Lucene search
+L

87 matches found

CVE
CVE
added 2008/05/08 4:00 p.m.48 views

CVE-2008-2114

The CVE-2008-2114 entry describes a SQL injection vulnerability in emall/search.php of Pre Shopping Mall 1.1, where the search parameter can be exploited by remote attackers to execute arbitrary SQL commands. The issue stems from improper handling/sanitization of user input in the search paramete...

7.5CVSS8.4AI score0.00967EPSS
SaveExploits2References3Affected Software1
CVE
CVE
added 2007/04/18 6:00 p.m.65 views

CVE-2007-2114

CVE-2007-2114 refers to multiple unspecified vulnerabilities in Oracle Database 10.1.0.5 and 10.2.0.2, specifically affecting Change Data Capture (CDC, DB08) and Oracle Instant Client (DB11). The description notes reliable claims that these issues are buffer overflows involving a long CHANGE_TABL...

9CVSS6.5AI score0.05899EPSS
SaveExploits0References9Affected Software1
CVE
CVE
added 2006/05/01 7:00 p.m.44 views

CVE-2006-2114

CVE-2006-2114 affects the SWS web Server 0.1.7. The vulnerability is a buffer overflow triggered by a long request, allowing remote attackers to execute arbitrary code. Public sources in the provided documents confirm this description; no additional exploit or mitigation details are included here...

7.5CVSS7.9AI score0.03703EPSS
SaveExploits1References4Affected Software1
CVE
CVE
added 2005/08/05 4:00 a.m.45 views

CVE-2002-2114

Artekopia Netjuke before 1.0 b7 is affected by a remote-code-execution vulnerability. The issue arises when the section parameter is passed to an eval call, enabling an attacker to run arbitrary code on the web server. The connected documents confirm the affected product/version and the root caus...

7.5CVSS8.2AI score0.03608EPSS
SaveExploits0References3Affected Software1
CVE
CVE
added 2005/07/01 4:00 a.m.84 views

CVE-2005-2114

CVE-2005-2114 affects Gecko-based browsers (Mozilla 1.7.8, Firefox 1.0.4, Camino 0.8.4, Netscape 8.0.2, K-Meleon 0.9, etc.). The issue allows remote attackers to cause an application crash (DoS) by JavaScript that repeatedly calls an empty function. Public reports map this to Red Hat/CentOS advis...

5CVSS6.4AI score0.02099EPSS
SaveExploits1References12Affected Software3
Cvelist
Cvelist
added 2005/07/01 4:00 a.m.30 views

CVE-2005-2114

Mozilla 1.7.8, Firefox 1.0.4, Camino 0.8.4, Netscape 8.0.2, and K-Meleon 0.9, and possibly other products that use the Gecko engine, allow remote attackers to cause a denial of service application crash via JavaScript that repeatedly calls an empty function...

6.4AI score0.02099EPSS
SaveExploits1References12
CVE
CVE
added 2005/05/27 4:00 a.m.52 views

CVE-2004-2114

ProxyNow! 2.75 and earlier suffer stack-based and heap-based buffer overflows that enable remote code execution when processing a GET request containing a long ftp:// URL. Affected component is the server’s input handling for GET requests; root cause is improper bounds checking on the ftp URL in ...

10CVSS8.2AI score0.07582EPSS
SaveExploits2References3Affected Software1
Rows per page
Query Builder