Lucene search
+L

228 matches found

CVE
CVE
added 2002/02/02 5:00 a.m.52 views

CVE-2001-0938

CVE-2001-0938 concerns AspUpload 2.1. Affected component: AspUpload (ASP-based file upload) with vulnerable code paths in UploadScript11.asp and DirectoryListing.asp. The underlying issue is a directory-traversal flaw triggered by a .. in the Filename parameter, enabling remote attackers to uploa...

6.4CVSS6.8AI score0.03179EPSS
SaveExploits0References4Affected Software1
Cvelist
Cvelist
added 2002/02/02 5:00 a.m.33 views

CVE-2001-0938

Directory traversal vulnerability in AspUpload 2.1, in certain configurations, allows remote attackers to upload and read arbitrary files, and list arbitrary directories, via a .. dot dot in the Filename parameter in 1 UploadScript11.asp or 2 DirectoryListing.asp...

6.7AI score0.03179EPSS
SaveExploits0References4
NVD
NVD
added 2001/11/30 5:00 a.m.22 views

CVE-2001-0938

Directory traversal vulnerability in AspUpload 2.1, in certain configurations, allows remote attackers to upload and read arbitrary files, and list arbitrary directories, via a .. dot dot in the Filename parameter in 1 UploadScript11.asp or 2 DirectoryListing.asp...

6.4CVSS6.7AI score0.03179EPSS
SaveExploits0References4
CVE
CVE
added 2001/01/22 5:00 a.m.60 views

CVE-2000-0938

Samba SWAT (Web Administration Tool) shipped with Samba 2.0.7 is vulnerable to username enumeration: SWAT returns different error messages for valid vs. invalid usernames, enabling remote attackers to identify valid users on the server. This is evidenced by multiple sources in the CVE ecosystem (...

5CVSS6.6AI score0.02326EPSS
SaveExploits1References2Affected Software1
Cvelist
Cvelist
added 2001/01/22 5:00 a.m.32 views

CVE-2000-0938

Samba Web Administration Tool SWAT in Samba 2.0.7 supplies a different error message when a valid username is provided versus an invalid name, which allows remote attackers to identify valid users on the server...

6.6AI score0.02326EPSS
SaveExploits1References2
NVD
NVD
added 2000/12/19 5:00 a.m.31 views

CVE-2000-0938

Samba Web Administration Tool SWAT in Samba 2.0.7 supplies a different error message when a valid username is provided versus an invalid name, which allows remote attackers to identify valid users on the server...

5CVSS6.6AI score0.02326EPSS
SaveExploits1References2
CVE
CVE
added 2000/01/04 5:00 a.m.54 views

CVE-1999-0938

CVE-1999-0938 involves the MBone SDR Package, which is vulnerable to remote command execution via shell metacharacters in SIP messages. The concrete details indicate the affected software (MBone SDR Package) and the vulnerable component (SIP message handling that allows shell metacharacter input)...

7.5CVSS7.6AI score0.02695EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2000/01/04 5:00 a.m.22 views

CVE-1999-0938

MBone SDR Package allows remote attackers to execute commands via shell metacharacters in Session Initiation Protocol SIP messages...

7.2AI score0.02695EPSS
SaveExploits0References1
Rows per page
Query Builder