Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 3

Export CSV
CVE-2008-0411

ghostscript: stack-based buffer overflow in .seticcspace operator

Stack-based buffer overflow in the zseticcspace function in zicc.c in Ghostscript 8.61 and earlier allows remote attackers to execute arbitrary code via a postscript (.ps) file containing a long Range array in a .seticcspace operator.

CVSS 2.0 · 6.8 Medium EPSS 14.5% KEV · Not listed
Vendors
Debian Ghostscript Mandrakesoft and 3 more
Products
Debian Linux Ghostscript Mandrake Linux and 11 more
CVE-2008-1767

libxslt: fixed-sized steps array overflow via "template match" condition in XSL file

Buffer overflow in pattern.c in libxslt before 1.1.24 allows context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via an XSL style sheet file with a long XSLT "transformation match" condition that triggers a large number of steps.

CVSS 2.0 · 7.5 High EPSS 12.8% KEV · Not listed
Vendors
Redhat
Products
Desktop Enterprise Linux Enterprise Linux Desktop and 2 more
CVE-2008-2808

Firefox file location escaping flaw

Mozilla Firefox before 2.0.0.15 and SeaMonkey before 1.1.10 do not properly escape HTML in file:// URLs in directory listings, which allows remote attackers to conduct cross-site scripting (XSS) attacks or have unspecified other impact via a crafted filename.

CVSS 2.0 · 4.3 Medium EPSS 1.3% KEV · Not listed
Vendors
Mozilla Redhat Ubuntu
Products
Firefox Seamonkey Thunderbird and 7 more