Lucene search
+L

68 matches found

CVE
CVE
added 2009/07/07 11:00 p.m.81 views

CVE-2009-2351

CVE-2009-1312 is referenced in MiracleLinux AXSA advisories as a vulnerability in Mozilla Firefox and SeaMonkey where javascript: URIs in Refresh headers in HTTP responses were not blocked. Affected versions include Mozilla Firefox before 3.0.9 and SeaMonkey before 1.1.17; this could enable cross...

4.3CVSS5.9AI score0.01709EPSS
SaveExploits1References5Affected Software1
Circl
Circl
added 2008/05/18 12:00 a.m.8 views

CVE-2008-2351

creationtimestamp| type| source ---|---|--- 2008-05-18 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/5641...

7.5CVSS5.8AI score0.01003EPSS
SaveExploits2References1
CVE
CVE
added 2007/10/29 7:00 p.m.64 views

CVE-2002-2351

CVE-2002-2351 affects Eudora 5.1. An attacker could bypass security warnings and possibly execute arbitrary code through email attachments where the name ends with a trailing dot. The connected documents confirm this behavior across Red Hat, CVE listings, and NVD references, all citing the same d...

6.4CVSS8.1AI score0.02645EPSS
SaveExploits3References3Affected Software1
Tenable Nessus
Tenable Nessus
added 2007/10/17 12:00 a.m.35 views

openSUSE 10 Security Update : tar (tar-2351)

This security update fixes a directory traversal in tar, where unpacked symlinks could be followed outside of the directory where the tar file is unpacked. CVE-2006-6097 This feature was made optional and needs to be enabled with a commandline option. %NASLMINLEVEL 70300 C Tenable Network Securit...

4CVSS7.1AI score0.11011EPSS
SaveExploits2References1
CVE
CVE
added 2007/04/30 10:00 p.m.56 views

CVE-2007-2351

Summary: CVE-2007-2351 refers to an unspecified vulnerability in the HP Power Manager Remote Agent (RA) 4.0Build10 and earlier on HP-UX B.11.11 and B.11.23. The vulnerability allegedly allows local users to execute arbitrary code via unspecified vectors. The connected sources confirm affected pro...

7.2CVSS7.3AI score0.00649EPSS
SaveExploits0References6Affected Software1
CVE
CVE
added 2006/05/15 10:00 a.m.69 views

CVE-2006-2351

Ipswitch WhatsUp Professional 2006 and WhatsUp Professional 2006 Premium are affected by multiple cross-site scripting (XSS) vulnerabilities. The XSS can be triggered via the following parameters: (1) sDeviceView or (2) nDeviceID to NmConsole/Navigation.asp, and (3) sHostname to NmConsole/ToolRes...

4.3CVSS5.7AI score0.04548EPSS
SaveExploits3References8Affected Software1
CVE
CVE
added 2005/08/16 4:00 a.m.62 views

CVE-2004-2351

CVE-2004-2351 describes a cross-site scripting (XSS) vulnerability in GBook for Php-Nuke 1.0. Remote attackers can inject arbitrary web script or HTML through multiple user-input fields (name, email, city, message) that reportedly do not use [removed] or tags, which PHP-Nuke purportedly filters....

4.3CVSS6AI score0.01255EPSS
SaveExploits1References4Affected Software1
NVD
NVD
added 2004/12/31 5:00 a.m.38 views

CVE-2004-2351

Cross-site scripting XSS vulnerability in GBook for Php-Nuke 1.0 allows remote attackers to inject arbitrary web script or HTML via multiple parameters, including 1 name, 2 email, 3 city, and 4 message, which do not use the and tags, which are filtered by PHP-Nuke...

4.3CVSS5.8AI score0.01255EPSS
SaveExploits1References4
Rows per page
Query Builder