Lucene search
+L

91 matches found

CVE
CVE
added 2010/07/28 9:0 p.m.46 views

CVE-2010-2912

CVE-2010-2912 describes an SQL injection in Kayako eSupport 3.70.02, exploitable via the _a parameter of a downloads action in index.php. The vulnerability could allow remote attackers to execute arbitrary SQL commands, with impact described as partial confidentiality, integrity, and availability...

7.5CVSS8.6AI score0.00975EPSS
Exploits1References4Affected Software1
Circl
Circl
added 2010/07/17 12:0 a.m.7 views

CVE-2010-2912

creationtimestamp| type| source ---|---|--- 2010-07-17 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/14392...

7.5CVSS5.8AI score0.00975EPSS
Exploits1References1
CVE
CVE
added 2009/08/20 10:0 p.m.62 views

CVE-2009-2912

CVE-2009-2912 concerns Sun Solaris 8–10 and OpenSolaris (pre-sn v_110) where the sendfile and sendfilev kernel routines can trigger a local denial-of-service (panic) via vnode-related calls. The NVD notes a CVSS v2 base score of 4.9 (AV:L, AC:L, Au:N, I:N, A:C) with local access and no authentica...

4.9CVSS6.2AI score0.00355EPSS
Exploits0References7Affected Software2
Tenable Nessus
Tenable Nessus
added 2009/08/18 12:0 a.m.22 views

Solaris 8 (x86) : 127722-05

SunOS 5.8x86: kernel patch. Date this patch was last updated by Sun : Apr/11/11 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if ! definedfunc"bnrandom...

0.4AI score0.00355EPSS
Exploits0References4
CVE
CVE
added 2008/06/30 6:0 p.m.44 views

CVE-2008-2912

Affected software. Contenido CMS (versions up to at least 4.8.4 for CVE-2008-2912; CVE-2006-5380 concerns some earlier versions). Vulnerability type. Remote File Inclusion (RFI) vulnerabilities allow remote attackers to execute arbitrary PHP code. Attack surface and vectors (as stated). In CVE-20...

7.5CVSS7.6AI score0.02382EPSS
Exploits1References4Affected Software1
CVE
CVE
added 2007/05/30 10:0 a.m.48 views

CVE-2007-2912

CVE-2007-2912 affects Jelsoft vBulletin prior to 3.6.6. The issue arises when the system’s unauthenticated User Infraction Permissions feature is disabled, allowing remote attackers to view the infraction “red flag” for a deleted user. This constitutes an information-disclosure risk due to an acc...

5CVSS6.8AI score0.01228EPSS
Exploits1References2Affected Software1
Tenable Nessus
Tenable Nessus
added 2007/03/18 12:0 a.m.96 views

Solaris 9 (sparc) : 122300-61

SunOS 5.9: Kernel Patch. Date this patch was last updated by Sun : Nov/03/11 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if description...

7.2CVSS6.9AI score0.15395EPSS
Exploits1References19
Tenable Nessus
Tenable Nessus
added 2007/03/18 12:0 a.m.37 views

Solaris 9 (x86) : 122301-61

SunOS 5.9x86: Kernel Patch. Date this patch was last updated by Sun : Nov/03/11 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if description...

7.2CVSS6.9AI score0.15395EPSS
Exploits1References17
Packet Storm
Packet Storm
added 2006/06/12 12:0 a.m.45 views

secunia-SelectaPix.txt

====================================================================== Secunia Research 09/06/2006 - SelectaPix Cross-Site Scripting and SQL Injection Vulnerabilities - ====================================================================== Table of Contents Affected...

7.5CVSS6.6AI score0.02004EPSS
Exploits4
CVE
CVE
added 2006/06/09 10:0 a.m.53 views

CVE-2006-2912

CVE-2006-2912 affects SelectaPix 1.31. Multiple SQL injection vulnerabilities exist in the web interface: parameters albumID (view_album.php, index.php), imageID (popup.php), and username/password (admin/member.php). Remote attackers could inject SQL commands to access or modify the database. Pro...

7.5CVSS8.7AI score0.02004EPSS
Exploits3References11Affected Software1
CVE
CVE
added 2005/09/14 4:0 a.m.56 views

CVE-2005-2912

CVE-2005-2912 affects Linksys WRT54G Wireless Router. The vulnerability is a denial-of-service condition caused by sending an HTTP POST request with a negative Content-Length, leading to CPU consumption and the web server hanging. Devices running affected firmware are prone to this DoS. The provi...

5CVSS6.7AI score0.0124EPSS
Exploits0References1Affected Software1
Rows per page
Query Builder