Lucene search
+L

98 matches found

Cvelist
Cvelist
added 2009/03/17 10:00 p.m.27 views

CVE-2009-0933

Cross-site scripting XSS vulnerability in the administrative interface in Dotclear before 2.1.5 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

5.7AI score0.01065EPSS
SaveExploits0References5
CVE
CVE
added 2008/02/25 6:00 p.m.57 views

CVE-2008-0933

CVE-2008-0933 corresponds to multiple race conditions in the Solaris 10 kernel’s CPU Performance Counters (cpc) subsystem. The vulnerability affects the kernel component related to kcpc_unbind and kcpc_restore, enabling local users to trigger a denial of service (panic) via unspecified vectors. T...

4.7CVSS6.2AI score0.00333EPSS
SaveExploits1References6Affected Software1
Prion
Prion
added 2007/06/05 9:30 p.m.20 views

Design/Logic Flaw

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2007-0933. Reason: This candidate is a duplicate of CVE-2007-0933 due to a typo. Notes: All CVE users should reference CVE-2007-0933 instead of this candidate. All references and descriptions in this candidate have been removed to...

6.8AI score0.27501EPSS
SaveExploits0
CVE
CVE
added 2007/06/05 9:00 p.m.37 views

CVE-2007-0993

CVE-2007-0993 is a duplicate of CVE-2007-0933 and, per the connected records, CVE-2007-0933 details a buffer overflow in the D-Link DWL-G650+ wireless driver (version 6.0.0.18, Rev. A1) on Windows XP. The vulnerability allows remote attackers to crash the device or potentially execute arbitrary c...

6.5AI score
SaveExploits0
CVE
CVE
added 2007/06/05 9:00 p.m.62 views

CVE-2007-0933

The CVE-2007-0933 issue affects the D-Link DWL-G650+ wireless driver (version 6.0.0.18, Rev. A1) on Windows XP. It is a buffer overflow in the driver that can be triggered by a beacon frame containing a long TIM Information Element, leading to a denial of service (crash) and potentially arbitrary...

7.8CVSS8AI score0.27501EPSS
SaveExploits0References5Affected Software1
UbuntuCve
UbuntuCve
added 2007/03/10 12:19 a.m.28 views

CVE-2007-1371

Multiple buffer overflows in Conquest 8.2a and earlier 1 allow local users to gain privileges by querying a metaserver that sends a long server entry processed by metaGetServerList and allow remote metaservers to execute arbitrary code via a long server entry processed by metaGetServerList; 2 all...

6.9CVSS6.4AI score0.04096EPSS
SaveExploits2References1
CVE
CVE
added 2006/02/28 11:00 a.m.61 views

CVE-2006-0933

CVE-2006-0933 concerns a Cross-site Scripting (XSS) vulnerability in PHPX 3.5.9. The issue allows remote attackers to inject arbitrary web script or HTML via a javascript: URI in a url XCode tag contained in a posted message. The available connected documents confirm the affected software version...

4.3CVSS5.5AI score0.01736EPSS
SaveExploits2References4Affected Software1
CVE
CVE
added 2005/03/29 5:00 a.m.59 views

CVE-2005-0933

CVE-2005-0933 describes a directory traversal vulnerability in the PHPCOIN application (auxpage.php) affecting phpCOIN versions ≤ 1.2.1b. Remote attackers can read arbitrary files by manipulating the page parameter. This is validated across sources: the NVD entry notes a directory traversal issue...

5CVSS6.8AI score0.01549EPSS
SaveExploits1References2Affected Software1
NVD
NVD
added 2005/01/27 5:00 a.m.26 views

CVE-2004-0933

Computer Associates CA InoculateIT 6.0, eTrust Antivirus r6.0 through r7.1, eTrust Antivirus for the Gateway r7.0 and r7.1, eTrust Secure Content Manager, eTrust Intrusion Detection, EZ-Armor 2.0 through 2.4, and EZ-Antivirus 6.1 through 6.3 allow remote attackers to bypass antivirus protection v...

7.5CVSS6.4AI score0.20691EPSS
SaveExploits5References4
CVE
CVE
added 2004/11/19 5:00 a.m.83 views

CVE-2004-0933

CVE-2004-0933 affects Computer Associates CA InoculateIT 6.0, eTrust Antivirus (r6.0–r7.1), eTrust Antivirus for the Gateway (r7.0–r7.1), eTrust Secure Content Manager, eTrust Intrusion Detection, EZ-Armor (2.0–2.4), and EZ-Antivirus (6.1–6.3). The issue is a ZIP header handling flaw that lets re...

7.5CVSS6.4AI score0.20691EPSS
SaveExploits5References4Affected Software20
CVE
CVE
added 2002/08/31 4:00 a.m.47 views

CVE-2002-0933

CVE-2002-0933 affects Datalex PLC BookIt! Consumer prior to version 2.2. The issue stems from usernames/passwords being stored in plaintext in a cookie, enabling remote attackers to gain privileges through cross-site scripting or sniffing. The NVD metrics indicate partial impact to confidentialit...

7.5CVSS7AI score0.01571EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
added 2002/02/02 5:00 a.m.33 views

CVE-2001-0933

Cooolsoft PowerFTP Server 2.03 allows remote attackers to list the contents of arbitrary drives via a ls LIST command that includes the drive letter as an argument, e.g. "ls C:"...

6.8AI score0.044EPSS
SaveExploits0References1
CVE
CVE
added 2002/02/02 5:00 a.m.58 views

CVE-2001-0933

The connected records confirm the issue affects Cooolsoft PowerFTP Server 2.03. A remote attacker can list contents of arbitrary drives by issuing a LIST (ls) command that includes a drive letter argument (e.g., "ls C:"). This indicates a potential command handling/input validation flaw in the FT...

7.5CVSS7.2AI score0.044EPSS
SaveExploits0References1Affected Software1
NVD
NVD
added 2001/11/28 5:00 a.m.20 views

CVE-2001-0933

Cooolsoft PowerFTP Server 2.03 allows remote attackers to list the contents of arbitrary drives via a ls LIST command that includes the drive letter as an argument, e.g. "ls C:"...

7.5CVSS6.8AI score0.044EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2001/01/22 5:00 a.m.31 views

CVE-2000-0933

The Input Method Editor IME in the Simplified Chinese version of Windows 2000 does not disable access to privileged functionality that should normally be restricted, which allows local users to gain privileges, aka the "Simplified Chinese IME State Recognition" vulnerability...

6.4AI score0.02159EPSS
SaveExploits1References3
CVE
CVE
added 2001/01/22 5:00 a.m.54 views

CVE-2000-0933

Technical details (affected products, exact root cause, vulnerable components, versions, or fixes) are not provided in the connected documents; monitor for updates.

4.6CVSS6.8AI score0.02159EPSS
SaveExploits1References3Affected Software1
NVD
NVD
added 2000/12/19 5:00 a.m.22 views

CVE-2000-0933

The Input Method Editor IME in the Simplified Chinese version of Windows 2000 does not disable access to privileged functionality that should normally be restricted, which allows local users to gain privileges, aka the "Simplified Chinese IME State Recognition" vulnerability...

4.6CVSS6.4AI score0.02159EPSS
SaveExploits1References3
CVE
CVE
added 2000/01/04 5:00 a.m.54 views

CVE-1999-0933

CVE-1999-0933 : The TeamTrack web server is affected by a directory-traversal vulnerability where a remote attacker can read arbitrary files using a .. (dot dot) attack. The available documents consistently describe this issue as a read-arbitrary-files vulnerability without detailing affected ver...

5CVSS7.1AI score0.05767EPSS
SaveExploits1References2Affected Software1
Rows per page
Query Builder