Lucene search
+L

78 matches found

CVE
CVE
added 2008/02/15 1:00 a.m.51 views

CVE-2008-0527

Cisco Unified IP Phone 7935/7936 (SCCP firmware) HTTP server DoS vulnerability (CVE-2008-0527) allows remote reboot via crafted HTTP requests. Impact: device restarts, potentially service disruption. Root cause: internal HTTP server handling at TCP port 80 leads to denial of service. Affected pro...

7.8CVSS6.5AI score0.01904EPSS
SaveExploits1References6Affected Software1
NVD
NVD
added 2007/01/26 1:28 a.m.22 views

CVE-2007-0527

SQL injection vulnerability in the isremembered function in class.login.php in Website Baker 2.6.5 and earlier allows remote attackers to execute arbitrary SQL commands via the REMEMBERKEY cookie parameter. NOTE: some of these details are obtained from third party information...

6.8CVSS8.3AI score0.01378EPSS
SaveExploits1References7
UbuntuCve
UbuntuCve
added 2006/02/02 11:02 a.m.50 views

CVE-2006-0527

BIND 4 BIND4 and BIND 8 BIND8, if used as a target forwarder, allows remote attackers to gain privileged access via a "Kashpureff-style DNS cache corruption" attack...

7.5CVSS5.9AI score0.08185EPSS
SaveExploits0References1
OSV
OSV
added 2006/02/02 11:02 a.m.9 views

BELL-CVE-2006-0527 CVE-2006-0527 does not affect BellSoft software

Bulletin has no description...

7.5CVSS5.8AI score0.08185EPSS
SaveExploits0References1
CVE
CVE
added 2006/02/02 11:00 a.m.63 views

CVE-2006-0527

CVE-2006-0527 affects BIND 4 and BIND 8 when used as a target forwarder; it describes a Kashpureff-style DNS cache corruption that allows remote attackers to gain privileged access. The connected sources corroborate the same vulnerability description across NVD, CVE records, and repository entrie...

7.5CVSS6.8AI score0.08185EPSS
SaveExploits0References13Affected Software1
Cvelist
Cvelist
added 2006/02/02 11:00 a.m.35 views

CVE-2006-0527

BIND 4 BIND4 and BIND 8 BIND8, if used as a target forwarder, allows remote attackers to gain privileged access via a "Kashpureff-style DNS cache corruption" attack...

6.8AI score0.08185EPSS
SaveExploits0References13
Cvelist
Cvelist
added 2005/02/25 5:00 a.m.54 views

CVE-2005-0527

Firefox 1.0 allows remote attackers to execute arbitrary code via plugins that load "privileged content" into frames, as demonstrated using certain XUL events when a user drags a scrollbar two times, aka "Firescrolling."...

7.3AI score0.07322EPSS
SaveExploits1References10
CVE
CVE
added 2005/02/25 5:00 a.m.112 views

CVE-2005-0527

CVE-2005-0527 affects Firefox 1.0 (Mozilla/Firefox family) where plugins can load privileged content into frames, enabling remote code execution as demonstrated by Firescrolling when a user drags a scrollbar twice. Connected advisories show this as part of broader Mozilla/XPCOM plugin access issu...

5.1CVSS7.3AI score0.07322EPSS
SaveExploits1References10Affected Software1
CVE
CVE
added 2004/06/08 4:00 a.m.66 views

CVE-2004-0527

CVE-2004-0527 affects KDE Konqueror 2.1.1 and 2.2.2. The issue allows remote attackers to spoof a legitimate URL in the status bar by using A HREF tags with modified alt values that point to the legitimate site, combined with an image map whose href points to the malicious site, enabling a phishi...

5CVSS7AI score0.05762EPSS
SaveExploits2References3Affected Software1
CVE
CVE
added 2002/06/11 4:00 a.m.50 views

CVE-2002-0527

Watchguard SOHO firewall before 5.0.35 is affected by a vulnerability where a remotely sent packet with bad IP options can cause the device to crash and reboot. The issue arises in the IP option handling path of the firewall, leading to a denial of service. No specific exploit details, affected v...

5CVSS7AI score0.01632EPSS
SaveExploits0References4Affected Software1
CVE
CVE
added 2002/03/09 5:00 a.m.67 views

CVE-2001-0527

Affected software: DCScripts DCForum (versions 2000 and earlier). The vulnerability arises from input handling in the registration form: an attacker can insert pipe symbols (|) and newlines into the last name, which creates an extra entry in the registration database and yields additional privile...

10CVSS7.2AI score0.04539EPSS
SaveExploits2References5Affected Software2
Cvelist
Cvelist
added 2002/03/09 5:00 a.m.35 views

CVE-2001-0527

DCScripts DCForum versions 2000 and earlier allow a remote attacker to gain additional privileges by inserting pipe symbols | and newlines into the last name in the registration form, which will create an extra entry in the registration database...

6.8AI score0.04539EPSS
SaveExploits2References5
CVE
CVE
added 2000/07/12 4:00 a.m.53 views

CVE-2000-0527

The CVE-2000-0527 entry concerns the MailStudio 2000 (and earlier) product where the CGI program userreg.cgi is vulnerable. An attacker could remotely execute arbitrary commands by injecting shell metacharacters, enabling full compromise of affected systems. The provided sources consistently desc...

10CVSS8.1AI score0.09923EPSS
SaveExploits1References2Affected Software1
Cvelist
Cvelist
added 2000/07/12 4:00 a.m.29 views

CVE-2000-0527

userreg.cgi CGI program in MailStudio 2000 2.0 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters...

7.7AI score0.09923EPSS
SaveExploits1References2
NVD
NVD
added 2000/06/09 4:00 a.m.18 views

CVE-2000-0527

userreg.cgi CGI program in MailStudio 2000 2.0 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters...

10CVSS7.7AI score0.09923EPSS
SaveExploits1References2
Cvelist
Cvelist
added 2000/02/04 5:00 a.m.39 views

CVE-1999-0527

The permissions for system-critical data in an anonymous FTP account are inappropriate. For example, the root directory is writeable by world, a real password file is obtainable, or executable commands such as "ls" can be overwritten...

7AI score0.01957EPSS
SaveExploits0References1
CVE
CVE
added 2000/02/04 5:00 a.m.178 views

CVE-1999-0527

CVE-1999-0527 describes insecure permissions for data in an anonymous FTP account, allowing world-writable root directories, access to the password file, or overwriting executable commands (e.g., ls). The issue is documented across multiple sources (Red Hat CVE page and OpenVAS NASL) with the roo...

10CVSS7AI score0.01957EPSS
SaveExploits0References1
NVD
NVD
added 1999/01/01 5:00 a.m.30 views

CVE-1999-0527

The permissions for system-critical data in an anonymous FTP account are inappropriate. For example, the root directory is writeable by world, a real password file is obtainable, or executable commands such as "ls" can be overwritten...

10CVSS7AI score0.01957EPSS
SaveExploits0References1
Rows per page
Query Builder