Lucene search
+L

89 matches found

UbuntuCve
UbuntuCve
added 2011/05/13 10:55 p.m.25 views

CVE-2011-1403

Cross-site request forgery CSRF vulnerability in the pieforms implementation in Mahara before 1.3.6 allows remote attackers to hijack the authentication of arbitrary users for requests to any form, related to inappropriate regeneration of session keys...

6.8CVSS6AI score0.01035EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2011/05/13 10:00 p.m.41 views

CVE-2011-1403

Cross-site request forgery CSRF vulnerability in the pieforms implementation in Mahara before 1.3.6 allows remote attackers to hijack the authentication of arbitrary users for requests to any form, related to inappropriate regeneration of session keys...

6.9AI score0.01035EPSS
SaveExploits0References6
Tenable Nessus
Tenable Nessus
added 2010/06/17 12:00 a.m.37 views

Apple iTunes < 9.2 Multiple Vulnerabilities (uncredentialed check)

The version of Apple iTunes on the remote host is prior to version 9.2. It is, therefore, affected by multiple vulnerabilities : - A heap-based buffer overflow vulnerability exists in the handling of images with an embedded ColorSync profile. By using a specially crafted image, a remote attacker...

10CVSS8.4AI score0.19016EPSS
SaveExploits9References42
CVE
CVE
added 2010/06/11 5:28 p.m.73 views

CVE-2010-1403

CVE-2010-1403 affects WebKit in Apple Safari prior to 5.0 on Mac OS X 10.5–10.6 and Windows, and prior to 4.1 on Mac OS X 10.4. It arises from uninitialized memory access during processing of a use element in an SVG document (related to ProcessInstruction), allowing remote attackers to execute ar...

9.3CVSS9AI score0.08732EPSS
SaveExploits0References26Affected Software2
Debian CVE
Debian CVE
added 2010/06/11 5:28 p.m.42 views

CVE-2010-1403

Removed by vendor...

9.3CVSS8.4AI score0.08732EPSS
SaveExploits0
NVD
NVD
added 2009/04/24 2:30 p.m.20 views

CVE-2009-1403

SQL injection vulnerability in productinfo.php in CRE Loaded 6.2 allows remote attackers to execute arbitrary SQL commands via the productsid parameter...

7.5CVSS8.4AI score0.00987EPSS
SaveExploits2References3
Cvelist
Cvelist
added 2009/04/24 2:00 p.m.27 views

CVE-2009-1403

SQL injection vulnerability in productinfo.php in CRE Loaded 6.2 allows remote attackers to execute arbitrary SQL commands via the productsid parameter...

8.4AI score0.00987EPSS
SaveExploits2References3
Circl
Circl
added 2009/04/21 12:00 a.m.9 views

CVE-2009-1403

creationtimestamp| type| source ---|---|--- 2009-04-21 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/8501...

7.5CVSS5.8AI score0.00987EPSS
SaveExploits2References1
CVE
CVE
added 2008/03/20 10:00 a.m.47 views

CVE-2008-1403

CVE-2008-1403 involves a stack-based buffer overflow in the TFTP server component of BootManage TFTPD 1.99 and earlier and BootManage Administrator 7.1 and earlier. The vulnerability permits a remote attacker to execute arbitrary code by sending a request containing a long filename. The provided ...

6.8CVSS8.1AI score0.03589EPSS
SaveExploits1References5Affected Software2
Circl
Circl
added 2008/03/17 12:00 a.m.8 views

CVE-2008-1403

creationtimestamp| type| source ---|---|--- 2008-03-17 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/31409...

6.8CVSS5.8AI score0.03589EPSS
SaveExploits1References1
OpenVAS
OpenVAS
added 2008/01/17 12:00 a.m.30 views

Debian Security Advisory DSA 219-1 (dhcpcd)

The remote host is missing an update to dhcpcd announced via advisory DSA 219-1. OpenVAS Vulnerability Test $Id: deb2191.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 219-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

7.2CVSS0.3AI score0.00417EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2007/11/09 12:00 a.m.32 views

Debian DSA-1403-1 : phpmyadmin - missing input sanitising

Omer Singer of the DigiTrust Group discovered several vulnerabilities in phpMyAdmin, an application to administrate MySQL over the WWW. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2007-5589 phpMyAdmin allows a remote attacker to inject arbitrary web...

4.3CVSS5.5AI score0.03326EPSS
SaveExploits2References5
CVE
CVE
added 2007/10/20 10:00 a.m.53 views

CVE-2003-1403

The CVE-2003-1403 entry concerns DotBr 0.1: a vulnerability in foo.php3 that allows remote attackers to obtain sensitive information by making a direct request that triggers the phpinfo function. This exposes partial confidentiality and partial integrity/availability according to the NVD CVSS vec...

7.5CVSS6.5AI score0.01477EPSS
SaveExploits1References4Affected Software1
Cvelist
Cvelist
added 2007/10/20 10:00 a.m.26 views

CVE-2003-1403

foo.php3 in DotBr 0.1 allows remote attackers to obtain sensitive information via a direct request, which calls the phpinfo function...

6.1AI score0.01477EPSS
SaveExploits1References4
NVD
NVD
added 2007/09/04 10:17 p.m.28 views

CVE-2007-4665

Unspecified vulnerability in the server in Firebird before 2.0.2 allows remote attackers to cause a denial of service daemon crash via an XNET session that makes multiple simultaneous requests to register events, aka CORE-1403...

5CVSS6.5AI score0.02125EPSS
SaveExploits0References10
UbuntuCve
UbuntuCve
added 2007/09/04 10:17 p.m.26 views

CVE-2007-4665

Unspecified vulnerability in the server in Firebird before 2.0.2 allows remote attackers to cause a denial of service daemon crash via an XNET session that makes multiple simultaneous requests to register events, aka CORE-1403...

5CVSS5.9AI score0.02125EPSS
SaveExploits0References1
CVE
CVE
added 2007/09/04 10:00 p.m.67 views

CVE-2007-4665

CVE-2007-4665 affects the Firebird server prior to 2.0.2. It allows a remote attacker to cause a denial of service (daemon crash) via an XNET session that issues multiple simultaneous requests to register events ( CORE-1403 ). The vulnerability is documented across multiple references and is miti...

5CVSS6.5AI score0.02125EPSS
SaveExploits0References10Affected Software1
CVE
CVE
added 2007/03/10 10:00 p.m.68 views

CVE-2007-1403

The CVE-2007-1403 entry concerns the Macromedia Shockwave SwDir.dll ActiveX control (10.1.4.20) with remote denial of service and potential code execution via stack/buffer overflows in multiple properties (e.g., BGCOLOR, SRC, AutoStart, Sound, DrawLogo, DrawProgress). Connected advisories (CPAI-2...

7.5CVSS7.7AI score0.2922EPSS
SaveExploits1References3Affected Software1
CVE
CVE
added 2006/03/28 11:00 a.m.50 views

CVE-2006-1403

CVE-2006-1403 affects csDoom (client/server Doom) up to version 0.7. The vulnerability is in PrintString (c_console.cpp) and arises from a format-string issue, allowing remote attackers to cause a denial of service and potentially execute arbitrary commands via strings passed to the console. The ...

7.8CVSS7.7AI score0.02699EPSS
SaveExploits1References6Affected Software1
Cvelist
Cvelist
added 2005/02/12 5:00 a.m.24 views

CVE-2004-1403

PHP remote file inclusion vulnerability in index.php in GNUBoard 3.39 and earlier allows remote attackers to execute arbitrary PHP code by modifying the doc parameter to reference a URL on a remote web server that contains the code...

7.6AI score0.01709EPSS
SaveExploits0References5
Rows per page
Query Builder