264841
|
- |
|
apple
|
mac_os_x quicktime mac_os_x_server
|
Integer overflow in QuickTime in Apple Mac OS X before 10.6.8 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted RIFF WAV file.
|
CWE-189
Numeric Errors
|
CVE-2011-0209
|
2011-08-11 11:48 |
2011-06-25 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
264842
|
- |
|
apple
|
mac_os_x quicktime mac_os_x_server
|
Integer overflow in QuickTime in Apple Mac OS X before 10.6.8 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted movie file.
|
CWE-189
Numeric Errors
|
CVE-2011-0211
|
2011-08-11 11:48 |
2011-06-25 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
264843
|
- |
|
pioneers
|
pioneers
|
Pioneers (formerly gnocatan) before 0.11.3 allows remote attackers to cause a denial of service (crash) by triggering a delete operation while the Session object is still being used, as demonstrated …
|
CWE-20
Improper Input Validation
|
CVE-2007-5933
|
2011-08-10 13:00 |
2007-11-14 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
264844
|
- |
|
desklance
|
desklance
|
PHP remote file inclusion vulnerability in support/index.php in DeskLance 2.3 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the main parameter.
|
CWE-94
Code Injection
|
CVE-2005-3835
|
2011-08-10 13:00 |
2005-11-27 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
264845
|
- |
|
plone
|
plone
|
Cross-site scripting (XSS) vulnerability in skins/plone_templates/default_error_message.pt in Plone before 2.5.3 allows remote attackers to inject arbitrary web script or HTML via the type_name param…
|
CWE-79
Cross-site Scripting
|
CVE-2011-1340
|
2011-08-8 13:00 |
2011-08-6 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
264846
|
- |
|
gnu
|
bash
|
The /etc/profile.d/60alias.sh script in the Mandriva bash package for Bash 2.05b, 3.0, 3.2, 3.2.48, and 4.0 enables the --show-control-chars option in LS_OPTIONS, which allows local users to send esc…
|
CWE-20
Improper Input Validation
|
CVE-2010-0002
|
2011-08-8 13:00 |
2010-01-15 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
264847
|
- |
|
tibco
|
runtime_agent
|
The (1) domainutility and (2) domainutilitycmd components in TIBCO Domain Utility in TIBCO Runtime Agent (TRA) before 5.6.2, as used in TIBCO ActiveMatrix BusinessWorks and other products, set weak p…
|
CWE-264
Permissions, Privileges, and Access Controls
|
CVE-2010-0184
|
2011-08-8 13:00 |
2010-01-15 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
264848
|
- |
|
ibm
|
tivoli_directory_server
|
The do_extendedOp function in ibmslapd in IBM Tivoli Directory Server (TDS) 6.2 on Linux allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a crafted…
|
CWE-20
Improper Input Validation
|
CVE-2010-0312
|
2011-08-8 13:00 |
2010-01-15 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
264849
|
- |
|
google
|
google_sketchup
|
Integer overflow in Google SketchUp before 7.1 M2 allows remote attackers to cause a denial of service (heap memory corruption) or possibly execute arbitrary code via a crafted SKP file.
|
CWE-189
Numeric Errors
|
CVE-2010-0316
|
2011-08-8 13:00 |
2010-01-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
264850
|
- |
|
freebsd
|
freebsd
|
The replay functionality for ZFS Intent Log (ZIL) in FreeBSD 7.1, 7.2, and 8.0, when creating files during replay of a setattr transaction, uses 7777 permissions instead of the original permissions, …
|
CWE-264
Permissions, Privileges, and Access Controls
|
CVE-2010-0318
|
2011-08-8 13:00 |
2010-01-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|