Lucene search
+L

141 matches found

CVE
CVE
added 2008/02/19 9:0 p.m.45 views

CVE-2008-0827

CVE-2008-0827 affects the PHP-Nuke framework, specifically the Books module. The vulnerability is a SQL injection in the cid parameter that allows remote attackers to execute arbitrary SQL commands against the backend database. This is documented across multiple sources (NVD/NVD entry, CVE record...

7.5CVSS8.4AI score0.00987EPSS
SaveExploits2References3Affected Software1
CVE
CVE
added 2007/02/07 10:0 p.m.56 views

CVE-2007-0827

The CVE-2007-0827 issue concerns the Alibaba Alipay PTA Module ActiveX control (PTA.DLL). Connected sources describe a memory-corruption condition in Remove() where an invalid index argument is used as an offset for a function call, enabling remote attackers to execute arbitrary code via a crafte...

6.8CVSS7.6AI score0.04278EPSS
SaveExploits2References7Affected Software1
CVE
CVE
added 2005/03/22 5:0 a.m.57 views

CVE-2005-0827

The CVE affects RUNCMS 1.1A, Ciamos 0.9.2 RC1, and e-Xoops 1.05 Rev3, via the Viewcat.php code path where convertorderbytrans is invoked. The underlying issue is that an invalid parameter to convertorderbytrans causes a PHP error message that reveals the filesystem path, enabling remote attackers...

5CVSS6.8AI score0.01388EPSS
SaveExploits0References5Affected Software3
Tenable Nessus
Tenable Nessus
added 2004/12/13 12:0 a.m.33 views

RHEL 2.1 / 3 : ImageMagick (RHSA-2004:636)

Updated ImageMagick packages that fixes a buffer overflow are now available. ImageMagickTM is an image display and manipulation tool for the X Window System. A buffer overflow flaw was discovered in the ImageMagick image handler. An attacker could create a carefully crafted image file with an...

10CVSS6.2AI score0.05843EPSS
SaveExploits0References6
Tenable Nessus
Tenable Nessus
added 2004/10/21 12:0 a.m.35 views

RHEL 2.1 : ImageMagick (RHSA-2004:494)

Updated ImageMagick packages that fix various security vulnerabilities are now available. ImageMagickTM is an image display and manipulation tool for the X Window System. A heap overflow flaw was discovered in the ImageMagick image handler. An attacker could create a carefully crafted BMP file in...

7.5CVSS5.8AI score0.05512EPSS
SaveExploits0References5
Tenable Nessus
Tenable Nessus
added 2004/10/21 12:0 a.m.31 views

RHEL 3 : ImageMagick (RHSA-2004:480)

Updated ImageMagick packages that fix a BMP loader vulnerability are now available. ImageMagickTM is an image display and manipulation tool for the X Window System. A heap overflow flaw has been discovered in the ImageMagick image handler. An attacker could create a carefully crafted BMP file in...

7.5CVSS5.8AI score0.05512EPSS
SaveExploits0References3
CVE
CVE
added 2004/09/24 4:0 a.m.95 views

CVE-2004-0827

CVE-2004-0827 affects ImageMagick 5.x before 5.4.4 and 6.x before 6.0.6.2, with remote denial of service and potential arbitrary code execution via malformed AVI, BMP, or DIB files. Multiple connected advisories (Ubuntu USN-35-1, Debian DSA 547-1, Red Hat RHSA-2004:480/636, etc.) corroborate buff...

7.5CVSS7.5AI score0.05512EPSS
SaveExploits0References9Affected Software5
Cvelist
Cvelist
added 2004/09/24 4:0 a.m.41 views

CVE-2004-0827

Multiple buffer overflows in the ImageMagick graphics library 5.x before 5.4.4, and 6.x before 6.0.6.2, allow remote attackers to cause a denial of service application crash and possibly execute arbitrary code via malformed 1 AVI, 2 BMP, or 3 DIB files...

7.6AI score0.05512EPSS
SaveExploits0References9
Tenable Nessus
Tenable Nessus
added 2004/08/31 12:0 a.m.34 views

FreeBSD : ImageMagick -- BMP decoder buffer overflow (b6cad7f3-fb59-11d8-9837-000c41e2cdad)

Marcus Meissner discovered that ImageMagick's BMP decoder would crash when loading the test BMP file created by Chris Evans for testing the previous Qt vulnerability. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from the FreeBSD VuXML...

7.5CVSS5.2AI score0.05512EPSS
SaveExploits0References3
NVD
NVD
added 2003/10/06 4:0 a.m.24 views

CVE-2003-0827

The DB2 Discovery Service for IBM DB2 before FixPak 10a allows remote attackers to cause a denial of service crash via a long packet to UDP port 523...

5CVSS6.4AI score0.01227EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2003/09/23 4:0 a.m.27 views

CVE-2003-0827

The DB2 Discovery Service for IBM DB2 before FixPak 10a allows remote attackers to cause a denial of service crash via a long packet to UDP port 523...

6.4AI score0.01227EPSS
SaveExploits0References2
CVE
CVE
added 2003/09/23 4:0 a.m.86 views

CVE-2003-0827

CVE-2003-0827 concerns the IBM DB2 Discovery Service. The DB2 discovery service on UDP port 523 can be crashed by a remote attacker sending a long UDP packet, causing a denial of service. The issue is associated with IBM DB2 before FixPak 10a. OpenVAS entries corroborate a UDP-based DoS affecting...

5CVSS6.5AI score0.01227EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2002/08/07 4:0 a.m.22 views

CVE-2002-0827

Vulnerability in pppd on UnixWare 7.1.1 and Open UNIX 8.0.0 allows local users to gain root privileges via 1 ppptalk or 2 ppp, a different vulnerability than CVE-2002-0824...

6.5AI score0.00363EPSS
SaveExploits0References3
CVE
CVE
added 2002/08/07 4:0 a.m.48 views

CVE-2002-0827

CVE-2002-0827 affects pppd on UnixWare 7.1.1 and Open UNIX 8.0.0, enabling local users to gain root privileges via (1) ppptalk or (2) ppp. The description notes this is a different issue from CVE-2002-0824. No remediation or version details are provided in the supplied documents; exploitation sta...

7.2CVSS7AI score0.00363EPSS
SaveExploits0References3Affected Software1
NVD
NVD
added 2001/12/06 5:0 a.m.17 views

CVE-2001-0827

Cerberus FTP server 1.0 - 1.5 allows remote attackers to cause a denial of service crash via a large number of "PASV" requests...

7.5CVSS6.6AI score0.01315EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2001/11/22 5:0 a.m.19 views

CVE-2001-0827

Cerberus FTP server 1.0 - 1.5 allows remote attackers to cause a denial of service crash via a large number of "PASV" requests...

6.6AI score0.01315EPSS
SaveExploits0References2
CVE
CVE
added 2001/11/22 5:0 a.m.42 views

CVE-2001-0827

Cerberus FTP server versions 1.0–1.5 are affected by a vulnerability that allows remote denial of service (crash) via a high volume of PASV requests. The NVD entry CVE-2001-0827 confirms the issue and impact (availability loss). Several connected sources reference the same description, with PT-20...

7.5CVSS7AI score0.01315EPSS
SaveExploits0References2Affected Software1
NVD
NVD
added 2000/11/14 5:0 a.m.13 views

CVE-2000-0827

Buffer overflow in the web authorization form of Mobius DocumentDirect for the Internet 1.2 allows remote attackers to cause a denial of service or execute arbitrary commands via a long username...

10CVSS7.8AI score0.04123EPSS
SaveExploits1References3
CVE
CVE
added 2000/10/18 4:0 a.m.37 views

CVE-2000-0827

This CVE (CVE-2000-0827) documents a buffer overflow in the web authorization form of Mobius DocumentDirect for the Internet 1.2. The vulnerability is triggered by a long username and could lead to denial of service or arbitrary command execution. The connected documents corroborate the affected ...

10CVSS8.2AI score0.04123EPSS
SaveExploits1References3Affected Software1
CVE
CVE
added 2000/02/04 5:0 a.m.75 views

CVE-1999-0827

The CVE affects Internet Explorer 5.0 (and other versions) where the default setting for the option “Navigate sub-frames across different domains” is enabled, enabling frame spoofing. Root cause: the feature is on by default, allowing sub-frame navigation across domains and exposing partial confi...

2.6CVSS7AI score0.04685EPSS
SaveExploits0References1Affected Software3
Rows per page
Query Builder