Lucene search
+L

81 matches found

NVD
NVD
added 2009/02/22 10:30 p.m.22 views

CVE-2009-0679

Cross-site scripting XSS vulnerability in the Your Account module in RavenNuke 2.30 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

4.3CVSS5.7AI score0.01062EPSS
Exploits1References3
Cvelist
Cvelist
added 2009/02/22 10:0 p.m.23 views

CVE-2009-0679

Cross-site scripting XSS vulnerability in the Your Account module in RavenNuke 2.30 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

5.7AI score0.01062EPSS
Exploits1References3
CVE
CVE
added 2009/02/22 10:0 p.m.45 views

CVE-2009-0679

Technical details (affected software, component, vectors, and impact) are not publicly available in the provided documents. Monitor for updates as new information may emerge.

4.3CVSS5.8AI score0.01062EPSS
Exploits1References3Affected Software1
CVE
CVE
added 2008/02/12 12:0 a.m.50 views

CVE-2008-0679

CVE-2008-0679 describes a reflected XSS in BlogPHP 2.0's index.php via the search parameter. The vulnerability affects BlogPHP 2.0 and can allow injection of arbitrary script/HTML. The provided documents do not specify a patch or workaround; no exploitation status is given. Related entries (CVE-2...

4.3CVSS5.6AI score0.01507EPSS
Exploits0References3Affected Software1
CVE
CVE
added 2007/02/03 1:0 a.m.52 views

CVE-2007-0679

CVE-2007-0679 describes a PHP remote file inclusion in lang/leslangues.php of Nicolas Grandjean’s PHPMyRing 4.1.3b and earlier. The vulnerability allows an attacker to cause the PHP interpreter to include a remote file by supplying a URL via the fichier parameter, enabling arbitrary PHP code exec...

7.5CVSS7.6AI score0.0267EPSS
Exploits1References5Affected Software1
CVE
CVE
added 2006/02/16 8:0 p.m.55 views

CVE-2006-0679

PHP-Nuke 7.8 and earlier is vulnerable to a SQL injection in the Your_Account module (index.php) via the username field, enabling remote attackers to manipulate SQL queries. The vulnerability is demonstrated in the Your_Account workflow (e.g., new_user) where user input is not properly sanitized ...

7.5CVSS8.3AI score0.03581EPSS
Exploits2References9Affected Software1
CVE
CVE
added 2005/03/07 5:0 a.m.47 views

CVE-2005-0679

CVE-2005-0679 describes a PHP remote file inclusion in the Tell A Friend Script. The vulnerability is in tell_a_friend.inc.php, where the script_root parameter can reference a URL on a remote server, allowing arbitrary PHP code execution. Affected versions include Tell A Friend Script 2.7 (before...

7.5CVSS8AI score0.01917EPSS
Exploits0References7Affected Software1
NVD
NVD
added 2004/08/06 4:0 a.m.16 views

CVE-2004-0679

The IP cloaking feature cloak.c in UnrealIRCd 3.2, and possibly other versions, uses a weak hashing scheme to hide IP addresses, which could allow remote attackers to use brute force methods to gain other user's IP addresses...

5CVSS6.9AI score0.01569EPSS
Exploits0References6
Cvelist
Cvelist
added 2004/07/13 4:0 a.m.22 views

CVE-2004-0679

The IP cloaking feature cloak.c in UnrealIRCd 3.2, and possibly other versions, uses a weak hashing scheme to hide IP addresses, which could allow remote attackers to use brute force methods to gain other user's IP addresses...

6.9AI score0.01569EPSS
Exploits0References6
CVE
CVE
added 2004/07/13 4:0 a.m.54 views

CVE-2004-0679

CVE-2004-0679 concerns UnrealIRCd 3.2 (and possibly other versions) where the IP cloaking feature (cloak.c) uses a weak hashing scheme to hide IP addresses. This flaw could allow remote attackers to perform brute force attempts to reveal other users’ IP addresses. Multiple connected sources (NVD ...

5CVSS7AI score0.01569EPSS
Exploits0References6Affected Software1
CVE
CVE
added 2003/08/15 4:0 a.m.46 views

CVE-2003-0679

CVE-2003-0679 concerns a vulnerability in the libcpr library used by SGI’s Checkpoint/Restart (cpr) on IRIX 6.5.x. The issue, reported as a local vulnerability, permits users to truncate or overwrite certain files for which they lack permissions. The SGI Security Advisory 20030802-01-P explains t...

2.1CVSS6.3AI score0.003EPSS
Exploits0References1Affected Software1
CVE
CVE
added 2003/04/02 5:0 a.m.65 views

CVE-2002-0679

CVE-2002-0679 concerns the CDE ToolTalk RPC database server, rpc.ttdbserverd, which contains a heap buffer overflow vulnerability triggered by an argument to the _TT_CREATE_FILE() procedure. A remote attacker could exploit this to execute arbitrary code or cause a denial of service, typically run...

10CVSS7.9AI score0.23256EPSS
Exploits0References11Affected Software2
Cvelist
Cvelist
added 2003/04/02 5:0 a.m.20 views

CVE-2002-0679

Buffer overflow in Common Desktop Environment CDE ToolTalk RPC database server rpc.ttdbserverd allows remote attackers to execute arbitrary code via an argument to the TTCREATEFILE procedure...

7.9AI score0.23256EPSS
Exploits0References11
Cvelist
Cvelist
added 2001/09/12 4:0 a.m.20 views

CVE-2001-0679

A buffer overflow in InterScan VirusWall 3.23 and 3.3 allows a remote attacker to execute arbitrary code by sending a long HELO command to the server...

8AI score0.16027EPSS
Exploits1References5
CVE
CVE
added 2001/09/12 4:0 a.m.53 views

CVE-2001-0679

CVE-2001-0679 describes a buffer overflow in InterScan VirusWall 3.23 and 3.3 . A remote attacker can trigger arbitrary code execution by sending a long HELO command to the server. The connected records confirm the vulnerable component and the nature of the flaw, but do not provide versions beyon...

10CVSS8.4AI score0.16027EPSS
Exploits1References5Affected Software1
CVE
CVE
added 2001/01/22 5:0 a.m.52 views

CVE-2000-0679

The CVE-2000-0679 issue affects the CVS 1.10.8 client, where the client trusts pathnames received from the CVS server. Root cause: pathname handling allows the server to influence file creation. Impact: potential to create arbitrary files on the client. No remediation details are provided in the ...

2.1CVSS7AI score0.0072EPSS
Exploits1References2Affected Software1
Cvelist
Cvelist
added 2001/01/22 5:0 a.m.23 views

CVE-2000-0679

The CVS 1.10.8 client trusts pathnames that are provided by the CVS server, which allows the server to force the client to create arbitrary files...

6.7AI score0.0072EPSS
Exploits1References2
NVD
NVD
added 2000/10/20 4:0 a.m.17 views

CVE-2000-0679

The CVS 1.10.8 client trusts pathnames that are provided by the CVS server, which allows the server to force the client to create arbitrary files...

2.1CVSS6.7AI score0.0072EPSS
Exploits1References2
CVE
CVE
added 2000/10/13 4:0 a.m.52 views

CVE-1999-0679

The CVE-1999-0679 issue affects the hybrid-6 IRC server (EFnet) and is caused by a buffer overflow in the m_invite option, enabling remote command execution. Multiple sources (Red Hat CVE entry, CVE/NVD records) corroborate that the vulnerability arises from a buffer overflow in the hybrid-6 serv...

7.5CVSS7.9AI score0.03265EPSS
Exploits0References2Affected Software1
Cvelist
Cvelist
added 2000/10/13 4:0 a.m.24 views

CVE-1999-0679

Buffer overflow in hybrid-6 IRC server commonly used on EFnet allows remote attackers to execute commands via minvite invite option...

7.5AI score0.03265EPSS
Exploits0References2
Rows per page
Query Builder