Lucene search
+L

168 matches found

CVE
CVE
added 2006/04/20 10:00 p.m.50 views

CVE-2006-1946

Visale 1.0 and earlier versions are affected by multiple XSS vulnerabilities. Specifically, remote attackers can inject arbitrary web script or HTML via (1) keyval in pbpgst.cgi, (2) catsubno in pblscg.cgi, and (3) listno in pblsmb.cgi. The reports do not provide exploit details or confirm remedi...

2.6CVSS5.8AI score0.02243EPSS
SaveExploits4References8Affected Software1
CVE
CVE
added 2005/06/28 4:00 a.m.50 views

CVE-2002-1946

The CVE-2002-1946 entry applies to Videsh Sanchar Nigam Limited (VSNL) Integrated Dialer Software version 1.2.000. The issue is that when the Save Password option is used, the password is stored in the registry using a weak, one-to-one encryption scheme, allowing local users to obtain and decrypt...

5.5CVSS6.8AI score0.00125EPSS
SaveExploits0References2Affected Software1
CVE
CVE
added 2005/06/14 4:00 a.m.53 views

CVE-2005-1946

CVE-2005-1946 affects Invision Blog (Invision Community Blog). The issue is multiple SQL injection vulnerabilities in the application’s input handling, allowing remote attackers to inject arbitrary SQL via the parameters (in editentry, replyentry, or editcomment actions) or (in the aboutme acti...

7.5CVSS8.5AI score0.01277EPSS
SaveExploits1References3Affected Software1
CVE
CVE
added 2005/05/10 4:00 a.m.58 views

CVE-2004-1946

Format string vulnerability in the PRINT_ERROR function of Cherokee Web Server 0.4.16 and earlier allows local users to execute arbitrary code via format string specifiers in the -C command line argument. The initial description notes it is unclear whether the issue could be exploited remotely or...

4.6CVSS7.7AI score0.00577EPSS
SaveExploits1References3Affected Software1
NVD
NVD
added 2004/04/19 4:00 a.m.18 views

CVE-2004-1946

Format string vulnerability in the PRINTERROR function in common.c for Cherokee Web Server 0.4.16 and earlier allows local users to execute arbitrary code via format string specifiers in the -C command line argument. NOTE: it is not clear whether this issue could be exploited remotely, or if...

4.6CVSS7.3AI score0.00577EPSS
SaveExploits1References3
NVD
NVD
added 2002/12/31 5:00 a.m.19 views

CVE-2002-1946

Videsh Sanchar Nigam Limited VSNL Integrated Dialer Software 1.2.000, when the "Save Password" option is used, stores the password with a weak encryption scheme one-to-one mapping in a registry key, which allows local users to obtain and decrypt the password...

5.5CVSS5.4AI score0.00125EPSS
SaveExploits0References2
Redos
Redos
added 1976/01/01 12:00 a.m.11 views

ROS-2-2182

2.2182 Vulnerability in SpamAssassin spam filtering tool CVE-2020-1946 1. Vulnerability Description: CVE-2020-1946 A vulnerability in the SpamAssassin spam filtering tool, is related to improper input validation when processing rule configuration .cf files. Exploitation of the vulnerability could...

10CVSS8.1AI score0.06132EPSS
SaveExploits0
Redos
Redos
added 1976/01/01 12:00 a.m.17 views

ROS-2-1602

2.1602 Vulnerability in SpamAssassin spam filtering tool CVE-2020-1946 1. Vulnerability Description: CVE-2020-1946 A vulnerability in the SpamAssassin spam filtering tool, is related to improper input validation when processing rule configuration .cf files. Exploitation of the vulnerability could...

10CVSS9.9AI score0.06132EPSS
SaveExploits0
Rows per page
Query Builder