL 6, Debian GNU/Linux, Fedora 16, and other products uses 0666 permissions for its ipmievd.pid PID file, which allows local users to kill arbitrary processes by writing to this fil...

3.6CVSS6AI score0.00425EPSS
SaveExploits0References1
UbuntuCve
UbuntuCve
•added 2011/11/19 3:58 a.m.•48 views

CVE-2011-4404

The default configuration of the HTTP server in Jetty in vSphere Update Manager in VMware vCenter Update Manager 4.0 before Update 4 and 4.1 before Update 2 allows remote attackers to conduct directory traversal attacks and read arbitrary files via unspecified vectors, a related issue to...

5CVSS6AI score0.59726EPSS
SaveExploits7References1
UbuntuCve
UbuntuCve
•added 2011/11/08 11:55 a.m.•48 views

CVE-2011-4415

The appregsub function in server/util.c in the Apache HTTP Server 2.0.x through 2.0.64 and 2.2.x through 2.2.21, when the modsetenvif module is enabled, does not restrict the size of values of environment variables, which allows local users to cause a denial of service memory consumption or NULL...

1.2CVSS7.1AI score0.031EPSS
SaveExploits5References3
UbuntuCve
UbuntuCve
•added 2011/11/08 12:00 a.m.•48 views

CVE-2011-3607

Integer overflow in the appregsub function in server/util.c in the Apache HTTP Server 2.0.x through 2.0.64 and 2.2.x through 2.2.21, when the modsetenvif module is enabled, allows local users to gain privileges via a .htaccess file with a crafted SetEnvIf directive, in conjunction with a crafted...

4.4CVSS7AI score0.04716EPSS
SaveExploits5References4
UbuntuCve
UbuntuCve
•added 2011/10/19 12:00 a.m.•48 views

CVE-2011-3557

Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK and JRE 7, 6 Update 27 and earlier, 5.0 Update 31 and earlier, 1.4.233 and earlier, and JRockit R28.1.4 and earlier allows remote attackers to affect confidentiality, integrity, and availability, related to...

6.8CVSS7.2AI score0.03477EPSS
SaveExploits1References2
UbuntuCve
UbuntuCve
•added 2011/10/18 1:55 a.m.•48 views

CVE-2011-4061

Multiple untrusted search path vulnerabilities in 1 db2rspgn and 2 kbbacf1 in IBM DB2 Express Edition 9.7, as used in the IBM Tivoli Monitoring for Databases: DB2 Agent, allow local users to gain privileges via a Trojan horse libkbb.so in the current working directory, related to the DTRPATH ELF...

6.9CVSS5.9AI score0.00412EPSS
SaveExploits2References2
UbuntuCve
UbuntuCve
•added 2011/08/25 12:00 a.m.•48 views

CVE-2011-3182

PHP before 5.3.7 does not properly check the return values of the malloc, calloc, and realloc library functions, which allows context-dependent attackers to cause a denial of service NULL pointer dereference and application crash or trigger a buffer overflow by leveraging the ability to provide a...

5CVSS6.2AI score0.19152EPSS
SaveExploits2References2
UbuntuCve
UbuntuCve
•added 2011/08/09 7:55 p.m.•48 views

CVE-2008-7293

Mozilla Firefox before 4 cannot properly restrict modifications to cookies established in HTTPS sessions, which allows man-in-the-middle attackers to overwrite or delete arbitrary cookies via a Set-Cookie header in an HTTP response, related to lack of the HTTP Strict Transport Security HSTS...

5.8CVSS7.3AI score0.01675EPSS
SaveExploits0References4
UbuntuCve
UbuntuCve
•added 2011/06/24 12:00 a.m.•48 views

CVE-2011-2371

Integer overflow in the Array.reduceRight method in Mozilla Firefox before 3.6.18 and 4.x through 4.0.1, Thunderbird before 3.1.11, and SeaMonkey through 2.0.14 allows remote attackers to execute arbitrary code via vectors involving a long JavaScript Array object...

10CVSS7.6AI score0.75691EPSS
SaveExploits17References4
UbuntuCve
UbuntuCve
•added 2011/06/22 12:00 a.m.•48 views

CVE-2011-1170

net/ipv4/netfilter/arptables.c in the IPv4 implementation in the Linux kernel before 2.6.39 does not place the expected '\0' character at the end of string data in the values of certain structure members, which allows local users to obtain potentially sensitive information from kernel memory by...

2.1CVSS7AI score0.00391EPSS
SaveExploits2References11
UbuntuCve
UbuntuCve
•added 2011/06/14 5:55 p.m.•48 views

CVE-2011-2477

Multiple cross-site scripting XSS vulnerabilities in config.c in config.cgi in Icinga before 1.4.1, when escapehtmltags is disabled, allow remote attackers to inject arbitrary web script or HTML via a JavaScript expression, as demonstrated by the onload attribute of a BODY element located after a...

2.6CVSS5.9AI score0.00867EPSS
SaveExploits0References1
UbuntuCve
UbuntuCve
•added 2011/01/28 9:00 p.m.•48 views

CVE-2010-4710

Cross-site scripting XSS vulnerability in the addItem method in the Menu widget in YUI before 2.9.0 allows remote attackers to inject arbitrary web script or HTML via a field that is added to a menu, related to documentation that specifies this field as a text field rather than an HTML field, a...

4.3CVSS7.3AI score0.0223EPSS
SaveExploits0References2
UbuntuCve
UbuntuCve
•added 2010/12/22 12:00 a.m.•48 views

CVE-2010-4346

The installspecialmapping function in mm/mmap.c in the Linux kernel before 2.6.37-rc6 does not make an expected securityfilemmap function call, which allows local users to bypass intended mmapminaddr restrictions and possibly conduct NULL pointer dereference attacks via a crafted assembly-languag...

2.1CVSS6.3AI score0.00402EPSS
SaveExploits0References10
UbuntuCve
UbuntuCve
•added 2010/07/23 12:00 a.m.•48 views

CVE-2010-1213

The importScripts Web Worker method in Mozilla Firefox 3.5.x before 3.5.11 and 3.6.x before 3.6.7, Thunderbird 3.0.x before 3.0.6 and 3.1.x before 3.1.1, and SeaMonkey before 2.0.6 does not verify that content is valid JavaScript code, which allows remote attackers to bypass the Same Origin Polic...

4.3CVSS7.2AI score0.00957EPSS
SaveExploits1References4
UbuntuCve
UbuntuCve
•added 2010/07/23 12:00 a.m.•48 views

CVE-2010-2754

dom/base/nsJSEnvironment.cpp in Mozilla Firefox 3.5.x before 3.5.11 and 3.6.x before 3.6.7, Thunderbird 3.0.x before 3.0.6 and 3.1.x before 3.1.1, and SeaMonkey before 2.0.6 does not properly suppress a script's URL in certain circumstances involving a redirect and an error message, which allows...

5CVSS7.2AI score0.01069EPSS
SaveExploits1References4
UbuntuCve
UbuntuCve
•added 2010/06/24 12:00 a.m.•48 views

CVE-2010-1199

Integer overflow in the XSLT node sorting implementation in Mozilla Firefox 3.5.x before 3.5.10 and 3.6.x before 3.6.4, Thunderbird before 3.0.5, and SeaMonkey before 2.0.5 allows remote attackers to execute arbitrary code via a large text value for a node...

9.3CVSS7.5AI score0.11418EPSS
SaveExploits6References4
UbuntuCve
UbuntuCve
•added 2010/06/11 6:00 p.m.•48 views

CVE-2010-1404

Use-after-free vulnerability in WebKit in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1 on Mac OS X 10.4, allows remote attackers to execute arbitrary code or cause a denial of service application crash via an SVG document that contains recursive Use elements,...

9.3CVSS7.5AI score0.08732EPSS
SaveExploits0References2
UbuntuCve
UbuntuCve
•added 2010/05/18 12:00 a.m.•48 views

CVE-2010-1321

The kgacceptkrb5 function in krb5/acceptseccontext.c in the GSS-API library in MIT Kerberos 5 aka krb5 through 1.7.1 and 1.8 before 1.8.2, as used in kadmind and other applications, does not properly check for invalid GSS-API tokens, which allows remote authenticated users to cause a denial of...

6.8CVSS6.7AI score0.06884EPSS
SaveExploits2References3
UbuntuCve
UbuntuCve
•added 2010/02/18 6:00 p.m.•48 views

CVE-2010-0644

Google Chrome before 4.0.249.89, when a SOCKS 5 proxy server is configured, sends DNS queries directly, which allows remote DNS servers to obtain potentially sensitive information about the identity of a client user via request logging, as demonstrated by a proxy server that was configured for th...

4.3CVSS5.9AI score0.00859EPSS
SaveExploits0References2
UbuntuCve
UbuntuCve
•added 2010/01/04 9:30 p.m.•48 views

CVE-2009-4565

sendmail before 8.14.4 does not properly handle a '\0' character in a Common Name CN field of an X.509 certificate, which 1 allows man-in-the-middle attackers to spoof arbitrary SSL-based SMTP servers via a crafted server certificate issued by a legitimate Certification Authority, and 2 allows...

7.5CVSS6AI score0.02374EPSS
SaveExploits1References2
UbuntuCve
UbuntuCve
•added 2009/12/01 12:00 a.m.•48 views

CVE-2009-4128

GNU GRand Unified Bootloader GRUB 2 1.97 only compares the submitted portion of a password with the actual password, which makes it easier for physically proximate attackers to conduct brute force attacks and bypass authentication by submitting a password whose length is 1...

7.2CVSS5.9AI score0.00571EPSS
SaveExploits1References2
UbuntuCve
UbuntuCve
•added 2009/08/28 3:30 p.m.•48 views

CVE-2009-3002

The Linux kernel before 2.6.31-rc7 does not initialize certain data structures within getname functions, which allows local users to read the contents of some kernel memory locations by calling getsockname on 1 an AFAPPLETALK socket, related to the atalkgetname function in net/appletalk/ddp.c; 2 ...

4.9CVSS5.9AI score0.01029EPSS
SaveExploits8References2
UbuntuCve
UbuntuCve
•added 2009/08/05 12:00 a.m.•48 views

CVE-2009-2672

The proxy mechanism implementation in Sun Java Runtime Environment JRE in JDK and JRE 6 before Update 15, and JDK and JRE 5.0 before Update 20, does not prevent access to browser cookies by untrusted 1 applets and 2 Java Web Start applications, which allows remote attackers to hijack web sessions...

7.5CVSS6.3AI score0.04564EPSS
SaveExploits0References3
UbuntuCve
UbuntuCve
•added 2009/08/05 12:00 a.m.•48 views

CVE-2009-2687

The exifreaddata function in the Exif module in PHP before 5.2.10 allows remote attackers to cause a denial of service crash via a malformed JPEG image with invalid offset fields, a different issue than CVE-2005-3353...

4.3CVSS5.9AI score0.04378EPSS
SaveExploits1References2
UbuntuCve
UbuntuCve
•added 2009/07/14 12:00 a.m.•48 views

CVE-2009-0692

Stack-based buffer overflow in the scriptwriteparams method in client/dhclient.c in ISC DHCP dhclient 4.1 before 4.1.0p1, 4.0 before 4.0.1p1, 3.1 before 3.1.2p1, 3.0, and 2.0 allows remote DHCP servers to execute arbitrary code via a crafted subnet-mask option...

10CVSS7.5AI score0.2578EPSS
SaveExploits9References4
UbuntuCve
UbuntuCve
•added 2009/06/01 2:30 p.m.•48 views

CVE-2009-1844

Multiple cross-site scripting XSS vulnerabilities in Drupal 5.x before 5.18 and 6.x before 6.12 allow 1 remote authenticated users to inject arbitrary web script or HTML via crafted UTF-8 byte sequences that are treated as UTF-7 by Internet Explorer 6 and 7, which are not properly handled in the...

3.5CVSS5.9AI score0.00856EPSS
SaveExploits0References2
UbuntuCve
UbuntuCve
•added 2009/04/24 3:30 p.m.•48 views

CVE-2009-0798

ACPI Event Daemon acpid before 1.0.10 allows remote attackers to cause a denial of service CPU consumption and connectivity loss by opening a large number of UNIX sockets without closing them, which triggers an infinite loop...

5CVSS5.9AI score0.02312EPSS
SaveExploits1References2
UbuntuCve
UbuntuCve
•added 2009/04/24 3:30 p.m.•48 views

CVE-2009-0164

The web interface for CUPS before 1.3.10 does not validate the HTTP Host header in a client request, which makes it easier for remote attackers to conduct DNS rebinding attacks...

6.4CVSS7.2AI score0.02907EPSS
SaveExploits0References1
UbuntuCve
UbuntuCve
•added 2009/04/23 12:00 a.m.•48 views

CVE-2009-1183

The JBIG2 MMR decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, Poppler before 0.10.6, and other products allows remote attackers to cause a denial of service infinite loop and hang via a crafted PDF file...

4.3CVSS5.9AI score0.0377EPSS
SaveExploits1References2
UbuntuCve
UbuntuCve
•added 2009/04/17 12:30 a.m.•48 views

CVE-2009-0946

Multiple integer overflows in FreeType 2.3.9 and earlier allow remote attackers to execute arbitrary code via vectors related to large values in certain inputs in 1 smooth/ftsmooth.c, 2 sfnt/ttcmap.c, and 3 cff/cffload.c...

7.5CVSS6.2AI score0.08541EPSS
SaveExploits1References2
UbuntuCve
UbuntuCve
•added 2009/01/21 2:30 a.m.•48 views

CVE-2008-5916

gitweb/gitweb.perl in gitweb in Git 1.6.x before 1.6.0.6, 1.5.6.x before 1.5.6.6, 1.5.5.x before 1.5.5.6, 1.5.4.x before 1.5.4.7, and other versions after 1.4.3 allows local repository owners to execute arbitrary commands by modifying the diff.external configuration variable and executing a craft...

4.6CVSS6.1AI score0.00458EPSS
SaveExploits0References3
UbuntuCve
UbuntuCve
•added 2009/01/07 5:30 p.m.•48 views

CVE-2008-5077

OpenSSL 0.9.8i and earlier does not properly check the return value from the EVPVerifyFinal function, which allows remote attackers to bypass validation of the certificate chain via a malformed SSL/TLS signature for DSA and ECDSA keys...

5.8CVSS6.9AI score0.05146EPSS
SaveExploits1References2
UbuntuCve
UbuntuCve
•added 2008/12/17 12:00 a.m.•48 views

CVE-2008-5511

Mozilla Firefox 3.x before 3.0.5 and 2.x before 2.0.0.19, Thunderbird 2.x before 2.0.0.19, and SeaMonkey 1.x before 1.1.14 allows remote attackers to bypass the same origin policy and conduct cross-site scripting XSS attacks via an XBL binding to an "unloaded document."...

4.3CVSS7.2AI score0.01856EPSS
SaveExploits0References6
UbuntuCve
UbuntuCve
•added 2008/12/05 12:00 a.m.•48 views

CVE-2008-5359

Buffer overflow in Java Runtime Environment JRE for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; SDK and JRE 1.4.218 and earlier; and SDK and JRE 1.3.123 and earlier might allow remote attackers to execute arbitrary code, related to a ConvolveOp operation in the...

9.3CVSS7.4AI score0.10784EPSS
SaveExploits1References2
UbuntuCve
UbuntuCve
•added 2008/12/05 12:00 a.m.•48 views

CVE-2008-5354

Stack-based buffer overflow in Java Runtime Environment JRE for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; and SDK and JRE 1.4.218 and earlier allows locally-launched and possibly remote untrusted Java applications to execute arbitrary code via a JAR file with...

9.3CVSS7.6AI score0.04798EPSS
SaveExploits5References2
UbuntuCve
UbuntuCve
•added 2008/11/21 2:30 a.m.•48 views

CVE-2008-5183

cupsd in CUPS 1.3.9 and earlier allows local users, and possibly remote attackers, to cause a denial of service daemon crash by adding a large number of RSS Subscriptions, which triggers a NULL pointer dereference. NOTE: this issue can be triggered remotely by leveraging CVE-2008-5184...

7.5CVSS7.1AI score0.0921EPSS
SaveExploits2References5
UbuntuCve
UbuntuCve
•added 2008/10/03 5:41 p.m.•48 views

CVE-2008-4410

The vmiwriteldtentry function in arch/x86/kernel/vmi32.c in the Virtual Machine Interface VMI in the Linux kernel 2.6.26.5 invokes writeidtentry where writeldtentry was intended, which allows local users to cause a denial of service persistent application failure via crafted function calls, relat...

4.9CVSS5.9AI score0.00381EPSS
SaveExploits0References1
UbuntuCve
UbuntuCve
•added 2008/09/18 12:00 a.m.•48 views

CVE-2008-4098

MySQL before 5.0.67 allows local users to bypass certain privilege checks by calling CREATE TABLE on a MyISAM table with modified 1 DATA DIRECTORY or 2 INDEX DIRECTORY arguments that are originally associated with pathnames without symlinks, and that can point to tables created at a future time a...

4.6CVSS5.9AI score0.01624EPSS
SaveExploits1References4
UbuntuCve
UbuntuCve
•added 2008/08/06 6:41 p.m.•48 views

CVE-2008-2939

Cross-site scripting XSS vulnerability in proxyftp.c in the modproxyftp module in Apache 2.0.63 and earlier, and modproxyftp.c in the modproxyftp module in Apache 2.2.9 and earlier 2.2 versions, allows remote attackers to inject arbitrary web script or HTML via a wildcard in the last directory...

4.3CVSS7.2AI score0.38953EPSS
SaveExploits4References2
UbuntuCve
UbuntuCve
•added 2008/08/01 2:41 p.m.•48 views

CVE-2008-2315

Multiple integer overflows in Python 2.5.2 and earlier allow context-dependent attackers to have an unknown impact via vectors related to the 1 stringobject, 2 unicodeobject, 3 bufferobject, 4 longobject, 5 tupleobject, 6 stropmodule, 7 gcmodule, and 8 mmapmodule modules. NOTE: The expandtabs...

7.5CVSS6.8AI score0.04381EPSS
SaveExploits3References2
UbuntuCve
UbuntuCve
•added 2008/07/07 12:00 a.m.•48 views

CVE-2008-2799

Multiple unspecified vulnerabilities in Mozilla Firefox before 2.0.0.15, Thunderbird 2.0.0.14 and earlier, and SeaMonkey before 1.1.10 allow remote attackers to cause a denial of service application crash and possibly execute arbitrary code via unknown vectors related to the JavaScript engine...

10CVSS6AI score0.05565EPSS
SaveExploits1References3
UbuntuCve
UbuntuCve
•added 2008/06/18 7:41 p.m.•48 views

CVE-2008-2751

Multiple cross-site scripting XSS vulnerabilities in the Glassfish webadmin interface in Sun Java System Application Server 9.101 allow remote attackers to inject arbitrary web script or HTML via the 1 propertyForm:propertyContentPage:propertySheet:propertSectionTextField:jndiProp:JndiNew, 2...

4.3CVSS5.9AI score0.04376EPSS
SaveExploits7References1
UbuntuCve
UbuntuCve
•added 2008/06/05 8:32 p.m.•48 views

CVE-2008-2543

The ooh323 channel driver in Asterisk Addons 1.2.x before 1.2.9 and Asterisk-Addons 1.4.x before 1.4.7 creates a remotely accessible TCP port that is intended solely for localhost communication, and interprets some TCP application-data fields as addresses of memory to free, which allows remote...

5CVSS5.9AI score0.03622EPSS
SaveExploits0References1
UbuntuCve
UbuntuCve
•added 2008/05/08 12:20 a.m.•48 views

CVE-2008-1669

Linux kernel before 2.6.25.2 does not apply a certain protection mechanism for fcntl functionality, which allows local users to 1 execute code in parallel or 2 exploit a race condition to obtain "re-ordered access to the descriptor table."...

6.9CVSS6AI score0.00411EPSS
SaveExploits1References3
UbuntuCve
UbuntuCve
•added 2008/05/02 4:05 p.m.•48 views

CVE-2008-1294

Linux kernel 2.6.17, and other versions before 2.6.22, does not check when a user attempts to set RLIMITCPU to 0 until after the change is made, which allows local users to bypass intended resource limits...

2.1CVSS5.9AI score0.00506EPSS
SaveExploits0References2
Total number of security vulnerabilities5000