Lucene search
+L

154 matches found

CVE
CVE
added 2011/05/09 7:00 p.m.149 views

CVE-2011-1746

The CVE affects the Linux kernel prior to 2.6.38.5, specifically the AGP subsystem in drivers/char/agp/generic.c. It is caused by multiple integer overflows in the functions agp_allocate_memory and agp_create_user_memory, allowing local users to trigger buffer overflows and potentially crash the ...

6.9CVSS6.7AI score0.00419EPSS
SaveExploits2References9Affected Software1
NVD
NVD
added 2010/05/06 6:30 p.m.24 views

CVE-2010-1746

Multiple cross-site scripting XSS vulnerabilities in the Table JX comgrid component for Joomla! allow remote attackers to inject arbitrary web script or HTML via the 1 datasearch and 2 rpp parameters to index.php...

4.3CVSS5.8AI score0.01452EPSS
SaveExploits2References4
CVE
CVE
added 2010/05/06 6:00 p.m.45 views

CVE-2010-1746

CVE-2010-1746 affects the Joomla! Table JX (com_grid) component. The vulnerability is an XSS flaw exploitable via the data_search and rpp parameters to index.php, allowing remote attackers to inject arbitrary script/HTML. The connected documents confirm the affected component and parameters but d...

4.3CVSS5.9AI score0.01452EPSS
SaveExploits2References4Affected Software1
Circl
Circl
added 2010/05/01 12:00 a.m.13 views

CVE-2010-1746

creationtimestamp| type| source ---|---|--- 2010-05-01 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/12473...

4.3CVSS5.8AI score0.01452EPSS
SaveExploits2References1
CVE
CVE
added 2009/05/21 3:00 p.m.57 views

CVE-2009-1746

CVE-2009-1746 describes an SQL injection in Dian Gemilang DGNews 3.0 Beta, via the id parameter in berita.php’s detail action, enabling remote arbitrary SQL execution. The underlying issue is a vulnerability in berita.php allowing attacker-controlled input to alter SQL queries. Affected product/v...

7.5CVSS8.6AI score0.00987EPSS
SaveExploits2References3Affected Software1
Circl
Circl
added 2009/05/18 12:00 a.m.13 views

CVE-2009-1746

creationtimestamp| type| source ---|---|--- 2009-05-18 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/8727...

7.5CVSS5.8AI score0.00987EPSS
SaveExploits2References1
OpenVAS
OpenVAS
added 2009/03/31 12:00 a.m.34 views

Debian Security Advisory DSA 1746-1 (ghostscript)

The remote host is missing an update to ghostscript announced via advisory DSA 1746-1. OpenVAS Vulnerability Test $Id: deb17461.nasl 6615 2017-07-07 12:09:52Z cfischer $ Description: Auto-generated from advisory DSA 1746-1 ghostscript Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...

9.3CVSS1.2AI score0.04708EPSS
SaveExploits1
OpenVAS
OpenVAS
added 2009/03/31 12:00 a.m.23 views

Debian: Security Advisory (DSA-1746-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.3CVSS7.9AI score0.04708EPSS
SaveExploits1References3
CVE
CVE
added 2008/05/16 6:54 a.m.54 views

CVE-2008-1746

Cisco Unified Communications Manager (CUCM) SNMP Trap Agent is vulnerable to DoS via a sequence of malformed UDP packets. Affected versions: 4.1 before 4.1(3)SR6, 4.2 before 4.2(3)SR3, 4.3 before 4.3(2), 5.x before 5.1(3), and 6.x before 6.1(1). Root cause as described is a vulnerability in the S...

7.8CVSS6.5AI score0.01916EPSS
SaveExploits1References6Affected Software1
CVE
CVE
added 2006/04/12 10:00 p.m.60 views

CVE-2006-1746

The CVE-2006-1746 issue affects phpList <= 2.10.2, where the index.php’s database_module (and language_module) handling allows Local File Inclusion by overwriting $GLOBALS via user-supplied GLOBALS[database_module]/GLOBALS[language_module]. The root cause is inadequate input sanitization and, ...

5CVSS6.7AI score0.02385EPSS
SaveExploits1References9Affected Software1
CVE
CVE
added 2005/06/21 4:00 a.m.42 views

CVE-2002-1746

Affected software: Vtun 2.5b1. The CVE describes that remote attackers can inject data into user sessions by sniffing and replaying packets, enabling data injection into sessions. The provided documents do not specify a fix or patch version. No explicit exploitation details beyond the sniffing/re...

5CVSS6.7AI score0.01069EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2005/05/24 4:00 a.m.32 views

CVE-2005-1746

The cluster cookie parsing code in BEA WebLogic Server 7.0 through Service Pack 5 attempts to contact any host or port specified in a cookie, even when it is not in the cluster, which allows remote attackers to cause a denial of service cluster slowdown via modified cookies...

9.2AI score0.02628EPSS
SaveExploits0References5
CVE
CVE
added 2005/02/26 5:00 a.m.52 views

CVE-2004-1746

The CVE-2004-1746 entry describes a Cross-site scripting (XSS) vulnerability in PHP Code Snippet Library’s index.php, exploitable via the cat_select and show parameters. The underlying issue is inadequate input sanitization in index.php, allowing remote attackers to inject arbitrary JavaScript in...

4.3CVSS5.9AI score0.03596EPSS
SaveExploits2References5Affected Software1
Tenable Nessus
Tenable Nessus
added 2004/08/25 12:00 a.m.30 views

PHP Code Snippet Library index.php Multiple Parameter XSS

The remote host is running PHP Code Snippet Library PHP-CSL, a library written in PHP. The remote version of this software fails to sanitize input to the 'catselect' parameter of the 'index.php' script. This can be used to take advantage of the trust between a client and server allowing the...

4.3CVSS5.8AI score0.03596EPSS
SaveExploits2References2
Rows per page
Query Builder