Lucene search
+L

96 matches found

Tenable Nessus
Tenable Nessus
added 2005/02/16 12:00 a.m.74 views

HP-UX PHNE_26771 : HP-UX Running ARPA Transport, Advisory, RFC 1948 ISN Randomization (HPSBUX00205 SSRT080009 rev.3)

s700800 11.00 cumulative ARPA Transport patch : TCP Initial Sequence Number ISN randomization specified in RFC 1948 is available for HP-UX. References: CVE-2001-0328, CERT CA-2001-09. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and patch checks in this plugin were...

5CVSS7.3AI score0.18125EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
added 2005/02/16 12:00 a.m.47 views

HP-UX PHNE_26101 : HP-UX Running ARPA Transport, Advisory, RFC 1948 ISN Randomization (HPSBUX00205 SSRT080009 rev.3)

s700800 11.04 VVOS cumulative ARPA Transport patch : TCP Initial Sequence Number ISN randomization specified in RFC 1948 is available for HP-UX. References: CVE-2001-0328, CERT CA-2001-09. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and patch checks in this plugin we...

5CVSS7.3AI score0.18125EPSS
SaveExploits1References2
NVD
NVD
added 2004/11/23 5:00 a.m.11 views

CVE-2004-0328

Gigabyte Gn-B46B 2.4Ghz wireless broadband router firmware 1.003.00 allows local users on the same local network as the router to bypass authentication by using a copy of the router's html menu on a separate system...

7.2CVSS6.6AI score0.00358EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2004/03/18 5:00 a.m.19 views

CVE-2004-0328

Gigabyte Gn-B46B 2.4Ghz wireless broadband router firmware 1.003.00 allows local users on the same local network as the router to bypass authentication by using a copy of the router's html menu on a separate system...

6.6AI score0.00358EPSS
SaveExploits0References3
CVE
CVE
added 2004/03/18 5:00 a.m.37 views

CVE-2004-0328

CVE-2004-0328 affects Gigabyte Gn-B46B 2.4Ghz wireless broadband router firmware 1.003.00. The vulnerability lets local network users bypass authentication by using a copy of the router’s HTML menu on a separate system, effectively gaining unauthorized access. No further exploitation details are ...

7.2CVSS7AI score0.00358EPSS
SaveExploits0References3Affected Software1
NVD
NVD
added 2003/06/09 4:00 a.m.26 views

CVE-2003-0328

EPIC IRC Client EPIC4 pre2.002, pre2.003, and possibly later versions, allows remote malicious IRC servers to cause a denial of service crash and possibly execute arbitrary code via a CTCP request from a large nickname, which causes an incorrect length calculation...

7.5CVSS7.5AI score0.08618EPSS
SaveExploits1References4
OSV
OSV
added 2003/06/09 4:00 a.m.9 views

CVE-2003-0328

EPIC IRC Client EPIC4 pre2.002, pre2.003, and possibly later versions, allows remote malicious IRC servers to cause a denial of service crash and possibly execute arbitrary code via a CTCP request from a large nickname, which causes an incorrect length calculation...

7.5AI score
SaveExploits0References5
CVE
CVE
added 2003/05/22 4:00 a.m.84 views

CVE-2003-0328

CVE-2003-0328 describes a remote denial-of-service and potential arbitrary-code execution in EPIC IRC Client (EPIC4) when connecting to a malicious IRC server. The issue stems from a CTCP response with a large nickname that leads to an incorrect length calculation, enabling a buffer overrun. Publ...

7.5CVSS7.4AI score0.08618EPSS
SaveExploits1References4Affected Software1
Debian CVE
Debian CVE
added 2003/05/22 4:00 a.m.38 views

CVE-2003-0328

EPIC IRC Client EPIC4 pre2.002, pre2.003, and possibly later versions, allows remote malicious IRC servers to cause a denial of service crash and possibly execute arbitrary code via a CTCP request from a large nickname, which causes an incorrect length calculation...

7.5CVSS7.3AI score0.08618EPSS
SaveExploits1
NVD
NVD
added 2002/06/25 4:00 a.m.26 views

CVE-2002-0328

Cross-site scripting vulnerability in Ikonboard 3.0.1 allows remote attackers to execute arbitrary script as other Ikonboard users and steal cookies via Javascript in an IMG tag...

7.5CVSS6.9AI score0.05406EPSS
SaveExploits1References2
Cvelist
Cvelist
added 2001/05/24 4:00 a.m.36 views

CVE-2001-0328

TCP implementations that use random increments for initial sequence numbers ISN can allow remote attackers to perform session hijacking or disruption by injecting a flood of packets with a range of ISN values, one of which may match the expected ISN...

7.5AI score0.18125EPSS
SaveExploits1References8
CVE
CVE
added 2001/05/24 4:00 a.m.87 views

CVE-2001-0328

CVE-2001-0328 describes a vulnerability in TCP initial sequence number (ISN) generation where random increments can enable remote attackers to hijack sessions or disrupt traffic by sending a flood of packets with varying ISNs. Connected documents show this is discussed across multiple UNIX system...

5CVSS7.4AI score0.18125EPSS
SaveExploits1References8
CVE
CVE
added 2000/06/02 4:00 a.m.83 views

CVE-2000-0328

CVE-2000-0328 refers to Windows NT 4.0 where TCP initial sequence numbers (ISNs) are generated predictably, enabling spoofing or hijacking of TCP sessions. Connected sources expand the scope to note that several TCP/IP stacks have been observed with weak ISN generation and that attacks can disrup...

5CVSS7.5AI score0.24661EPSS
SaveExploits0References3Affected Software1
CVE
CVE
added 1999/09/29 4:00 a.m.65 views

CVE-1999-0328

The CVE-1999-0328 entry covers a vulnerability in SGI that allows local users to gain root privileges via the SGI permissions program. The connected documents reiterate the impact as local privilege escalation but do not provide product version details, root-cause specifics beyond the involvement...

7.2CVSS7.4AI score0.00679EPSS
SaveExploits1References1Affected Software1
NVD
NVD
added 1999/08/24 4:00 a.m.28 views

CVE-2000-0328

Windows NT 4.0 generates predictable random TCP initial sequence numbers ISN, which allows remote attackers to perform spoofing and session hijacking...

5CVSS6.7AI score0.24661EPSS
SaveExploits0References3
CVE
CVE
added 1976/01/01 12:00 a.m.47 views

CVE-2013-6488

CVE-2013-0328 describes a cross-site scripting (XSS) vulnerability in Jenkins prior to 1.502 and LTS prior to 1.480.3, allowing remote attackers to inject arbitrary web script or HTML via unspecified vectors. Affected product: Jenkins (web UI). Underlying cause and exact vector are not detailed i...

6.2AI score
SaveExploits0
Rows per page
Query Builder