Show filters
15 Total Results
Displaying 11-15 of 15
Sort by:
Attacker Value
Unknown
CVE-2017-12920
Disclosure Date: August 28, 2017 (last updated November 26, 2024)
CDirectory::GetDirEntry in dir.cxx in libfpx 1.3.1_p6 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted fpx image.
0
Attacker Value
Unknown
CVE-2017-12923
Disclosure Date: August 28, 2017 (last updated November 26, 2024)
OLEStream::WriteVT_LPSTR in olestrm.cpp in libfpx 1.3.1_p6 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted fpx image.
0
Attacker Value
Unknown
CVE-2014-2955
Disclosure Date: July 14, 2014 (last updated October 05, 2023)
Raritan PX before 1.5.11 on DPXR20A-16 devices allows remote attackers to bypass authentication and execute arbitrary IPMI commands by using cipher suite 0 (aka cipher zero) and an arbitrary password.
0
Attacker Value
Unknown
CVE-2012-2296
Disclosure Date: July 25, 2012 (last updated October 04, 2023)
The Janrain Engage (formerly RPX) module for Drupal 6.x-1.x. 6.x-2.x before 6.x-2.2, and 7.x-2.x before 7.x-2.2 stores user profile data from Engage in session tables, which might allow remote attackers to obtain sensitive information by leveraging a separate vulnerability.
0
Attacker Value
Unknown
CVE-2011-0771
Disclosure Date: February 04, 2011 (last updated October 04, 2023)
The Janrain Engage (formerly RPX) module 6.x-1.3 for Drupal does not validate the file for a profile image, which allows remote authenticated users to conduct cross-site scripting (XSS) attacks and possibly execute arbitrary PHP code by causing a crafted avatar to be downloaded from an external login provider site.
0
