Show filters
231 Total Results
Displaying 201-210 of 231
Sort by:
Attacker Value
Unknown
CVE-2015-1845
Disclosure Date: May 19, 2015 (last updated October 05, 2023)
Buffer overflow in the EntrReadArch function in unzoo might allow remote attackers to execute arbitrary code via unspecified vectors.
0
Attacker Value
Unknown
CVE-2014-7633
Disclosure Date: October 21, 2014 (last updated October 05, 2023)
The Dino Zoo (aka com.tappocket.dinozoostar) application 1.5 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
0
Attacker Value
Unknown
CVE-2014-5811
Disclosure Date: September 09, 2014 (last updated October 05, 2023)
The ZOOM Cloud Meetings (aka us.zoom.videomeetings) application @7F060008 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
0
Attacker Value
Unknown
CVE-2014-5628
Disclosure Date: September 09, 2014 (last updated October 05, 2023)
The Wonder Zoo - Animal rescue ! (aka com.gameloft.android.ANMP.GloftZRHM) application 1.6.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
0
Attacker Value
Unknown
CVE-2013-3260
Disclosure Date: March 03, 2014 (last updated October 05, 2023)
Heap-based buffer overflow in INMATRIX Zoom Player before 8.7 beta 11 allows remote attackers to execute arbitrary code via a large biClrUsed value in a BMP file.
0
Attacker Value
Unknown
CVE-2013-3259
Disclosure Date: March 03, 2014 (last updated October 05, 2023)
Stack-based buffer overflow in INMATRIX Zoom Player before 8.7 beta 11 allows remote attackers to execute arbitrary code via a large biClrUsed value in a BMP file.
0
Attacker Value
Unknown
CVE-2011-5180
Disclosure Date: September 20, 2012 (last updated October 05, 2023)
Cross-site scripting (XSS) vulnerability in wp-1pluginjquery.php in the ZooEffect plugin 1.01 for WordPress allows remote attackers to inject arbitrary web script or HTML via the page parameter. NOTE: some of these details are obtained from third party information. NOTE: this has been disputed by a third party.
0
Attacker Value
Unknown
CVE-2009-4474
Disclosure Date: December 30, 2009 (last updated October 04, 2023)
SQL injection vulnerability in the Mike de Boer zoom (com_zoom) component 2.0 for Mambo allows remote attackers to execute arbitrary SQL commands via the catid parameter to index.php.
0
Attacker Value
Unknown
CVE-2009-3918
Disclosure Date: November 09, 2009 (last updated October 04, 2023)
Cross-site scripting (XSS) vulnerability in the Zoomify module 5.x before 5.x-2.2 and 6.x before 6.x-1.4, a module for Drupal, allows remote attackers to inject arbitrary web script or HTML via the node title.
0
Attacker Value
Unknown
CVE-2007-6533
Disclosure Date: December 27, 2007 (last updated October 04, 2023)
Buffer overflow in Zoom Player 6.00 beta 2 and earlier allows user-assisted remote attackers to execute arbitrary code via an HTTP link to a PLS file in a crafted ZPL file, which causes an overflow in Unicode handling when generating an error message.
0
