Lucene search
+L

88 matches found

CVE
CVE
added 2005/04/26 4:00 a.m.63 views

CVE-2005-1288

The vulnerability CVE-2005-1288 affects ACS Blog 0.8 through 1.1.3, where attackers can gain administrator privileges by manipulating the value of the in cookie. Affected component: login/authentication flow (inc_login_check.asp). Root cause: insecure cookie handling that allows privilege escalat...

7.5CVSS6.9AI score0.01727EPSS
SaveExploits1References4Affected Software1
CVE
CVE
added 2004/12/22 5:00 a.m.46 views

CVE-2004-1288

The CVE-2004-1288 issue affects o3read 0.0.3, where the parse_html function in o3read.c copies an unbounded number of bytes into a 1024-byte t[] array. This buffer overflow can allow remote attackers to execute arbitrary code via a crafted SXW file. The vulnerability is documented in Gentoo GLSA ...

10CVSS7.8AI score0.10436EPSS
SaveExploits2References3Affected Software1
NVD
NVD
added 2002/11/29 5:00 a.m.20 views

CVE-2002-1288

The Microsoft Java implementation, as used in Internet Explorer, allows remote attackers to determine the current directory of the Internet Explorer process via the getAbsolutePath method in a File call...

5CVSS6.5AI score0.17407EPSS
SaveExploits0References3
CVE
CVE
added 2002/11/14 5:00 a.m.59 views

CVE-2002-1288

CVE-2002-1288 affects the Microsoft Java implementation used in Internet Explorer. The vulnerability arises when a getAbsolutePath() call on a File() object enables remote attackers to determine the current directory of the Internet Explorer process. This is a information-disclosure issue. The pr...

5CVSS6.9AI score0.17407EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
added 2002/05/03 4:00 a.m.30 views

CVE-2001-1288

Windows 2000 and Windows NT allows local users to cause a denial of service reboot by executing a command at the command prompt and pressing the F7 and enter keys several times while the command is executing, possibly related to an exception handling error in csrss.exe...

6.4AI score0.05866EPSS
SaveExploits1References6
CVE
CVE
added 2002/03/09 5:00 a.m.57 views

CVE-1999-1288

CVE-1999-1288 concerns Samba 1.9.18, which ships with a prototype application wsmbconf installed with incorrect permissions (including setgid). This config allows local users to read/write files and, due to bugs in wsmbconf, may enable privilege elevation. The OpenVAS entry reiterates an elevate-...

4.6CVSS7.5AI score0.0046EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
added 2002/03/09 5:00 a.m.22 views

CVE-1999-1288

Samba 1.9.18 inadvertently includes a prototype application, wsmbconf, which is installed with incorrect permissions including the setgid bit, which allows local users to read and write files and possibly gain privileges via bugs in the program...

6.6AI score0.0046EPSS
SaveExploits0References3
NVD
NVD
added 2001/07/27 4:00 a.m.25 views

CVE-2001-1288

Windows 2000 and Windows NT allows local users to cause a denial of service reboot by executing a command at the command prompt and pressing the F7 and enter keys several times while the command is executing, possibly related to an exception handling error in csrss.exe...

2.1CVSS6.4AI score0.05866EPSS
SaveExploits1References6
Rows per page
Query Builder