Lucene search
+L

93 matches found

ATTACKERKB
ATTACKERKB
added 2005/05/02 4:0 a.m.2 views

CVE-2005-0727

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2005-0735. Reason: This candidate is a duplicate of CVE-2005-0735. Notes: All CVE users should reference CVE-2005-0727 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...

10CVSS5.6AI score0.07666EPSS
SaveExploits2References1
NVD
NVD
added 2005/05/02 4:0 a.m.18 views

CVE-2005-0735

newsscript.pl for NewsScript allows remote attackers to gain privileges by setting the mode parameter to admin...

10CVSS6.9AI score0.07666EPSS
SaveExploits2References1
CVE
CVE
added 2005/03/13 5:0 a.m.53 views

CVE-2005-0735

The CVE refers to NewsScript’s newsscript.pl CGI, where an attacker can escalate privileges remotely by sending mode=admin. Affected product: NewsScript (NewsScript.co.uk). Root cause: incomplete access validation in the CGI parameters allowing admin rights to be set via the mode parameter. Impac...

10CVSS7AI score0.07666EPSS
SaveExploits2References1Affected Software1
CVE
CVE
added 2005/03/12 5:0 a.m.32 views

CVE-2005-0727

CVE-2005-0727 is a duplicate of CVE-2005-0735. Connected sources detail a remote privilege-escalation in NewsScript (NewsScript.co.uk) via the CGI parameter mode; setting mode=admin bypasses authentication and allows the attacker to add, delete, or modify news content. This vulnerability affects ...

6.6AI score
SaveExploits0
NVD
NVD
added 2004/07/27 4:0 a.m.17 views

CVE-2004-0735

Buffer overflow in Medal of Honor 1 Allied Assault 1.11v9 and earlier, 2 Breakthrough 2.40b and earlier, and 3 Spearhead 2.15 and earlier, when playing on a Local Area Network LAN, allows remote attackers to execute arbitrary code via vectors such as 1 the getinfo query, 2 the connect packet, and...

7.5CVSS7.8AI score0.62108EPSS
SaveExploits6References3
CVE
CVE
added 2003/09/04 4:0 a.m.53 views

CVE-2003-0735

CVE-2003-0735 affects phpWebSite 0.9.x and earlier, specifically the Calendar module. The root cause is insufficient input validation for calendar events, allowing SQL injection via user-controlled input (e.g., cal_template) and potentially enabling execution of arbitrary SQL with the PHPWebSite ...

7.5CVSS8.2AI score0.01673EPSS
SaveExploits1References3Affected Software1
NVD
NVD
added 2002/08/12 4:0 a.m.21 views

CVE-2002-0735

Format string vulnerability in the logging function in C-Note Squid LDAP authentication module squidauthLDAP 2.0.2 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code by triggering log messages...

7.5CVSS8AI score0.02943EPSS
SaveExploits0References5
CVE
CVE
added 2002/07/26 4:0 a.m.52 views

CVE-2002-0735

CVE-2002-0735 affects the C-Note Squid LDAP authentication module (squid_auth_LDAP) 2.0.2 and earlier. The issue is a format string vulnerability in the logging() function, allowing remote attackers to cause a denial of service and potentially execute arbitrary code by triggering log messages. No...

7.5CVSS8AI score0.02943EPSS
SaveExploits0References5Affected Software3
CVE
CVE
added 2001/10/12 4:0 a.m.49 views

CVE-2001-0735

CVE-2001-0735 affects cfingerd 1.4.3 and earlier. The root cause is a buffer overflow in the code that reads configuration files when ALLOW_LINE_PARSING is enabled, allowing local users to execute arbitrary code via a long line in the .nofinger file. The vulnerability is local, requires no authen...

7.2CVSS7.3AI score0.0164EPSS
SaveExploits4References5Affected Software1
Cvelist
Cvelist
added 2001/10/12 4:0 a.m.25 views

CVE-2001-0735

Buffer overflow in cfingerd 1.4.3 and earlier with the ALLOWLINEPARSING option enabled allows local users to execute arbitrary code via a long line in the .nofinger file...

7.3AI score0.0164EPSS
SaveExploits4References5
Debian CVE
Debian CVE
added 2001/10/12 4:0 a.m.31 views

CVE-2001-0735

Buffer overflow in cfingerd 1.4.3 and earlier with the ALLOWLINEPARSING option enabled allows local users to execute arbitrary code via a long line in the .nofinger file...

7.2CVSS7.2AI score0.0164EPSS
SaveExploits4
CVE
CVE
added 2000/09/21 4:0 a.m.36 views

CVE-2000-0735

Becky! Internet Mail client

5CVSS7.2AI score0.0186EPSS
SaveExploits0References3Affected Software1
CVE
CVE
added 2000/01/04 5:0 a.m.52 views

CVE-1999-0735

CVE-1999-0735 affects KDE K-Mail, where local users can gain privileges via a symlink attack in temporary user directories. The connected documents reiterate this description but do not provide deeper technical details (e.g., affected versions, root cause specifics, exploit steps, or fixes). No r...

4.6CVSS6.9AI score0.00718EPSS
SaveExploits2References2Affected Software1
Rows per page
Query Builder