Lucene search
+L

140 matches found

Prion
Prion
added 2007/10/18 8:17 p.m.27 views

Format string

Format string vulnerability in the logging function in the Oracle OPMN daemon, as used on Oracle Enterprise Grid Console server 10.2.0.1, allows remote attackers to execute arbitrary code via format string specifiers in the URI in an HTTP request to port 6003, aka Oracle reference number 6296175...

10CVSS7.5AI score0.07721EPSS
SaveExploits1References3Affected Software1
CVE
CVE
added 2007/01/17 2:00 a.m.76 views

CVE-2007-0280

CVE-2007-0280 describes a buffer overflow in Oracle Process Mgmt & Notification (OPMN01) affecting Oracle HTTP Server 9.0.1.5; Application Server 9.0.4.3 and 10.1.2.x; and Collaboration Suite 9.0.4.2 and 10.1.2. Oracle notes in the description that OPMN01 is believed to be the ONS buffer overflow...

7.5CVSS9.1AI score0.03171EPSS
SaveExploits0References8Affected Software3
NVD
NVD
added 2006/01/18 11:03 a.m.24 views

CVE-2006-0280

Unspecified vulnerability in Oracle PeopleSoft Enterprise Portal 8.4 Bundle 15, 8.8 Bundle 10, and 8.9 Bundle 2 has unspecified impact and attack vectors, as identified by Oracle Vuln PSE01...

10CVSS6.3AI score0.04547EPSS
SaveExploits0References9
CVE
CVE
added 2006/01/18 11:00 a.m.46 views

CVE-2006-0280

Technical details about CVE-2006-0280 are not publicly available in the provided documents. Monitor for updates from NVD/Oracle advisories for affected versions, impact, and mitigation.

10CVSS6.3AI score0.04547EPSS
SaveExploits0References9Affected Software1
Cvelist
Cvelist
added 2006/01/18 11:00 a.m.31 views

CVE-2006-0280

Unspecified vulnerability in Oracle PeopleSoft Enterprise Portal 8.4 Bundle 15, 8.8 Bundle 10, and 8.9 Bundle 2 has unspecified impact and attack vectors, as identified by Oracle Vuln PSE01...

6.3AI score0.04547EPSS
SaveExploits0References9
Cvelist
Cvelist
added 2005/02/10 5:00 a.m.27 views

CVE-2005-0280

Format string vulnerability in Soldner Secret Wars 30830 and earlier allows remote attackers to cause a denial of service server crash and possibly execute arbitrary code via format string specifiers in a message...

7.8AI score0.04546EPSS
SaveExploits2References4
CVE
CVE
added 2005/02/10 5:00 a.m.44 views

CVE-2005-0280

CVE-2005-0280: A format-string vulnerability in Soldner Secret Wars (version 30830 and earlier) affects the server’s message handling. The flaw allows remote attackers to trigger a denial of service (server crash) and potentially execute arbitrary code via format string specifiers in a message. T...

7.5CVSS8.1AI score0.04546EPSS
SaveExploits2References4Affected Software1
NVD
NVD
added 2004/11/23 5:00 a.m.19 views

CVE-2004-0280

Caucho Technology Resin 2.1.12 allows remote attackers to view JSP source via an HTTP request to a .jsp file that ends in a "%20" encoded space character, e.g. index.jsp%20...

5CVSS6.6AI score0.01531EPSS
SaveExploits1References3
CVE
CVE
added 2004/03/18 5:00 a.m.53 views

CVE-2004-0280

CVE-2004-0280 affects Caucho Technology Resin 2.1.12, where an attacker can remotely view JSP source by issuing an HTTP request to a .jsp file that ends with an encoded space (for example index.jsp%20). The underlying issue allows partial disclosure of source content, as reflected in the CVSS-bas...

5CVSS7AI score0.01531EPSS
SaveExploits1References3Affected Software1
NVD
NVD
added 2003/06/16 4:00 a.m.14 views

CVE-2003-0280

Multiple buffer overflows in the SMTP Service for ESMTP CMailServer 4.0.2003.03.27 allow remote attackers to execute arbitrary code via long 1 MAIL FROM or 2 RCPT TO commands...

10CVSS7.9AI score0.14749EPSS
SaveExploits2References5
Cvelist
Cvelist
added 2003/05/14 4:00 a.m.23 views

CVE-2003-0280

Multiple buffer overflows in the SMTP Service for ESMTP CMailServer 4.0.2003.03.27 allow remote attackers to execute arbitrary code via long 1 MAIL FROM or 2 RCPT TO commands...

7.9AI score0.14749EPSS
SaveExploits2References5
CVE
CVE
added 2002/05/03 4:00 a.m.37 views

CVE-2002-0280

The connected records confirm CVE-2002-0280 affects CodeBlue 4 and earlier, with a buffer overflow that allows remote attackers to execute arbitrary code via a long string in an SMTP reply. The impact is described as remote code execution with partial confidentiality/integrity/availability impact...

7.5CVSS8.4AI score0.04818EPSS
SaveExploits1References2Affected Software1
Cvelist
Cvelist
added 2002/05/03 4:00 a.m.19 views

CVE-2002-0280

Buffer overflow in CodeBlue 4 and earlier, and possibly other versions, allows remote attackers to execute arbitrary code via a long string in an SMTP reply...

8AI score0.04818EPSS
SaveExploits1References2
CVE
CVE
added 2002/03/09 5:00 a.m.59 views

CVE-2001-0280

CVE-2001-0280 : The MERCUR SMTP server 3.30 contains a buffer overflow in the handling of the EXPN command that remote attackers can trigger with a long argument to execute arbitrary commands. The vulnerability is documented in CVE/NVD entries and corroborated by Nessus plugin notes, which descri...

10CVSS7.8AI score0.12966EPSS
SaveExploits2References3Affected Software1
Cvelist
Cvelist
added 2002/03/09 5:00 a.m.29 views

CVE-2001-0280

Buffer overflow in MERCUR SMTP server 3.30 allows remote attackers to execute arbitrary commands via a long EXPN command...

7.8AI score0.12966EPSS
SaveExploits2References3
NVD
NVD
added 2001/05/03 4:00 a.m.18 views

CVE-2001-0280

Buffer overflow in MERCUR SMTP server 3.30 allows remote attackers to execute arbitrary commands via a long EXPN command...

10CVSS7.8AI score0.12966EPSS
SaveExploits2References3
Cvelist
Cvelist
added 2000/04/26 4:00 a.m.29 views

CVE-2000-0280

Buffer overflow in the RealNetworks RealPlayer client versions 6 and 7 allows remote attackers to cause a denial of service via a long Location URL...

6.8AI score0.04594EPSS
SaveExploits2References2
CVE
CVE
added 2000/04/26 4:00 a.m.55 views

CVE-2000-0280

The CVE-2000-0280 entry describes a buffer overflow in RealNetworks RealPlayer client versions 6 and 7. The underlying issue is a vulnerability in handling a long Location URL, which can allow remote attackers to cause a denial of service. Public documentation here notes the affected component as...

2.6CVSS7.2AI score0.04594EPSS
SaveExploits2References2Affected Software1
NVD
NVD
added 2000/04/03 4:00 a.m.20 views

CVE-2000-0280

Buffer overflow in the RealNetworks RealPlayer client versions 6 and 7 allows remote attackers to cause a denial of service via a long Location URL...

2.6CVSS6.8AI score0.04594EPSS
SaveExploits2References2
CVE
CVE
added 2000/01/04 5:00 a.m.70 views

CVE-1999-0280

CVE-1999-0280: Remote command execution in Microsoft Internet Explorer via crafted .lnk and .url files. Affected software: Internet Explorer. Root cause: loading or processing of .lnk/.url shortcuts can execute arbitrary commands with the user’s privileges. Documented across multiple sources (NVD...

7.5CVSS7.6AI score0.15268EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder