Lucene search
+L

143 matches found

Tenable Nessus
Tenable Nessus
added 2013/03/04 12:00 a.m.51 views

PHP 5.4.x < 5.4.12 Multiple Vulnerabilities

Binary data 6708.prm...

7.5CVSS7.9AI score0.10136EPSS
SaveExploits0References5
Tenable Nessus
Tenable Nessus
added 2013/03/04 12:00 a.m.39 views

PHP 5.3.x < 5.3.22 Multiple Vulnerabilities

Binary data 6707.prm...

7.5CVSS7.9AI score0.10136EPSS
SaveExploits0References5
Tenable Nessus
Tenable Nessus
added 2013/03/04 12:00 a.m.29 views

PHP 5.3.x < 5.3.22 Multiple Vulnerabilities

Binary data 801086.prm...

7.5CVSS7.9AI score0.10136EPSS
SaveExploits0References5
OpenVAS
OpenVAS
added 2012/11/23 12:00 a.m.30 views

Ubuntu: Security Advisory (USN-1635-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS6.7AI score0.0195EPSS
SaveExploits0References2
CVE
CVE
added 2012/08/28 4:00 p.m.51 views

CVE-2012-1635

The CVE-2012-1635 issue affects the Drupal Revisioning module (7.x-1.x) prior to 7.x-1.3. The hook_node_access() implementation checks the current user’s permissions even when evaluating access for other user accounts, enabling bypass of intended access restrictions (notably demonstrated via the ...

6.4CVSS6.4AI score0.01358EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
added 2012/08/28 4:00 p.m.40 views

CVE-2012-1635

The hooknodeaccess function in the revisioning module 7.x-1.x before 7.x-1.3 for Drupal checks the permissions of the current user even when it is called to check permissions of other users, which allows remote attackers to bypass intended access restrictions, as demonstrated when using the XML...

6.2AI score0.01358EPSS
SaveExploits0References3
OpenVAS
OpenVAS
added 2012/08/10 12:00 a.m.42 views

Gentoo Security Advisory GLSA 201206-22 (Samba)

The remote host is missing updates announced in advisory GLSA 201206-22. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

10CVSS1.1AI score0.78558EPSS
SaveExploits22
OpenVAS
OpenVAS
added 2012/08/10 12:00 a.m.48 views

Gentoo Security Advisory GLSA 201206-22 (Samba)

The remote host is missing updates announced in advisory GLSA 201206-22. SPDX-FileCopyrightText: 2012 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR GPL-3.0-only...

10CVSS9.2AI score0.78558EPSS
SaveExploits22References12
Drupal
Drupal
added 2012/01/18 12:00 a.m.27 views

SA-CONTRIB-2012-009 - Revisioning - Access bypass

CVE: CVE-2012-1635 This module enables you to create moderation publication workflows, allowing authors to create content that isn't visible to the public until it has been approved by a moderator/publisher. The module's implementation of hooknodeaccess assumes that access is to granted/denied...

6.4CVSS6.4AI score0.01358EPSS
SaveExploits0References10
Tenable Nessus
Tenable Nessus
added 2010/07/30 12:00 a.m.35 views

Mandriva Linux Security Advisory : samba (MDVSA-2010:141)

Multiple vulnerabilities has been discovered and corrected in samba : The chainreply function in process.c in smbd in Samba before 3.4.8 and 3.5.x before 3.5.2 allows remote attackers to cause a denial of service NULL pointer dereference and process crash via a Negotiate Protocol request with a...

5CVSS7.1AI score0.038EPSS
SaveExploits2References3
OSV
OSV
added 2010/06/17 4:30 p.m.8 views

CVE-2010-1635

The chainreply function in process.c in smbd in Samba before 3.4.8 and 3.5.x before 3.5.2 allows remote attackers to cause a denial of service NULL pointer dereference and process crash via a Negotiate Protocol request with a certain 0x0003 field value followed by a Session Setup AndX request wit...

6.6AI score
SaveExploits0References10
CVE
CVE
added 2010/06/17 4:00 p.m.88 views

CVE-2010-1635

Samba (smbd) vulnerable via chain_reply in process.c (CVE-2010-1635): a crafted Negotiate Protocol request with 0x0003 followed by a Session Setup AndX with 0x8003 can cause a NULL pointer dereference and remote DoS. Affected are Samba versions before 3.4.8 and 3.5.x before 3.5.2. Remediation is ...

5CVSS6.4AI score0.038EPSS
SaveExploits1References10Affected Software1
CVE
CVE
added 2009/05/22 4:25 p.m.71 views

CVE-2009-1635

CVE-2009-1635 : Novell GroupWise WebAccess (7.x pre-7.03 HP3 and 8.x pre-8.0 HP2) is affected by cross-site scripting (XSS) vulnerabilities that allow remote attackers to inject arbitrary script/HTML via (1) the login page User.lang parameter, (2) style expressions in HTML emails, or (3) vectors ...

4.3CVSS5.6AI score0.01905EPSS
SaveExploits1References17Affected Software1
Packet Storm
Packet Storm
added 2009/05/22 12:00 a.m.55 views

Novell Groupwise Cross Site Scripting

Novell GroupWise Web Access Multiple XSS /============================================\ / SecureState R&D Team - leroy and sasquatch \ / Discovered: 11-24-08, 03-05-09 \ \ Vendor Notified: 01-06-09, 03-05-09 / \ Vendor Publication: 05-21-09 / ============================================/...

4.3CVSS6.6AI score0.01905EPSS
SaveExploits1
OpenVAS
OpenVAS
added 2008/09/17 12:00 a.m.34 views

Debian Security Advisory DSA 1635-1 (freetype)

The remote host is missing an update to freetype announced via advisory DSA 1635-1. OpenVAS Vulnerability Test $Id: deb16351.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1635-1 freetype Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

7.5CVSS0.8AI score0.04217EPSS
SaveExploits1
OpenVAS
OpenVAS
added 2008/09/17 12:00 a.m.35 views

Debian: Security Advisory (DSA-1635-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS6.8AI score0.04217EPSS
SaveExploits1References3
Tenable Nessus
Tenable Nessus
added 2008/09/11 12:00 a.m.38 views

Debian DSA-1635-1 : freetype - multiple vulnerabilities

Several local vulnerabilities have been discovered in freetype, a FreeType 2 font engine, which could allow the execution of arbitrary code. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2008-1806 An integer overflow allows context-dependent attackers ...

7.5CVSS7.2AI score0.04217EPSS
SaveExploits1References7
Cvelist
Cvelist
added 2008/04/02 5:00 p.m.27 views

CVE-2008-1635

Directory traversal vulnerability in viewprivate.php in Keep It Simple Guest Book KISGB 5.0.0 and earlier allows remote attackers to include and execute arbitrary local files via a .. dot dot in the tmptheme parameter. NOTE: 5.1.1 is also reportedly affected...

7.1AI score0.0299EPSS
SaveExploits2References3
CVE
CVE
added 2008/04/02 5:00 p.m.51 views

CVE-2008-1635

CVE-2008-1635 affects Keep It Simple Guest Book (KISGB) up to version 5.0.0 (and reportedly 5.1.1) via a directory-traversal flaw in view_private.php. The vulnerability arises from a .. path in the tmp_theme parameter, allowing remote attackers to include and execute arbitrary local files. Docume...

7.5CVSS7.1AI score0.0299EPSS
SaveExploits2References3Affected Software1
CVE
CVE
added 2006/04/06 10:00 a.m.49 views

CVE-2006-1635

CVE-2006-1635 affects LucidCMS 2.0.0 RC4. The vulnerability arises from a direct request to /lucid_phplib/translator.php, where an error message reveals the server path, enabling remote disclosure of sensitive information. No explicit exploit details or in‑the‑wild data are provided in the docume...

5CVSS6.1AI score0.01276EPSS
SaveExploits1References2Affected Software1
Rows per page
Query Builder