| Max CVSS | 10.0 | Min CVSS | 4.3 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2003-0431 | 10.0 |
The tvb_get_nstringz0 function in Ethereal 0.9.12 and earlier does not properly handle a zero-length buffer size, with unknown consequences.
|
14-02-2024 - 01:17 | 24-07-2003 - 04:00 | |
| CVE-2003-0430 | 5.0 |
The SPNEGO dissector in Ethereal 0.9.12 and earlier allows remote attackers to cause a denial of service (crash) via an invalid ASN.1 value.
|
14-02-2024 - 01:17 | 24-07-2003 - 04:00 | |
| CVE-2003-0429 | 7.5 |
The OSI dissector in Ethereal 0.9.12 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code via invalid IPv4 or IPv6 prefix lengths, possibly triggering a buffer overflow.
|
14-02-2024 - 01:17 | 24-07-2003 - 04:00 | |
| CVE-2003-0428 | 5.0 |
Unknown vulnerability in the DCERPC (DCE/RPC) dissector in Ethereal 0.9.12 and earlier allows remote attackers to cause a denial of service (memory consumption) via a certain NDR string.
|
14-02-2024 - 01:17 | 24-07-2003 - 04:00 | |
| CVE-2003-0432 | 10.0 |
Ethereal 0.9.12 and earlier does not handle certain strings properly, with unknown consequences, in the (1) BGP, (2) WTP, (3) DNS, (4) 802.11, (5) ISAKMP, (6) WSP, (7) CLNP, (8) ISIS, and (9) RMI dissectors.
|
14-02-2024 - 01:17 | 24-07-2003 - 04:00 | |
| CVE-2014-3215 | 6.9 |
seunshare in policycoreutils 2.2.5 is owned by root with 4755 permissions, and executes programs in a way that changes the relationship between the setuid system call and the getresuid saved set-user-ID value, which makes it easier for local users to
|
03-01-2019 - 17:08 | 08-05-2014 - 10:55 | |
| CVE-2008-5674 | 9.4 |
Multiple array index errors in the HTTP server in Darkwet Network webcamXP 3.72.440.0 and earlier and beta 4.05.280 and earlier allow remote attackers to cause a denial of service (device crash) and read portions of memory via (1) an invalid camnum p
|
11-10-2018 - 20:56 | 19-12-2008 - 01:52 | |
| CVE-2010-1054 | 7.5 |
Multiple SQL injection vulnerabilities in ParsCMS allow remote attackers to execute arbitrary SQL commands via the RP parameter to (1) fa_default.asp and (2) en_default.asp.
|
10-10-2018 - 19:55 | 23-03-2010 - 17:30 | |
| CVE-2006-0889 | 4.3 |
Cross-site scripting (XSS) vulnerability in Calcium 3.10.1 allows remote attackers to inject arbitrary web script or HTML via the EventText parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third pa
|
20-07-2017 - 01:30 | 25-02-2006 - 11:02 |