daniel a. vulnerabilities and exploits

(subscribe to this query)

Buffer overflow in curl earlier than 6.0-1.1, and curl-ssl earlier than 6.0-1.2, allows remote malicious users to execute arbitrary commands by forcing a long error message to be generated.

Daniel Stenberg Curl 6.4 Daniel Stenberg Curl 6.5 Daniel Stenberg Curl 7.3 Daniel Stenberg Curl 7.4 Daniel Stenberg Curl 6.0 Daniel Stenberg Curl 6.1 Daniel Stenberg Curl 7.1 Daniel Stenberg Curl 7.1.1 Daniel Stenberg Curl 6.5.1 Daniel Stenberg Curl 6.5.2 Daniel Stenberg Curl 6.1beta Daniel Stenberg Curl 6.3 Daniel Stenberg Curl 7.2 Daniel Stenberg Curl 7.2.1

2 EDB exploits

Multiple off-by-one errors in the cURL library (libcurl) 7.11.2 up to and including 7.15.0 allow local users to trigger a buffer overflow and cause a denial of service or bypass PHP security restrictions via certain URLs that (1) are malformed in a way that prevents a terminating...

Daniel Stenberg Curl 7.13 Daniel Stenberg Curl 7.13.1 Daniel Stenberg Curl 7.11.2 Daniel Stenberg Curl 7.13.2 Daniel Stenberg Curl 7.14 Daniel Stenberg Curl 7.12.2 Daniel Stenberg Curl 7.12.3 Daniel Stenberg Curl 7.12 Daniel Stenberg Curl 7.12.1 Daniel Stenberg Curl 7.14.1 Daniel Stenberg Curl 7.15

DansGuardian 2.8 and previous versions allows remote malicious users to bypass the extension filtering rule via a hex encoded extension or . in the filename.

Daniel Barron Dansguardian 2.2.6 Daniel Barron Dansguardian 2.2.7 Daniel Barron Dansguardian 2.8 Daniel Barron Dansguardian 2.2.7.1 Daniel Barron Dansguardian 2.2.8 Daniel Barron Dansguardian 2.2.9 Daniel Barron Dansguardian 2.2.4 Daniel Barron Dansguardian 2.2.5 Daniel Barron Dansguardian 2.6.1.5 Daniel Barron Dansguardian 2.7.3.1 Daniel Barron Dansguardian 2.2.10 Daniel Barron Dansguardian 2.2.9.1 Daniel Barron Dansguardian 2.4.5.1

Multiple integer overflows in src/image.c in Ziproxy prior to 3.0.1 allow remote malicious users to execute arbitrary code via (1) a large JPG image, related to the jpg2bitmap function or (2) a large PNG image, related to the png2bitmap function, leading to heap-based buffer over...

Unknown vulnerability in DansGuardian prior to 2.6.1-13 allows remote malicious users to bypass URL filters via a crafted request that causes a page to be added to the clean page cache.

Daniel Barron Dansguardian 2.6.1.10 Daniel Barron Dansguardian 2.6.1.12 Daniel Barron Dansguardian 2.6.1.8 Daniel Barron Dansguardian 2.6.1.9 Daniel Barron Dansguardian 2.6.1.11

DansGuardian prior to 2.7.7-2 allows remote malicious users to bypass URL filters via a ".." in the request.

Daniel Barron Dansguardian 2.7.5 Daniel Barron Dansguardian 2.7.6 Daniel Barron Dansguardian 2.7.7 Daniel Barron Dansguardian 2.7.7.1 Beta Daniel Barron Dansguardian 2.7.3

The ares_init:randomize_key function in c-ares, on platforms other than Windows, uses a weak facility for producing a random number sequence (Unix rand), which makes it easier for remote malicious users to spoof DNS responses by guessing certain values.

Daniel Stenberg C-ares 1.0 Daniel Stenberg C-ares 1.1 Daniel Stenberg C-ares 1.3.2 Daniel Stenberg C-ares 1.2 Daniel Stenberg C-ares 1.2.1 Daniel Stenberg C-ares 1.3 Daniel Stenberg C-ares 1.3.1

c-ares prior to 1.4.0 uses a predictable seed for the random number generator for the DNS Transaction ID field, which might allow remote malicious users to spoof DNS responses by guessing the field value.

Daniel Stenberg C-ares 1.0 Daniel Stenberg C-ares 1.3.2 Daniel Stenberg C-ares 1.1 Daniel Stenberg C-ares 1.2 Daniel Stenberg C-ares 1.2.1 Daniel Stenberg C-ares 1.3 Daniel Stenberg C-ares 1.3.1

Heap-based buffer overflow in cURL and libcURL 7.15.0 up to and including 7.15.2 allows remote malicious users to execute arbitrary commands via a TFTP URL (tftp://) with a valid hostname and a long path.

Daniel Stenberg Curl 7.15.1 Daniel Stenberg Curl 7.15.2 Daniel Stenberg Curl 7.15.0

geneweb 4.10 and previous versions does not properly check file permissions and content during conversion, which allows malicious users to modify arbitrary files.

Daniel De Rauglaudre Geneweb

1 2 3 4 5 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook