Lucene search
+L

114 matches found

Cvelist
Cvelist
added 2005/02/10 5:00 a.m.36 views

CVE-2005-0298

The DIRECTORY objects in Oracle 8i through Oracle 10g contain the location of a specific operating system directory, which allows users with read privileges to a DIRECTORY object to obtain sensitive information...

5.9AI score0.01965EPSS
SaveExploits0References4
CVE
CVE
added 2005/02/10 5:00 a.m.71 views

CVE-2005-0298

CVE-2005-0298 concerns Oracle 8i–10g DIRECTORY objects that expose the location of a specific operating system directory. Read access to such a DIRECTORY object can allow a user to obtain sensitive information about the OS directory path, indicating a potential information-disclosure risk. The pr...

5CVSS6.2AI score0.01965EPSS
SaveExploits0References4Affected Software1
Cvelist
Cvelist
added 2004/03/18 5:00 a.m.34 views

CVE-2004-0298

CesarFTP 0.99e allows remote attackers to cause a denial of service CPU consumption via a long RETR parameter...

6.6AI score0.031EPSS
SaveExploits2References3
CVE
CVE
added 2003/05/15 4:00 a.m.65 views

CVE-2003-0298

The CVE-2003-0298 entry concerns the Mozilla IMAP Client (versions 1.3 and 1.4a). A remote malicious IMAP server can trigger denial of service and possibly arbitrary code execution by sending certain large values for literals (and potentially mailbox sizes) that cause integer signedness or intege...

7.5CVSS8.4AI score0.01939EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2003/05/15 4:00 a.m.40 views

CVE-2003-0298

The IMAP Client for Mozilla 1.3 and 1.4a allows remote malicious IMAP servers to cause a denial of service and possibly execute arbitrary code via certain large 1 literal and possibly 2 mailbox size values that cause either integer signedness errors or integer overflow errors...

8.1AI score0.01939EPSS
SaveExploits0References1
NVD
NVD
added 2002/05/31 4:00 a.m.21 views

CVE-2002-0298

ScriptEase MiniWeb Server 0.95 allows remote attackers to cause a denial of service crash via certain HTTP GET requests containing 1 a %2e%2e encoded dot-dot, 2 several /../ dot dot sequences, 3 a missing URI, or 4 several ../ in a URI that does not begin with a / slash character...

5CVSS6.7AI score0.01258EPSS
SaveExploits0References2
CVE
CVE
added 2002/05/03 4:00 a.m.56 views

CVE-2002-0298

Summary: CVE-2002-0298 affects ScriptEase MiniWeb Server 0.95. Vulnerability: remotely trigger a denial of service (crash) via crafted HTTP GET requests that include (1) encoded dot-dot (%2e%2e), (2) multiple /../ sequences, (3) a missing URI, or (4) ..// in a URI that does not start with a slash...

5CVSS7.1AI score0.01258EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2002/03/09 5:00 a.m.29 views

CVE-2000-0298

The unattended installation of Windows 2000 with the OEMPreinstall option sets insecure permissions for the All Users and Default Users directories...

6.7AI score0.01688EPSS
SaveExploits0References3
CVE
CVE
added 2002/03/09 5:00 a.m.62 views

CVE-2000-0298

CVE-2000-0298 concerns Windows 2000 unattended installations using the OEMPreinstall option. The provided sources state that this setup creates insecure permissions on the All Users and Default Users directories, enabling potential local compromise with complete confidentiality, integrity, and av...

7.2CVSS7.1AI score0.01688EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
added 2001/04/04 4:00 a.m.25 views

CVE-2001-0298

Buffer overflow in WebReflex 1.55 HTTPd allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long HTTP GET request...

7.8AI score0.07078EPSS
SaveExploits2References2
CVE
CVE
added 2001/04/04 4:00 a.m.43 views

CVE-2001-0298

CVE-2001-0298 affects WebReflex 1.55 HTTPd. The vulnerability is a buffer overflow triggered by a long HTTP GET request, enabling remote denial of service and potentially arbitrary command execution. The available descriptions from NVD/CVE records confirm the issue but do not specify affected pla...

5CVSS8.1AI score0.07078EPSS
SaveExploits2References2Affected Software1
NVD
NVD
added 2000/04/07 4:00 a.m.21 views

CVE-2000-0298

The unattended installation of Windows 2000 with the OEMPreinstall option sets insecure permissions for the All Users and Default Users directories...

7.2CVSS6.7AI score0.01688EPSS
SaveExploits0References3
CVE
CVE
added 2000/02/04 5:00 a.m.67 views

CVE-1999-0298

The CVE-1999-0298 issue affects ypbind when the -ypset and -ypsetme options are activated in Linux Slackware and SunOS. The underlying vulnerability is a directory traversal attack (".." path) that allows overwriting files. Reported impact includes local and remote attackers able to modify files....

7.5CVSS7.3AI score0.02032EPSS
SaveExploits0References1Affected Software2
NVD
NVD
added 1997/02/05 5:00 a.m.15 views

CVE-1999-0298

ypbind with -ypset and -ypsetme options activated in Linux Slackware and SunOS allows local and remote attackers to overwrite files via a .. dot dot attack...

7.5CVSS0.02032EPSS
SaveExploits0References1
Rows per page
Query Builder