Lucene search
+L

132 matches found

NVD
NVD
added 2011/02/10 6:00 p.m.16 views

CVE-2011-0587

Cross-site scripting XSS vulnerability in Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.2, and 8.x before 8.2.6 on Windows and Mac OS X allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2011-0604...

4.3CVSS5.6AI score0.03155EPSS
SaveExploits0References9
CVE
CVE
added 2011/02/10 5:00 p.m.82 views

CVE-2011-0604

CVE-2011-0604 is an XSS vulnerability in Adobe Reader/Acrobat affecting Windows and macOS: Acrobat/Reader 10.x before 10.0.1, 9.x before 9.4.2, and 8.x before 8.2.6. It allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Mitigation per sources is upgrading to v...

4.3CVSS5.6AI score0.03155EPSS
SaveExploits0References9Affected Software1
CVE
CVE
added 2010/05/14 8:00 p.m.51 views

CVE-2010-0604

Cisco PGW 2200 Softswitch is affected by multiple DoS vulnerabilities in its SIP and MGCP handling (CVE-2010-0604 among others). The SIP implementation can crash the device via malformed/unknown SIP traffic, potentially affecting remote availability. Cisco lists affected releases prior to 9.7(3)S...

7.8CVSS6.7AI score0.02493EPSS
SaveExploits1References3Affected Software1
CVE
CVE
added 2009/02/16 8:00 p.m.58 views

CVE-2009-0604

CVE-2009-0604 affects PHP Director 0.21 and earlier. The vulnerability is a SQL injection in index.php triggered via the searching parameter, allowing remote attackers to execute arbitrary SQL commands. Exploitation and affected version details are supported by multiple sources (NVD, CVE listings...

7.5CVSS8.8AI score0.01126EPSS
SaveExploits2References3Affected Software1
Circl
Circl
added 2009/02/09 12:00 a.m.9 views

CVE-2009-0604

creationtimestamp| type| source ---|---|--- 2009-02-09 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/8014...

7.5CVSS5.8AI score0.01126EPSS
SaveExploits2References1
OpenVAS
OpenVAS
added 2008/09/24 12:00 a.m.20 views

Gentoo Security Advisory GLSA 200406-19 (giFT-FastTrack)

The remote host is missing updates announced in advisory GLSA 200406-19. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5CVSS6.8AI score0.01752EPSS
SaveExploits0References3
OpenVAS
OpenVAS
added 2008/09/24 12:00 a.m.25 views

Gentoo Security Advisory GLSA 200406-19 (giFT-FastTrack)

The remote host is missing updates announced in advisory GLSA 200406-19. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

5CVSS6.7AI score0.01752EPSS
SaveExploits0
CVE
CVE
added 2008/02/06 11:00 a.m.41 views

CVE-2008-0604

The CVE concerns XLight FTP Server (before 2.83). The LDAP authentication feature does not validate blank passwords when used with certain LDAP servers, allowing remote bypass of access restrictions. Affected: XLight FTP Server versions prior to 2.83 using LDAP auth. Impact: potential unauthorize...

6.8CVSS7AI score0.01294EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
added 2008/02/06 11:00 a.m.32 views

CVE-2008-0604

The LDAP authentication feature in XLight FTP Server before 2.83, when used with some unspecified LDAP servers, does not check for blank passwords, which allows remote attackers to bypass intended access restrictions...

7AI score0.01294EPSS
SaveExploits0References3
NVD
NVD
added 2007/01/30 6:28 p.m.20 views

CVE-2007-0604

Cross-site scripting XSS vulnerability in Movable Type MT before 3.34 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to the MTCommentPreviewIsStatic tag, which can open the "comment entry screen," a different vulnerability than CVE-2007-0231...

6.8CVSS5.5AI score0.01088EPSS
SaveExploits0References2
CVE
CVE
added 2007/01/30 6:00 p.m.72 views

CVE-2007-0604

CVE-2007-0604 affects Movable Type (MT) before version 3.34, via the MTCommentPreviewIsStatic tag, enabling cross-site scripting (XSS) by remote attackers. The issue is described as a vulnerability distinct from CVE-2007-0231 and is documented across multiple sources (NVD and related records) wit...

6.8CVSS5.5AI score0.01088EPSS
SaveExploits0References2Affected Software1
Tenable Nessus
Tenable Nessus
added 2006/08/04 12:00 a.m.27 views

CentOS 3 / 4 : ruby (CESA-2006:0604)

Updated ruby packages that fix security issues are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Ruby is an interpreted scripting language for object-oriented programming. A number of flaws were found in the safe-level...

6.4CVSS6.9AI score0.05846EPSS
SaveExploits0References7
Cent OS
Cent OS
added 2006/07/29 11:51 a.m.72 views

irb, ruby security update

CentOS Errata and Security Advisory CESA-2006:0604 Updated ruby packages that fix security issues are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Ruby is an interpreted scripting language for object-oriented programming. A...

6.4CVSS7AI score0.05846EPSS
SaveExploits0References9
RedHat Linux
RedHat Linux
added 2006/07/27 8:36 p.m.38 views

Moderate: Red Hat Security Advisory: ruby security update

Updated ruby packages that fix security issues are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Ruby is an interpreted scripting language for object-oriented programming. A number of flaws were found in the safe-level...

6.4CVSS6.9AI score0.05846EPSS
SaveExploits0References3
NVD
NVD
added 2006/02/08 11:02 p.m.15 views

CVE-2006-0604

check.php in Hinton Design phphg Guestbook 1.2 does not check the user password when authenticating via cookies, which allows remote attackers to gain unauthorized access...

7.5CVSS7AI score0.02659EPSS
SaveExploits1References6
CVE
CVE
added 2006/02/08 11:00 p.m.78 views

CVE-2006-0604

The CVE-2006-0604 issue affects Hinton Design’s phphg Guestbook 1.2. The vulnerability is an authentication bypass in the check.php script where passwords are not checked when identified via cookies, enabling remote attackers to gain unauthorized access. Connected sources confirm a cookie-based b...

7.5CVSS7AI score0.02659EPSS
SaveExploits1References6Affected Software1
CVE
CVE
added 2005/03/01 5:00 a.m.40 views

CVE-2005-0604

CVE-2005-0604 affects lnss.exe in GFI Languard Network Security Scanner 5.0 . The vulnerability is that the program stores the username and password in memory in plaintext, which could allow local administrators to obtain domain administrator credentials. This is the stated impact in the records,...

4.6CVSS6.8AI score0.00416EPSS
SaveExploits1References2Affected Software1
NVD
NVD
added 2004/12/06 5:00 a.m.28 views

CVE-2004-0604

The HTTP client and server in giFT-FastTrack 0.8.6 and earlier allows remote attackers to cause a denial of service crash, possibly via an empty search query, which triggers a NULL dereference...

5CVSS6.6AI score0.01752EPSS
SaveExploits0References6
Cvelist
Cvelist
added 2004/06/30 4:00 a.m.40 views

CVE-2004-0604

The HTTP client and server in giFT-FastTrack 0.8.6 and earlier allows remote attackers to cause a denial of service crash, possibly via an empty search query, which triggers a NULL dereference...

6.5AI score0.01752EPSS
SaveExploits0References6
CVE
CVE
added 2004/06/30 4:00 a.m.105 views

CVE-2004-0604

The CVE-2004-0604 issue affects giFT-FastTrack up to version 0.8.6 (and earlier), where the HTTP client and server can be triggered remotely to crash via an empty search query, causing a NULL dereference and Denial of Service. Public sources in the connected documents confirm a remote DoS impact ...

5CVSS6.5AI score0.01752EPSS
SaveExploits0References6Affected Software1
Rows per page
Query Builder