Lucene search
+L

233 matches found

Cvelist
Cvelist
added 2006/03/09 12:00 a.m.19 views

CVE-2006-1086

...

SaveExploits0
CVE
CVE
added 2006/03/09 12:00 a.m.38 views

CVE-2006-1086

CVE-2006-1086 is a duplicate of CVE-2006-1083 and has been marked as a duplicate/DO NOT USE this candidate. The connected CVE-2006-1083 describes multiple directory traversal vulnerabilities in PHP-Stats 0.1.9.1 and earlier, allowing remote attackers to read and possibly execute arbitrary files v...

6.6AI score
SaveExploits0
CVE
CVE
added 2005/04/14 4:00 a.m.67 views

CVE-2004-1086

Technical details about CVE-2004-1086 are not publicly available in the provided connected documents; no specific affected product versions beyond Mac OS X 10.3.6 are disclosed. Monitor for updates.

7.5CVSS9.1AI score0.03372EPSS
SaveExploits0References5Affected Software2
CVE
CVE
added 2005/04/13 4:00 a.m.59 views

CVE-2005-1086

The CVE-2005-1086 entry concerns AN HTTPD Server 1.42n, specifically the cmdIS.DLL plugin. The issue is a buffer overflow in the plugin when processing an HTTP request with a long User-Agent header, enabling remote code execution. The available documents identify the vulnerable component and caus...

6.4CVSS8.4AI score0.05566EPSS
SaveExploits2References6Affected Software1
CVE
CVE
added 2005/02/23 5:00 a.m.90 views

CVE-2003-1086

CVE-2003-1086 is a PHP remote file inclusion vulnerability in pm/lib.inc.php affecting pMachine Free and pMachine Pro 2.2/2.2.1. The issue arises from unvalidated pm_path, allowing an attacker to reference a remote URL containing PHP code and execute it on the server. Impact is remote code execut...

7.5CVSS7.6AI score0.02213EPSS
SaveExploits1References2Affected Software2
NVD
NVD
added 2004/12/02 5:00 a.m.26 views

CVE-2004-1086

Buffer overflow in PSNormalizer for Apple Mac OS X 10.3.6 allows remote attackers to execute arbitrary code via a crafted PostScript input file...

7.5CVSS7.5AI score0.03372EPSS
SaveExploits0References5
NVD
NVD
added 2003/06/17 4:00 a.m.28 views

CVE-2003-1086

PHP remote file inclusion vulnerability in pm/lib.inc.php in pMachine Free and pMachine Pro 2.2 and 2.2.1 allows remote attackers to execute arbitrary PHP code by modifying the pmpath parameter to reference a URL on a remote web server that contains the code...

7.5CVSS7.5AI score0.02213EPSS
SaveExploits1References2
CVE
CVE
added 2002/08/31 4:00 a.m.51 views

CVE-2002-1086

The CVE-2002-1086 entry relates to multiple SQL injection vulnerabilities in ezContents 1.41 and earlier. The affected software is ezContents (versions up to 1.41). Underlying cause is input handling leading to SQL injection. The vulnerability is assessable as network-exploitable with no authenti...

7.5CVSS8.2AI score0.01949EPSS
SaveExploits0References3Affected Software1
CVE
CVE
added 2002/03/15 5:00 a.m.60 views

CVE-2001-1086

The CVE-2001-1086 issue affects XFree86 versions 3.3 and 3.3.3 where XDM cookies created via gettimeofday() with HasXdmXauth are easily guessable, allowing remote attackers to access the X display by brute forcing cookies. Supported by the provided records: partial confidentiality, integrity, and...

7.5CVSS7.3AI score0.02844EPSS
SaveExploits2References4Affected Software1
Cvelist
Cvelist
added 2002/03/15 5:00 a.m.25 views

CVE-2001-1086

XDM in XFree86 3.3 and 3.3.3 generates easily guessable cookies using gettimeofday when compiled with the HasXdmXauth option, which allows remote attackers to gain unauthorized access to the X display via a brute force attack...

6.9AI score0.02844EPSS
SaveExploits2References4
NVD
NVD
added 2001/07/04 4:00 a.m.23 views

CVE-2001-1086

XDM in XFree86 3.3 and 3.3.3 generates easily guessable cookies using gettimeofday when compiled with the HasXdmXauth option, which allows remote attackers to gain unauthorized access to the X display via a brute force attack...

7.5CVSS6.9AI score0.02844EPSS
SaveExploits2References4
NVD
NVD
added 2001/01/09 5:00 a.m.25 views

CVE-2000-1086

The xpprintstatements function in Microsoft SQL Server 2000 and SQL Server Desktop Engine MSDE does not properly restrict the length of a buffer before calling the srvparaminfo function in the SQL Server API for Extended Stored Procedures XP, which allows an attacker to cause a denial of service ...

4.6CVSS7.6AI score0.02835EPSS
SaveExploits1References3
Cvelist
Cvelist
added 2000/12/19 5:00 a.m.34 views

CVE-2000-1086

The xpprintstatements function in Microsoft SQL Server 2000 and SQL Server Desktop Engine MSDE does not properly restrict the length of a buffer before calling the srvparaminfo function in the SQL Server API for Extended Stored Procedures XP, which allows an attacker to cause a denial of service ...

7.6AI score0.02835EPSS
SaveExploits1References3
Rows per page
Query Builder