Show filters
561 Total Results
Displaying 241-250 of 561
Sort by:
Attacker Value
Unknown
CVE-2011-4088
Disclosure Date: January 31, 2020 (last updated February 21, 2025)
ABRT might allow attackers to obtain sensitive information from crash reports.
0
Attacker Value
Unknown
CVE-2020-0549
Disclosure Date: January 28, 2020 (last updated February 21, 2025)
Cleanup errors in some data cache evictions for some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.
0
Attacker Value
Unknown
CVE-2020-6377
Disclosure Date: January 10, 2020 (last updated February 21, 2025)
Use after free in audio in Google Chrome prior to 79.0.3945.117 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
0
Attacker Value
Unknown
CVE-2012-4451
Disclosure Date: January 03, 2020 (last updated February 21, 2025)
Multiple cross-site scripting (XSS) vulnerabilities in Zend Framework 2.0.x before 2.0.1 allow remote attackers to inject arbitrary web script or HTML via unspecified input to (1) Debug, (2) Feed\PubSubHubbub, (3) Log\Formatter\Xml, (4) Tag\Cloud\Decorator, (5) Uri, (6) View\Helper\HeadStyle, (7) View\Helper\Navigation\Sitemap, or (8) View\Helper\Placeholder\Container\AbstractStandalone, related to Escaper.
0
Attacker Value
Unknown
CVE-2013-4357
Disclosure Date: December 31, 2019 (last updated November 27, 2024)
The eglibc package before 2.14 incorrectly handled the getaddrinfo() function. An attacker could use this issue to cause a denial of service.
0
Attacker Value
Unknown
CVE-2019-19906
Disclosure Date: December 19, 2019 (last updated November 08, 2023)
cyrus-sasl (aka Cyrus SASL) 2.1.27 has an out-of-bounds write leading to unauthenticated remote denial-of-service in OpenLDAP via a malformed LDAP packet. The OpenLDAP crash is ultimately caused by an off-by-one error in _sasl_add_string in common.c in cyrus-sasl.
0
Attacker Value
Unknown
CVE-2018-1311
Disclosure Date: December 18, 2019 (last updated June 22, 2024)
The Apache Xerces-C 3.0.0 to 3.2.3 XML parser contains a use-after-free error triggered during the scanning of external DTDs. This flaw has not been addressed in the maintained version of the library and has no current mitigation other than to disable DTD processing. This can be accomplished via the DOM using a standard parser feature, or via SAX using the XERCES_DISABLE_DTD environment variable.
0
Attacker Value
Unknown
CVE-2019-13736
Disclosure Date: December 10, 2019 (last updated November 08, 2023)
Integer overflow in PDFium in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file.
0
Attacker Value
Unknown
CVE-2019-13729
Disclosure Date: December 10, 2019 (last updated November 08, 2023)
Use-after-free in WebSockets in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
0
Attacker Value
Unknown
CVE-2019-13756
Disclosure Date: December 10, 2019 (last updated November 08, 2023)
Incorrect security UI in printing in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to perform domain spoofing via a crafted HTML page.
0
