Lucene search
+L

30 matches found

zdt
zdt
added 2007/06/22 12:00 a.m.24 views

Powl 0.94 (htmledit.php) Remote File Inclusion Vulnerability

Exploit for unknown platform in category web applications ============================================================ Powl 0.94 htmledit.php Remote File Inclusion Vulnerability ============================================================ !/usr/bin/perl POWL - 0.94 - Remote File Inclusion Exploit...

7.1AI score
SaveExploits0
Prion
Prion
added 2006/05/19 9:02 p.m.18 views

Format string

Format string vulnerability in Dia 0.94 allows user-assisted attackers to cause a denial of service crash and possibly execute arbitrary code by triggering errors or warnings, as demonstrated via format string specifiers in a .bmp filename. NOTE: the original exploit was demonstrated through a...

5.1CVSS7.5AI score0.07628EPSS
SaveExploits2References19Affected Software1
UbuntuCve
UbuntuCve
added 2006/05/19 9:02 p.m.28 views

CVE-2006-2480

Format string vulnerability in Dia 0.94 allows user-assisted attackers to cause a denial of service crash and possibly execute arbitrary code by triggering errors or warnings, as demonstrated via format string specifiers in a .bmp filename. NOTE: the original exploit was demonstrated through a...

5.1CVSS6.2AI score0.07628EPSS
SaveExploits2References2
OSV
OSV
added 2006/05/19 9:02 p.m.13 views

DEBIAN-CVE-2006-2480

Format string vulnerability in Dia 0.94 allows user-assisted attackers to cause a denial of service crash and possibly execute arbitrary code by triggering errors or warnings, as demonstrated via format string specifiers in a .bmp filename. NOTE: the original exploit was demonstrated through a...

5.1CVSS7.8AI score0.07628EPSS
SaveExploits2References1
NVD
NVD
added 2006/05/19 9:02 p.m.15 views

CVE-2006-2480

Format string vulnerability in Dia 0.94 allows user-assisted attackers to cause a denial of service crash and possibly execute arbitrary code by triggering errors or warnings, as demonstrated via format string specifiers in a .bmp filename. NOTE: the original exploit was demonstrated through a...

5.1CVSS7.3AI score0.07628EPSS
SaveExploits2References19
Debian CVE
Debian CVE
added 2006/05/19 9:00 p.m.23 views

CVE-2006-2480

Format string vulnerability in Dia 0.94 allows user-assisted attackers to cause a denial of service crash and possibly execute arbitrary code by triggering errors or warnings, as demonstrated via format string specifiers in a .bmp filename. NOTE: the original exploit was demonstrated through a...

5.1CVSS7.3AI score0.07628EPSS
SaveExploits2
CVE
CVE
added 2006/05/19 9:00 p.m.73 views

CVE-2006-2480

Dia (0.94) is affected by a format-string vulnerability (CVE-2006-2480) that could allow a remote attacker to cause a crash or potentially execute code by crafted input (e.g., a crafted .dia/.bmp filename). Several connected advisories confirm this issue and reference CVE-2006-2453 as well, with ...

5.1CVSS7.3AI score0.07628EPSS
SaveExploits2References19Affected Software1
CVE
CVE
added 2005/10/05 4:00 a.m.80 views

CVE-2005-2966

CVE-2005-2966 concerns the Python SVG import plugin in dia (diasvg_import.py) affecting DIA 0.94 and earlier. A crafted SVG file could allow user‑assisted attackers to execute arbitrary Python code via the xfig/svg import path. Debian/DSA-847-1 and related advisories document three buffer‑overflo...

5.1CVSS7AI score0.02614EPSS
SaveExploits1References13Affected Software1
Cvelist
Cvelist
added 2005/10/05 4:00 a.m.33 views

CVE-2005-2966

The Python SVG import plugin diasvgimport.py for DIA 0.94 and earlier allows user-assisted attackers to execute arbitrary commands via a crafted SVG file...

7AI score0.02614EPSS
SaveExploits1References13
Debian CVE
Debian CVE
added 2005/10/05 4:00 a.m.57 views

CVE-2005-2966

The Python SVG import plugin diasvgimport.py for DIA 0.94 and earlier allows user-assisted attackers to execute arbitrary commands via a crafted SVG file...

5.1CVSS7.1AI score0.02614EPSS
SaveExploits1
Rows per page
Query Builder