Filtered by CWE-17
Filtered by vendor Subscriptions
Total 166 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2013-2184 1 Sixapart 1 Movable Type 2024-11-21 N/A
Movable Type before 5.2.6 does not properly use the Storable::thaw function, which allows remote attackers to execute arbitrary code via the comment_state parameter.
CVE-2010-2055 2 Artifex, Redhat 4 Afpl Ghostscript, Ghostscript Fonts, Gpl Ghostscript and 1 more 2024-11-21 N/A
Ghostscript 8.71 and earlier reads initialization files from the current working directory, which allows local users to execute arbitrary PostScript commands via a Trojan horse file, related to improper support for the -P- option to the gs program, as demonstrated using gs_init.ps, a different vulnerability than CVE-2010-4820.
CVE-2006-5757 2 Linux, Redhat 2 Linux Kernel, Enterprise Linux 2024-11-21 N/A
Race condition in the __find_get_block_slow function in the ISO9660 filesystem in Linux 2.6.18 and possibly other versions allows local users to cause a denial of service (infinite loop) by mounting a crafted ISO9660 filesystem containing malformed data structures.
CVE-2005-2919 1 Clam Anti-virus 1 Clamav 2024-11-21 N/A
libclamav/fsg.c in Clam AntiVirus (ClamAV) before 0.87 allows remote attackers to cause a denial of service (infinite loop) via a crafted FSG packed executable.
CVE-2005-0138 1 Sgi 1 Irix 2024-11-21 N/A
rpc.mountd in SGI IRIX 6.5.25, 6.5.26, and 6.5.27 does not correctly allow access to anonymous clients that connect from a system whose hostname can not be determined. NOTE: while this issue occurs in a security mechanism, there is no apparent attacker role and probably does not satisfy the CVE definition of a vulnerability.
CVE-1999-0179 1 Microsoft 2 Windows 95, Windows Nt 2024-11-21 N/A
Windows NT crashes or locks up when a Samba client executes a "cd .." command on a file share.