Lucene search
+L

114 matches found

Cvelist
Cvelist
added 2004/07/23 4:0 a.m.29 views

CVE-2004-0720

Safari 1.2.2 does not properly prevent a frame in one domain from injecting content into a frame that belongs to another domain, which facilitates web site spoofing and other attacks, aka the frame injection vulnerability...

6.5AI score0.01258EPSS
SaveExploits0References3
NVD
NVD
added 2003/09/17 4:0 a.m.23 views

CVE-2003-0720

Buffer overflow in PINE before 4.58 allows remote attackers to execute arbitrary code via a malformed message/external-body MIME type...

7.5CVSS7.7AI score0.12886EPSS
SaveExploits2References7
Cvelist
Cvelist
added 2003/09/12 4:0 a.m.31 views

CVE-2003-0720

Buffer overflow in PINE before 4.58 allows remote attackers to execute arbitrary code via a malformed message/external-body MIME type...

7.6AI score0.12886EPSS
SaveExploits2References7
CVE
CVE
added 2003/09/12 4:0 a.m.103 views

CVE-2003-0720

CVE-2003-0720 concerns PINE, a mail client, with a buffer overflow vulnerability in the handling of the message/external-body MIME type. Affected software is PINE prior to version 4.58. The issue allows remote attackers to execute arbitrary code when a user processes a specially crafted e‑mail, p...

7.5CVSS7.6AI score0.12886EPSS
SaveExploits2References7Affected Software1
Debian CVE
Debian CVE
added 2003/09/12 4:0 a.m.35 views

CVE-2003-0720

Buffer overflow in PINE before 4.58 allows remote attackers to execute arbitrary code via a malformed message/external-body MIME type...

7.5CVSS7.6AI score0.12886EPSS
SaveExploits2
CVE
CVE
added 2003/04/02 5:0 a.m.48 views

CVE-2002-0720

Windows 2000 Network Connection Manager (NCM) contains a handler routine that, if configured insecurely, can run under LocalSystem and execute attacker-supplied code. A local user can leverage this to gain full system privileges, per multiple sources (e.g., OpenVAS/Nessus descriptions). Affected ...

7.2CVSS6.5AI score0.02176EPSS
SaveExploits0References4Affected Software2
Cvelist
Cvelist
added 2003/04/02 5:0 a.m.24 views

CVE-2002-0720

A handler routine for the Network Connection Manager NCM in Windows 2000 allows local users to gain privileges via a complex attack that causes the handler to run in the LocalSystem context with user-specified code...

6.4AI score0.02176EPSS
SaveExploits0References4
NVD
NVD
added 2002/09/05 4:0 a.m.23 views

CVE-2002-0720

A handler routine for the Network Connection Manager NCM in Windows 2000 allows local users to gain privileges via a complex attack that causes the handler to run in the LocalSystem context with user-specified code...

7.2CVSS6.4AI score0.02176EPSS
SaveExploits0References4
CVE
CVE
added 2002/03/09 5:0 a.m.64 views

CVE-2001-0720

CVE-2001-0720 affects Internet Explorer 5.1 for Macintosh on Mac OS X. The issue allows remote execution of arbitrary commands by triggering the download of a BinHex or MacBinary file type that is executed if automatic decoding is enabled. The vulnerability arises in how the browser handles certa...

7.5CVSS8AI score0.02092EPSS
SaveExploits0References4Affected Software1
NVD
NVD
added 2001/12/06 5:0 a.m.20 views

CVE-2001-0720

Internet Explorer 5.1 for Macintosh on Mac OS X allows remote attackers to execute arbitrary commands by causing a BinHex or MacBinary file type to be downloaded, which causes the files to be executed if automatic decoding is enabled...

7.5CVSS7.6AI score0.02092EPSS
SaveExploits0References4
Cvelist
Cvelist
added 2001/05/07 4:0 a.m.19 views

CVE-2000-0720

news.cgi in GWScripts News Publisher does not properly authenticate requests to add an author to the author index, which allows remote attackers to add new authors by directly posting an HTTP request to the new.cgi program with an addAuthor parameter, and setting the Referer to the news.cgi progr...

6.7AI score0.06155EPSS
SaveExploits2References3
CVE
CVE
added 2001/05/07 4:0 a.m.50 views

CVE-2000-0720

The vulnerability CVE-2000-0720 affects GWScripts News Publisher (news.cgi and the new.cgi author-adding path). The root cause is improper authentication on author-adding requests, enabling a remote attacker to add new authors by posting to new.cgi with an addAuthor parameter while setting the Re...

5CVSS7.1AI score0.06155EPSS
SaveExploits2References3Affected Software1
NVD
NVD
added 2000/10/20 4:0 a.m.13 views

CVE-2000-0720

news.cgi in GWScripts News Publisher does not properly authenticate requests to add an author to the author index, which allows remote attackers to add new authors by directly posting an HTTP request to the new.cgi program with an addAuthor parameter, and setting the Referer to the news.cgi progr...

5CVSS6.7AI score0.06155EPSS
SaveExploits2References3
CVE
CVE
added 2000/04/18 4:0 a.m.76 views

CVE-1999-0720

The set of connected records confirms a Linux-specific vulnerability in the pt_chown utility: local attackers can modify TTY terminal devices that belong to other users, indicating a local privilege/permission misuse at the device level. The description across sources is consistent (pt_chown affe...

4.6CVSS6.8AI score0.0075EPSS
SaveExploits1References2Affected Software1
Rows per page
Query Builder