Lucene search
+L

287 matches found

Debian CVE
Debian CVE
added 2010/03/02 6:00 p.m.38 views

CVE-2010-0787

client/mount.cifs.c in mount.cifs in smbfs in Samba 3.0.22, 3.0.28a, 3.2.3, 3.3.2, 3.4.0, and 3.4.5 allows local users to mount a CIFS share on an arbitrary mountpoint, and gain privileges, via a symlink attack on the mountpoint directory file...

4.4CVSS6.4AI score0.00517EPSS
SaveExploits0
Cvelist
Cvelist
added 2010/02/04 6:00 p.m.31 views

CVE-2010-0547

client/mount.cifs.c in mount.cifs in smbfs in Samba 3.4.5 and earlier does not verify that the 1 device name and 2 mountpoint strings are composed of valid characters, which allows local users to cause a denial of service mtab corruption via a crafted string...

4.6AI score0.00488EPSS
SaveExploits1References8
Debian CVE
Debian CVE
added 2010/02/04 6:00 p.m.39 views

CVE-2010-0547

client/mount.cifs.c in mount.cifs in smbfs in Samba 3.4.5 and earlier does not verify that the 1 device name and 2 mountpoint strings are composed of valid characters, which allows local users to cause a denial of service mtab corruption via a crafted string...

2.1CVSS3.3AI score0.00488EPSS
SaveExploits1
exploitpack
exploitpack
added 2010/02/04 12:00 a.m.20 views

Samba 3.4.5 - Symlink Directory Traversal

Samba 3.4.5 - Symlink Directory Traversal source: https://www.securityfocus.com/bid/38111/info Samba is prone to a directory-traversal vulnerability because the application fails to sufficiently sanitize user-supplied input. Exploits would allow an attacker to access files outside of the Samba...

7.4AI score
SaveExploits0
OpenVAS
OpenVAS
added 2010/02/02 12:00 a.m.33 views

Bugzilla Directory Access Information Disclosure Vulnerability

Bugzilla is prone to an information disclosure vulnerability. Exploits may allow attackers to obtain potentially sensitive information that may aid in other attacks. Versions prior to Bugzilla 3.0.11, 3.2.6, 3.4.5, and 3.5.3 are affected. SPDX-FileCopyrightText: 2010 Greenbone AG Some text...

4.3CVSS5.8AI score0.01531EPSS
SaveExploits0References2
CVE
CVE
added 2005/06/28 4:00 a.m.63 views

CVE-2002-1899

IceWarp Web Mail versions 3.3.3 and 3.4.5 are affected by a cross-site scripting (XSS) vulnerability that allows remote attackers to inject arbitrary web script or HTML via the Full Name (addressname) parameter. The connected sources confirm the affected product and the vulnerable input, but do n...

4.3CVSS6AI score0.01255EPSS
SaveExploits1References4Affected Software1
securityvulns
securityvulns
added 2004/01/09 12:00 a.m.64 views

Multiple Vulnerabilities in Phorum 3.4.5

Phorum 3.4.5 Vulnerabilities ----------------------------- Credit: Author: : Calum Power Versions : = 3.4.5 Vendor : Phorum Vendor URL : http://phorum.org Vendor Contacted: Yes Vendor Fix: Phorum has released Phorum v3.4.6 as a response to this advisory. Please patch your vulnerable software ASAP...

1.5AI score
SaveExploits0
Rows per page
Query Builder