Vulmon
Recent Vulnerabilities
Product List
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
meder kydyraliev vulnerabilities and exploits
(subscribe to this query)
890
VMScore
CVE-2007-6354
Unspecified vulnerability in exiftags prior to 1.01 has unknown impact and attack vectors, resulting from a "field offset overflow" that triggers an "illegal memory access," a different vulnerability than CVE-2007-6355.
Aertherwide Exiftags 0.80
Aertherwide Exiftags 0.96
Aertherwide Exiftags 0.93
Aertherwide Exiftags 0.98
Aertherwide Exiftags 0.99
Aertherwide Exiftags 0.94
Aertherwide Exiftags 0.92
Aertherwide Exiftags 0.90
Aertherwide Exiftags 0.95
Aertherwide Exiftags 0.97
Aertherwide Exiftags 0.91
Aertherwide Exiftags
890
VMScore
CVE-2007-6355
Integer overflow in exiftags prior to 1.01 has unknown impact and attack vectors, resulting from a "field offset overflow" that triggers an "illegal memory access," a different vulnerability than CVE-2007-6354.
Aertherwide Exiftags 0.80
Aertherwide Exiftags 0.96
Aertherwide Exiftags 0.93
Aertherwide Exiftags 0.98
Aertherwide Exiftags 0.99
Aertherwide Exiftags 0.94
Aertherwide Exiftags 0.92
Aertherwide Exiftags 0.90
Aertherwide Exiftags 0.95
Aertherwide Exiftags 0.97
Aertherwide Exiftags 0.91
Aertherwide Exiftags
755
VMScore
CVE-2011-3923
Apache Struts prior to 2.3.1.2 allows remote malicious users to bypass security protections in the ParameterInterceptor class and execute arbitrary commands.
Apache Struts
Redhat Jboss Enterprise Web Server 1.0.0
1 EDB exploit
1 Github repository
685
VMScore
CVE-2007-4385
OWASP Stinger prior to 2.5 allows remote malicious users to bypass input validation routines by using multipart encoded requests instead of form-urlencoded requests. NOTE: this might be used to expose vulnerabilities in applications that would otherwise be protected by the valida...
Owasp Stinger
1 EDB exploit
668
VMScore
CVE-2007-6353
Integer overflow in exif.cpp in exiv2 library allows context-dependent malicious users to execute arbitrary code via a crafted EXIF file that triggers a heap-based buffer overflow.
Exiv2 Exiv2
609
VMScore
CVE-2010-1622
SpringSource Spring Framework 2.5.x prior to 2.5.6.SEC02, 2.5.7 prior to 2.5.7.SR01, and 3.0.x prior to 3.0.3 allows remote malicious users to execute arbitrary code via an HTTP request containing class.classLoader.URLs[0]=jar: followed by a URL of a crafted .jar file.
Oracle Fusion Middleware 11.1.1.8.0
Oracle Fusion Middleware 7.6.2
Oracle Fusion Middleware 11.1.1.6.1
Springsource Spring Framework 2.5.0
Springsource Spring Framework 3.0.1
Springsource Spring Framework 2.5.3
Springsource Spring Framework 3.0.2
Springsource Spring Framework 2.5.5
Springsource Spring Framework 2.5.6
Springsource Spring Framework 2.5.4
Springsource Spring Framework 2.5.2
Springsource Spring Framework 2.5.7
Springsource Spring Framework 3.0.0
Springsource Spring Framework 2.5.1
1 EDB exploit
13 Github repositories
1 Article
605
VMScore
CVE-2007-6352
Integer overflow in libexif 0.6.16 and previous versions allows context-dependent malicious users to execute arbitrary code via an image with crafted EXIF tags, possibly involving the exif_data_load_data_thumbnail function in exif-data.c.
Libexif Libexif
510
VMScore
CVE-2010-1870
The OGNL extensive expression evaluation capability in XWork in Struts 2.0.0 up to and including 2.1.8.1, as used in Atlassian Fisheye, Crucible, and possibly other products, uses a permissive whitelist, which allows remote malicious users to modify server-side context objects an...
Apache Struts 2.0.9
Apache Struts 2.0.12
Apache Struts 2.1.0
Apache Struts 2.0.0
Apache Struts 2.0.8
Apache Struts 2.0.7
Apache Struts 2.0.4
Apache Struts 2.1.8.1
Apache Struts 2.1.3
Apache Struts 2.1.2
Apache Struts 2.1.5
Apache Struts 2.0.1
Apache Struts 2.0.2
Apache Struts 2.1.8
Apache Struts 2.0.11.1
Apache Struts 2.0.3
Apache Struts 2.0.14
Apache Struts 2.0.11
Apache Struts 2.1.6
Apache Struts 2.0.5
Apache Struts 2.1.4
Apache Struts 2.0.11.2
2 EDB exploits
1 Article
505
VMScore
CVE-2008-6504
ParametersInterceptor in OpenSymphony XWork 2.0.x prior to 2.0.6 and 2.1.x prior to 2.1.2, as used in Apache Struts and other products, does not properly restrict # (pound sign) references to context objects, which allows remote malicious users to execute Object-Graph Navigation ...
Opensymphony Xwork 2.1.1
Opensymphony Xwork 2.0.4
Opensymphony Xwork 2.0.3
Opensymphony Xwork 2.0.5
Opensymphony Xwork 2.0.0
Opensymphony Xwork 2.0.2
Opensymphony Xwork 2.0.1
Opensymphony Xwork 2.1.0
Apache Struts 2.0.9
Apache Struts 2.0.0
Apache Struts 2.0.8
Apache Struts 2.0.7
Apache Struts 2.0.4
Apache Struts 2.0.2
Apache Struts 2.0.11.1
Apache Struts 2.0.3
Apache Struts 2.0.11
Apache Struts 2.0.5
Apache Struts 2.0.11.2
Apache Struts 2.0.6
1 EDB exploit
445
VMScore
CVE-2007-6356
exiftags prior to 1.01 allows malicious users to cause a denial of service (infinite loop) via recursive IFD references in the EXIF data in a JPEG image.
Aertherwide Exiftags
VMScore
CVSSv2
CVSSv3
VMScore
Recommendations:
TCP
CVE-2024-4577
CVE-2024-2695
CVE-2024-31870
injection
CVE-2024-3813
arbitrary code
CVE-2024-27801
CVE-2024-30120
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
1
2
NEXT »