Lucene search
+L

107 matches found

Cvelist
Cvelist
added 2010/01/15 7:0 p.m.21 views

CVE-2010-0339

SQL injection vulnerability in the User Links vm19userlinks extension 0.1.1 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

8.4AI score0.01021EPSS
SaveExploits0References1
Check Point Advisories
Check Point Advisories
added 2009/12/14 12:0 a.m.27 views

Oracle Database Server XDB PITRIG_TRUNCATE Procedure Buffer Overflow (CVE-2008-0339)

Oracle Database Server is an enterprise-level relational database application suite. To extend the functionality of the Oracle Database Server, extra packages of related program objects, e.g., procedures, functions, variables, constants, cursors, and exceptions, are provided in order to better...

10CVSS8.3AI score0.1453EPSS
SaveExploits5
Cvelist
Cvelist
added 2009/01/29 6:9 p.m.20 views

CVE-2009-0339

SQL injection vulnerability in incwebblogmanager.asp in DMXReady Blog Manager allows remote attackers to execute arbitrary SQL commands via the itemID parameter in a view action...

8.3AI score0.01002EPSS
SaveExploits2References5
CVE
CVE
added 2009/01/29 6:9 p.m.69 views

CVE-2009-0339

The CVE-2009-0339 entry concerns a SQL injection in inc_webblogmanager.asp of the DMXReady Blog Manager, exploitable via the itemID parameter in a view action. This vulnerability allows remote attackers to execute arbitrary SQL commands, with potential impact on confidentiality, integrity, and av...

7.5CVSS8.6AI score0.01002EPSS
SaveExploits2References5Affected Software1
Saint
Saint
added 2008/02/01 12:0 a.m.59 views

Oracle XDB component PITRIG_TRUNCATE buffer overflow

Added: 02/01/2008 CVE: CVE-2008-0339 BID: 27229 OSVDB: 40300 Background The PITRIGTRUNCATE function is included in the XDB.XDBPITRIGPKG package which is included with Oracle Database. Problem A buffer overflow vulnerability in the PITRIGTRUNCATE function allows remote, authenticated attackers to...

10CVSS7.5AI score0.1453EPSS
SaveExploits5
CVE
CVE
added 2008/01/17 10:0 p.m.68 views

CVE-2008-0339

Oracle Database Server XDB PITRIG_TRUNCATE buffer overflow (CVE-2008-0339) affects Oracle Database Server 10g/10.1.0.5 with XDB.XDB_PITRIG_PKG. A remote, authenticated attacker can exploit a buffer overflow in PITRIG_TRUNCATE by supplying long OWNER/NAME arguments, potentially executing arbitrary...

10CVSS6AI score0.1453EPSS
SaveExploits5References9Affected Software1
CVE
CVE
added 2007/01/18 2:0 a.m.44 views

CVE-2007-0339

The CVE describes a SQL injection in Scriptme SMe FileMailer 1.21 through the login form (index.php). The vulnerability allows remote attackers to execute arbitrary SQL commands via the Password field (ps parameter). Root cause is unsafe handling of input in the login process, enabling database c...

7.5CVSS8.3AI score0.01192EPSS
SaveExploits1References5Affected Software1
CVE
CVE
added 2006/01/21 12:0 a.m.60 views

CVE-2006-0339

CVE-2006-0339 affects BitComet Client 0.60. A buffer overflow in handling a torrent publisher name URI can be triggered remotely by a specially crafted torrent file, potentially allowing arbitrary code execution. Mitigation in the public docs is to update to the latest version of BitComet. Exploi...

7.5CVSS7.5AI score0.04944EPSS
SaveExploits0References11Affected Software1
Kaspersky
Kaspersky
added 2006/01/20 12:0 a.m.30 views

KLA10088 ACE vulnerability in BitComet

A buffer overflow was found in the BitComet. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited from the network via a specially designed publisher URI. Original advisories - Related products BitComet-Client CVE list CVE-2006-0339 high...

7.5CVSS7.9AI score0.04944EPSS
SaveExploits0References2
CVE
CVE
added 2005/02/10 5:0 a.m.61 views

CVE-2005-0339

CVE-2005-0339 describes a buffer overflow in Foxmail 2.0 that can be triggered by a long MAIL FROM command over the network. The consequence is a denial of service and the possibility of arbitrary code execution by a remote attacker. The provided documents do not specify impacted versions beyond ...

10CVSS8.3AI score0.07582EPSS
SaveExploits2References3Affected Software1
NVD
NVD
added 2004/11/23 5:0 a.m.18 views

CVE-2004-0339

Cross-site scripting XSS vulnerability in ViewTopic.php in phpBB, possibly 2.0.6c and earlier, allows remote attackers to execute arbitrary script or HTML as other users via the postorder parameter...

6.8CVSS6.3AI score0.01362EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2004/03/18 5:0 a.m.23 views

CVE-2004-0339

Cross-site scripting XSS vulnerability in ViewTopic.php in phpBB, possibly 2.0.6c and earlier, allows remote attackers to execute arbitrary script or HTML as other users via the postorder parameter...

6.3AI score0.01362EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2003/05/23 4:0 a.m.19 views

CVE-2003-0339

Multiple heap-based buffer overflows in WsMp3 daemon WsMp3d 0.0.10 and earlier allow remote attackers to execute arbitrary code via long HTTP requests...

7.9AI score0.08172EPSS
SaveExploits1References2
CVE
CVE
added 2003/05/23 4:0 a.m.49 views

CVE-2003-0339

CVE-2003-0339 affects the WsMp3 daemon (WsMp3d) 0.0.10 and earlier. The vulnerability consists of multiple heap-based buffer overflows in handling long HTTP requests, enabling remote code execution. According to NVD metrics, it is a NETWORK, LOW-attack complexity, NO authentication requirement vu...

7.5CVSS8.3AI score0.08172EPSS
SaveExploits1References2Affected Software2
NVD
NVD
added 2003/05/22 4:0 a.m.14 views

CVE-2003-0339

Multiple heap-based buffer overflows in WsMp3 daemon WsMp3d 0.0.10 and earlier allow remote attackers to execute arbitrary code via long HTTP requests...

7.5CVSS7.9AI score0.08172EPSS
SaveExploits1References2
CVE
CVE
added 2003/04/02 5:0 a.m.54 views

CVE-2002-0339

Cisco IOS CVE-2002-0339 affects IOS 11.1CC–12.2 with Cisco Express Forwarding (CEF) enabled. The issue leaks fragments of previously processed packets by padding MAC-level packets to match the IP length, using data from earlier packets. Impact is information disclosure via network access; attacke...

5CVSS6.5AI score0.01781EPSS
SaveExploits0References5Affected Software1
Cvelist
Cvelist
added 2003/04/02 5:0 a.m.27 views

CVE-2002-0339

Cisco IOS 11.1CC through 12.2 with Cisco Express Forwarding CEF enabled includes portions of previous packets in the padding of a MAC level packet when the MAC packet's length is less than the IP level packet length...

6.4AI score0.01781EPSS
SaveExploits0References5
NVD
NVD
added 2002/06/25 4:0 a.m.29 views

CVE-2002-0339

Cisco IOS 11.1CC through 12.2 with Cisco Express Forwarding CEF enabled includes portions of previous packets in the padding of a MAC level packet when the MAC packet's length is less than the IP level packet length...

5CVSS6.5AI score0.01781EPSS
SaveExploits0References5
CVE
CVE
added 2001/09/18 4:0 a.m.85 views

CVE-2001-0339

Summary: CVE-2001-0339 corresponds to a Web page spoofing vulnerability in Internet Explorer 5.5 and earlier, where the address bar could display a URL different from the actual page, enabling phishing-type spoofing. The connected OpenVAS entries reference Internet Explorer patches (e.g., 890923/...

7.5CVSS7.5AI score0.15026EPSS
SaveExploits0References6Affected Software1
Cvelist
Cvelist
added 2001/09/18 4:0 a.m.45 views

CVE-2001-0339

Internet Explorer 5.5 and earlier allows remote attackers to display a URL in the address bar that is different than the URL that is actually being displayed, which could be used in web site spoofing attacks, aka the "Web page spoofing vulnerability."...

7.5AI score0.15026EPSS
SaveExploits0References6
Rows per page
Query Builder