Lucene search
+L

125 matches found

CVE
CVE
added 2013/01/17 1:30 a.m.61 views

CVE-2013-0392

Technical details about CVE-2013-0392 are not publicly provided in the supplied documents. No explicit affected products, vulnerable components, impact, or exploitation information are present beyond general reference to Oracle PeopleSoft PeopleTools 8.51/8.52.

4.3CVSS6AI score0.00985EPSS
SaveExploits0References2Affected Software1
Check Point Advisories
Check Point Advisories
added 2012/06/25 12:0 a.m.7 views

Apache Struts 2 CookieInterceptor OGNL Script Injection (CVE-2012-0392)

A code execution vulnerability has been reported in Apache Struts 2...

9.3AI score0.96787EPSS
SaveExploits1
NVD
NVD
added 2012/01/08 3:55 p.m.21 views

CVE-2012-0392

The CookieInterceptor component in Apache Struts before 2.3.1.1 does not use the parameter-name whitelist, which allows remote attackers to execute arbitrary commands via a crafted HTTP Cookie header that triggers Java code execution through a static method...

6.8CVSS9.8AI score0.96787EPSS
SaveExploits1References7
UbuntuCve
UbuntuCve
added 2012/01/08 3:55 p.m.35 views

CVE-2012-0392

The CookieInterceptor component in Apache Struts before 2.3.1.1 does not use the parameter-name whitelist, which allows remote attackers to execute arbitrary commands via a crafted HTTP Cookie header that triggers Java code execution through a static method...

6.8CVSS7.3AI score0.96787EPSS
SaveExploits1References3
CVE
CVE
added 2012/01/08 3:0 p.m.178 views

CVE-2012-0392

CVE-2012-0392 affects Apache Struts: CookieInterceptor does not enforce a parameter-name whitelist, enabling remote code execution via a crafted HTTP Cookie header that can trigger Java code execution through a static method. The Nuclei template confirms this as part of the S2-008 family, describ...

6.8CVSS9.3AI score0.96787EPSS
SaveExploits1References7Affected Software1
Circl
Circl
added 2012/01/06 12:0 a.m.7 views

CVE-2012-0392

creationtimestamp| type| source ---|---|--- 2012-01-06 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/18329...

6.8CVSS7.3AI score0.96787EPSS
SaveExploits1References1
OpenVAS
OpenVAS
added 2011/08/09 12:0 a.m.42 views

CentOS Update for libtiff CESA-2011:0392 centos5 i386

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

9.3CVSS6.2AI score0.07474EPSS
SaveExploits0References2
OpenVAS
OpenVAS
added 2011/04/01 12:0 a.m.34 views

CentOS Update for libtiff CESA-2011:0392 centos4 x86_64

Check for the Version of libtiff OpenVAS Vulnerability Test CentOS Update for libtiff CESA-2011:0392 centos4 x8664 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

9.3CVSS7AI score0.07474EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2011/03/29 12:0 a.m.46 views

RHEL 4 / 5 / 6 : libtiff (RHSA-2011:0392)

The remote Redhat Enterprise Linux 4 / 5 / 6 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2011:0392 advisory. - libtiff: heap-based buffer overflow in thunder decoder ZDI-11-107 CVE-2011-1167 Note that Nessus has not tested for this issue but has...

6.8CVSS8.5AI score0.06233EPSS
SaveExploits0References5
CVE
CVE
added 2011/02/25 11:0 a.m.52 views

CVE-2011-0392

CVE-2011-0392 affects Cisco TelePresence Recording Server 1.6.x with an unauthenticated XML-RPC interface exposed on TCP port 8080. The connected Cisco advisory documents that this XML-RPC Interface vulnerability allows an unauthenticated remote attacker to perform actions that should be restrict...

7.5CVSS7.2AI score0.02388EPSS
SaveExploits0References4Affected Software2
Circl
Circl
added 2010/07/07 12:0 a.m.9 views

CVE-2002-0392

creationtimestamp| type| source ---|---|--- 2010-07-07 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/16782 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/http/apachechunked.rb 2025-02-06 03:13:37+00:00| seen|...

7.5CVSS5.7AI score0.95027EPSS
SaveExploits8References2
OpenVAS
OpenVAS
added 2010/01/28 12:0 a.m.27 views

TheGreenBow IPSec VPN Client Local Stack Overflow Vulnerability

TheGreenBow IPSec VPN Client is prone to a stack overflow vulnerability. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.3CVSS6.9AI score0.05718EPSS
SaveExploits0References2
CVE
CVE
added 2010/01/26 6:0 p.m.58 views

CVE-2010-0392

The GreenBow IPSec VPN Client vulnerability CVE-2010-0392 is a stack-based overflow in vpnconf.exe. A long OpenScriptAfterUp parameter in a .tgb policy file (phase 2) can allow a user‑assisted remote attacker to execute arbitrary code in affected versions 4.51.001 and 4.65.003 (and possibly other...

9.3CVSS8.3AI score0.05718EPSS
SaveExploits0References7Affected Software1
Cvelist
Cvelist
added 2010/01/26 6:0 p.m.22 views

CVE-2010-0392

Stack-based buffer overflow in vpnconf.exe in TheGreenBow IPSec VPN Client 4.51.001, 4.65.003, and possibly other versions, allows user-assisted remote attackers to execute arbitrary code via a long OpenScriptAfterUp parameter in a policy .tgb file, related to "phase 2."...

8.1AI score0.05718EPSS
SaveExploits0References7
Packet Storm
Packet Storm
added 2009/11/26 12:0 a.m.125 views

Apache Win32 Chunked Encoding

$Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'Apache Win32...

7.5CVSS0.3AI score0.95027EPSS
SaveExploits8
CVE
CVE
added 2009/02/03 1:0 a.m.47 views

CVE-2009-0392

The CVE-2009-0392 issue affects Motorola Wimax modem CPEi300 (sysconf.cgi). The vulnerability arises from a directory traversal via the page parameter (".."), allowing remote authenticated users to read arbitrary files. CVSS shows a base score of 6.8 (MEDIUM) with network attack vector, low attac...

6.8CVSS6.4AI score0.02341EPSS
SaveExploits1References3Affected Software1
OpenVAS
OpenVAS
added 2008/09/04 12:0 a.m.19 views

FreeBSD Ports: ppxp

The remote host is missing an update to the system as announced in the referenced advisory. VID 641e8609-cab5-11d9-9aed-000e0c2e438a OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

7.2CVSS9.4AI score0.00399EPSS
SaveExploits0
OpenVAS
OpenVAS
added 2008/09/04 12:0 a.m.24 views

FreeBSD Ports: racoon

The remote host is missing an update to the system as announced in the referenced advisory. VID 40fcf20f-8891-11d8-90d1-0020ed76ef5a OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

5CVSS7.6AI score0.02492EPSS
SaveExploits0
CVE
CVE
added 2008/01/23 2:0 a.m.44 views

CVE-2008-0392

CVE-2008-0392 : Multiple buffer overflows in Microsoft Visual Basic Enterprise Edition 6.0 SP6 allow user-assisted remote attackers to execute arbitrary code via a .dsr file containing a long (1) ConnectionName or (2) CommandName line. The connected documents confirm the affected product/version ...

9.3CVSS7.7AI score0.30457EPSS
SaveExploits1References6Affected Software1
OpenVAS
OpenVAS
added 2008/01/17 12:0 a.m.15 views

Debian Security Advisory DSA 725-1 (ppxp)

The remote host is missing an update to ppxp announced via advisory DSA 725-1. This VT has been deprecated and merged into the VT SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

7.2CVSS9.4AI score0.00399EPSS
SaveExploits0References1
Rows per page
Query Builder