Show filters
641 Total Results
Displaying 511-520 of 641
Sort by:
Attacker Value
Unknown
CVE-2015-3145
Disclosure Date: April 24, 2015 (last updated October 05, 2023)
The sanitize_cookie_path function in cURL and libcurl 7.31.0 through 7.41.0 does not properly calculate an index, which allows remote attackers to cause a denial of service (out-of-bounds write and crash) or possibly have other unspecified impact via a cookie path containing only a double-quote character.
0
Attacker Value
Unknown
CVE-2015-3148
Disclosure Date: April 24, 2015 (last updated October 05, 2023)
cURL and libcurl 7.10.6 through 7.41.0 do not properly re-use authenticated Negotiate connections, which allows remote attackers to connect as other users via a request.
0
Attacker Value
Unknown
CVE-2015-2787
Disclosure Date: March 30, 2015 (last updated October 05, 2023)
Use-after-free vulnerability in the process_nested_data function in ext/standard/var_unserializer.re in PHP before 5.4.39, 5.5.x before 5.5.23, and 5.6.x before 5.6.7 allows remote attackers to execute arbitrary code via a crafted unserialize call that leverages use of the unset function within an __wakeup function, a related issue to CVE-2015-0231.
0
Attacker Value
Unknown
CVE-2015-0228
Disclosure Date: March 08, 2015 (last updated October 05, 2023)
The lua_websocket_read function in lua_request.c in the mod_lua module in the Apache HTTP Server through 2.4.12 allows remote attackers to cause a denial of service (child-process crash) by sending a crafted WebSocket Ping frame after a Lua script has called the wsupgrade function.
0
Attacker Value
Unknown
CVE-2015-1546
Disclosure Date: February 12, 2015 (last updated October 05, 2023)
Double free vulnerability in the get_vrFilter function in servers/slapd/filter.c in OpenLDAP 2.4.40 allows remote attackers to cause a denial of service (crash) via a crafted search query with a matched values control.
0
Attacker Value
Unknown
CVE-2014-8835
Disclosure Date: January 30, 2015 (last updated October 05, 2023)
The xpc_data_get_bytes function in libxpc in Apple OS X before 10.10.2 does not verify that a dictionary's Attributes key has the xpc_data data type, which allows attackers to execute arbitrary code by providing a crafted dictionary to sysmond, related to an "XPC type confusion" issue.
0
Attacker Value
Unknown
CVE-2014-8834
Disclosure Date: January 30, 2015 (last updated October 05, 2023)
UserAccountUpdater in Apple OS X 10.10 before 10.10.2 stores a PDF document's password in a printing preference file, which allows local users to obtain sensitive information by reading a file.
0
Attacker Value
Unknown
CVE-2014-3583
Disclosure Date: December 15, 2014 (last updated October 05, 2023)
The handle_headers function in mod_proxy_fcgi.c in the mod_proxy_fcgi module in the Apache HTTP Server 2.4.10 allows remote FastCGI servers to cause a denial of service (buffer over-read and daemon crash) via long response headers.
0
Attacker Value
Unknown
CVE-2014-8458
Disclosure Date: December 10, 2014 (last updated October 05, 2023)
Adobe Reader and Acrobat 10.x before 10.1.13 and 11.x before 11.0.10 on Windows and OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2014-8445, CVE-2014-8446, CVE-2014-8447, CVE-2014-8456, CVE-2014-8459, CVE-2014-8461, and CVE-2014-9158.
0
Attacker Value
Unknown
CVE-2014-8461
Disclosure Date: December 10, 2014 (last updated October 05, 2023)
Adobe Reader and Acrobat 10.x before 10.1.13 and 11.x before 11.0.10 on Windows and OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2014-8445, CVE-2014-8446, CVE-2014-8447, CVE-2014-8456, CVE-2014-8458, CVE-2014-8459, and CVE-2014-9158.
0
