Lucene search
+L

89 matches found

NVD
NVD
added 2004/11/23 5:00 a.m.19 views

CVE-2004-0332

Extremail 1.5.9 does not check passwords correctly when they are all digits or begin with a digit, which allows remote attackers to gain privileges...

10CVSS6.9AI score0.02508EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2004/03/18 5:00 a.m.22 views

CVE-2004-0332

Extremail 1.5.9 does not check passwords correctly when they are all digits or begin with a digit, which allows remote attackers to gain privileges...

6.9AI score0.02508EPSS
SaveExploits0References3
CVE
CVE
added 2004/03/18 5:00 a.m.54 views

CVE-2004-0332

Extremail 1.5.9 contains a password validation flaw where passwords that are all digits or start with a digit bypass checks, enabling remote privilege escalation. Affected software: Extremail 1.5.9. Root cause: improper password verification logic for digit-only or digit-leading passwords. Impact...

10CVSS7.3AI score0.02508EPSS
SaveExploits0References3Affected Software1
CVE
CVE
added 2003/05/22 4:00 a.m.58 views

CVE-2003-0332

The CVE-2003-0332 vulnerability affects BadBlue ISAPI extension in versions 1.7 through 2.2 (potentially earlier). The issue arises when the ISAPI extension modifies the first two letters of a filename extension after a security check, allowing remote attackers to bypass authentication by using a...

7.6CVSS7AI score0.06985EPSS
SaveExploits2References2Affected Software1
CVE
CVE
added 2002/05/03 4:00 a.m.58 views

CVE-2002-0332

The CVE-2002-0332 issue affects xtell/xtelld (Debian xtell package) and is described to allow remote code execution through three vectors: (1) a long DNS hostname obtained via reverse DNS, (2) a long AUTH string, and (3) certain data in the xtell request, across xtell versions 1.91.1 and earlier ...

7.5CVSS7.7AI score0.05343EPSS
SaveExploits1References4Affected Software1
CVE
CVE
added 2001/05/24 4:00 a.m.55 views

CVE-2001-0332

Internet Explorer 5.5 and earlier are vulnerable to a Frame Domain Verification flaw where an attacker can read local files by abusing frame domain checks via MSScriptControl.ScriptControl and GetObject. Affected product: IE up to version 5.5 and earlier. Root cause: improper domain verification ...

5CVSS6.5AI score0.05697EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2000/10/13 4:00 a.m.21 views

CVE-2000-0332

UltraBoard.pl or UltraBoard.cgi CGI scripts in UltraBoard 1.6 allows remote attackers to read arbitrary files via a pathname string that includes a dot dot .. and ends with a null byte...

6.7AI score0.03257EPSS
SaveExploits2References4
CVE
CVE
added 2000/10/13 4:00 a.m.64 views

CVE-2000-0332

UltraBoard 1.6 is affected by a path traversal in UltraBoard.pl/UltraBoard.cgi that allows remote attackers to read arbitrary files by supplying a pathname containing .. followed by a null byte. The vulnerability is described as arbitrary file access via this traversal vector; no exploitation det...

5CVSS7.1AI score0.03257EPSS
SaveExploits2References4Affected Software1
CVE
CVE
added 1999/09/29 4:00 a.m.78 views

CVE-1999-0332

Technical details about CVE-1999-0332 are not publicly available in the provided documents. Monitor for updates for any affected products, vulnerable components, or concrete remediation guidance.

7.5CVSS8AI score0.12896EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder