Lucene search
+L

129 matches found

CVE
CVE
added 2010/02/27 12:00 a.m.121 views

CVE-2010-0760

CVE-2010-0760 is a vulnerability in the Core Design Scriptegrator plugin for Joomla! Affected component: libraries/jquery/js/ui/jsloader.php (parameter: file) and libraries/jquery/js/jsloader.php (parameter: files[]) allow remote attackers to perform directory traversal and include/execute local ...

6.8CVSS7.2AI score0.01858EPSS
SaveIn wildExploits1References3Affected Software1
Cvelist
Cvelist
added 2010/02/27 12:00 a.m.36 views

CVE-2010-0760

Multiple directory traversal vulnerabilities in the Core Design Scriptegrator plugin 1.4.1 for Joomla! allow remote attackers to include and execute arbitrary local files via directory traversal sequences in the 1 file parameter to libraries/jquery/js/ui/jsloader.php and the 2 files parameter to...

7AI score0.01858EPSS
SaveExploits1References3
Circl
Circl
added 2010/02/18 12:00 a.m.8 views

CVE-2010-0760

creationtimestamp| type| source ---|---|--- 2010-02-18 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/11498...

6.8CVSS7.3AI score0.01858EPSS
SaveExploits1References1
CVE
CVE
added 2009/03/03 6:00 p.m.54 views

CVE-2009-0760

CVE-2009-0760 affects Team Board 1.x/2.x where sensitive data is stored under the web root with insufficient access control, enabling remote retrieval of a database via data/team.mdb. The objective evidence describes a partial confidentiality impact (credentials exposure) and a MEDIUM severity (C...

5CVSS6.6AI score0.02459EPSS
SaveExploits2References4Affected Software1
OpenVAS
OpenVAS
added 2009/02/17 12:00 a.m.33 views

Fedora Update for xorg-x11-server FEDORA-2008-0760

Check for the Version of xorg-x11-server OpenVAS Vulnerability Test Fedora Update for xorg-x11-server FEDORA-2008-0760 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify...

9.3CVSS8.5AI score0.05332EPSS
SaveExploits7References2
OpenVAS
OpenVAS
added 2009/02/17 12:00 a.m.21 views

Fedora Update for xorg-x11-server FEDORA-2008-0760

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

9.3CVSS6.8AI score0.05332EPSS
SaveExploits7References2
OpenVAS
OpenVAS
added 2008/09/04 12:00 a.m.26 views

FreeBSD Ports: firefox

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

6.4CVSS6.6AI score0.08827EPSS
SaveExploits1References3
NVD
NVD
added 2008/02/13 9:00 p.m.24 views

CVE-2008-0760

Directory traversal vulnerability in SafeNet Sentinel Protection Server 7.4.1.0 and earlier, and Sentinel Keys Server 1.0.4.0 and earlier, allows remote attackers to read arbitrary files via a ..\ dot dot backslash in the URI. NOTE: this issue reportedly exists because of an incomplete fix for...

5CVSS6.5AI score0.03319EPSS
SaveExploits2References6
CVE
CVE
added 2008/02/13 8:00 p.m.122 views

CVE-2008-0760

Summary: CVE-2008-0760 is a directory traversal vulnerability in SafeNet Sentinel Protection Server <= 7.4.1.0 and Sentinel Keys Server

5CVSS6.5AI score0.03319EPSS
SaveExploits2References6Affected Software2
NVD
NVD
added 2007/02/06 2:28 a.m.21 views

CVE-2007-0760

EQdkp 1.3.1 and earlier authenticates administrative requests by verifying that the HTTP Referer header specifies an admin/ URL, which allows remote attackers to read or modify account names and passwords via a spoofed Referer...

7.5CVSS6.6AI score0.02407EPSS
SaveExploits2References5
CVE
CVE
added 2007/02/06 2:00 a.m.53 views

CVE-2007-0760

CVE-2007-0760 affects EQdkp versions 1.3.1 and earlier. The vulnerability stems from authenticating administrative requests by checking the HTTP Referer for an admin/ URL, which enables remote attackers to read or modify account names and passwords through a spoofed Referer. The provided document...

7.5CVSS6.6AI score0.02407EPSS
SaveExploits2References5Affected Software1
Cvelist
Cvelist
added 2007/02/06 2:00 a.m.29 views

CVE-2007-0760

EQdkp 1.3.1 and earlier authenticates administrative requests by verifying that the HTTP Referer header specifies an admin/ URL, which allows remote attackers to read or modify account names and passwords via a spoofed Referer...

6.6AI score0.02407EPSS
SaveExploits2References5
CVE
CVE
added 2006/02/18 2:00 a.m.52 views

CVE-2006-0760

LightTPD 1.4.8 and earlier; when the web root sits on a case-insensitive filesystem, the system may bypass URL checks and disclose sensitive information by mismatching file extension capitalization (e.g., index.PHP when PHP is enabled only for ".php"). Root cause is a case-insensitive handling of...

2.6CVSS6.5AI score0.0223EPSS
SaveExploits0References6Affected Software1
OSV
OSV
added 2005/05/02 4:00 a.m.11 views

CVE-2005-0760

The TIFF decoder in ImageMagick before 6.0 allows remote attackers to cause a denial of service crash via a crafted TIFF file...

6.1AI score
SaveExploits0References5
Tenable Nessus
Tenable Nessus
added 2005/04/02 12:00 a.m.31 views

Mandrake Linux Security Advisory : ImageMagick (MDKSA-2005:065)

A format string vulnerability was discovered in ImageMagick, in the way it handles filenames. An attacker could execute arbitrary code on a victim's machine provided they could trick them into opening a file with a special name CVE-2005-0397. As well, Andrei Nigmatulin discovered a heap-based...

7.5CVSS6.4AI score0.04378EPSS
SaveExploits1References6
Tenable Nessus
Tenable Nessus
added 2005/03/24 12:00 a.m.37 views

SUSE-SA:2005:017: ImageMagick

The remote host is missing the patch for the advisory SUSE-SA:2005:017 ImageMagick. This update fixes several security issues in the ImageMagick program suite: - A format string vulnerability was found in the display program which could lead to a remote attacker being to able to execute code as t...

7.5CVSS6AI score0.04219EPSS
SaveExploits0References5
NVD
NVD
added 2004/08/18 4:00 a.m.23 views

CVE-2004-0760

Mozilla allows remote attackers to cause Mozilla to open a URI as a different MIME type than expected via a null character %00 in an FTP URI...

6.4CVSS6.3AI score0.08827EPSS
SaveExploits1References9
CVE
CVE
added 2004/08/03 4:00 a.m.70 views

CVE-2004-0760

CVE-2004-0760 describes a MIME-type confusion in Mozilla/Mozilla-based Firefox components triggered by a null character (%00) in an FTP URI, allowing a remote attacker to cause Mozilla to open a URI as a different MIME type. The OpenVAS/SUSE advisories confirm Mozilla-related updates are availabl...

6.4CVSS6.2AI score0.08827EPSS
SaveExploits1References9Affected Software1
NVD
NVD
added 2003/09/17 4:00 a.m.17 views

CVE-2003-0760

Blubster 2.5 allows remote attackers to cause a denial of service crash via a flood of connections to UDP port 701...

5CVSS6.6AI score0.03205EPSS
SaveExploits2References3
CVE
CVE
added 2003/09/12 4:00 a.m.49 views

CVE-2003-0760

CVE-2003-0760 affects Blubster 2.5. The vulnerability lets remote attackers cause a denial of service (crash) by flooding UDP port 701 with connections. Reported impact is partial availability; no further exploitation details, affected versions, or remediation are provided in the connected docume...

5CVSS7AI score0.03205EPSS
SaveExploits2References3Affected Software1
Rows per page
Query Builder