| Max CVSS | 10.0 | Min CVSS | 2.1 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2010-0421 | 4.3 |
Array index error in the hb_ot_layout_build_glyph_classes function in pango/opentype/hb-ot-layout.cc in Pango before 1.27.1 allows context-dependent attackers to cause a denial of service (application crash) via a crafted font file, related to buildi
|
14-07-2021 - 15:41 | 18-03-2010 - 17:30 | |
| CVE-2006-4514 | 7.5 |
Heap-based buffer overflow in the ole_info_read_metabat function in Gnome Structured File library (libgsf) 1.14.0, and other versions before 1.14.2, allows context-dependent attackers to execute arbitrary code via a large num_metabat value in an OLE
|
17-10-2018 - 21:37 | 30-11-2006 - 23:28 | |
| CVE-2008-0007 | 7.2 |
Linux kernel before 2.6.22.17, when using certain drivers that register a fault handler that does not perform range checks, allows local users to access kernel memory via an out-of-range offset.
|
15-10-2018 - 21:56 | 08-02-2008 - 02:00 | |
| CVE-2003-0962 | 7.5 |
Heap-based buffer overflow in rsync before 2.5.7, when running in server mode, allows remote attackers to execute arbitrary code and possibly escape the chroot jail.
|
03-05-2018 - 01:29 | 15-12-2003 - 05:00 | |
| CVE-2005-2104 | 2.1 |
sysreport before 1.3.7 allows local users to obtain sensitive information via a symlink attack on a temporary directory.
|
11-10-2017 - 01:30 | 07-10-2005 - 18:02 | |
| CVE-2004-0764 | 10.0 |
Mozilla before 1.7, Firefox before 0.9, and Thunderbird before 0.7, allow remote web sites to hijack the user interface via the "chrome" flag and XML User Interface Language (XUL) files.
|
11-10-2017 - 01:29 | 18-08-2004 - 04:00 | |
| CVE-2004-0189 | 7.5 |
The "%xx" URL decoding function in Squid 2.5STABLE4 and earlier allows remote attackers to bypass url_regex ACLs via a URL with a NULL ("%00") character, which causes Squid to use only a portion of the requested URL when comparing it against the acce
|
10-10-2017 - 01:30 | 15-03-2004 - 05:00 | |
| CVE-2009-3615 | 5.0 |
The OSCAR protocol plugin in libpurple in Pidgin before 2.6.3 and Adium before 1.3.7 allows remote attackers to cause a denial of service (application crash) via crafted contact-list data for (1) ICQ and possibly (2) AIM, as demonstrated by the SIM I
|
19-09-2017 - 01:29 | 20-10-2009 - 17:30 |