Lucene search
+L

638 matches found

Cvelist
Cvelist
added 2008/12/08 11:00 p.m.29 views

CVE-2008-5376

editcomment in crip 3.7 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/.tag.tmp temporary file...

6.2AI score0.00339EPSS
SaveExploits0References2
CVE
CVE
added 2008/12/08 11:00 p.m.56 views

CVE-2008-5376

In Crip 3.7, an local-privilege vulnerability exists: editcomment allows local users to overwrite arbitrary files through a symlink attack on a /tmp/*.tag.tmp temporary file. Root cause is improper handling of temp file creation/overwrite, enabling a symlink to redirect writes. The CVE entry note...

6.9CVSS6.2AI score0.00339EPSS
SaveExploits0References2Affected Software1
CVE
CVE
added 2007/10/18 10:00 a.m.51 views

CVE-2002-2259

CVE-2002-2259 describes a buffer overflow in the French documentation patch for Gnuplot 3.7 in SuSE Linux before 8.0, enabling local users to execute arbitrary code as root via unknown attack vectors. The public records indicate the vulnerable component is the patch used in SuSE Linux packaging f...

7.2CVSS7.5AI score0.00468EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
added 2007/10/18 10:00 a.m.28 views

CVE-2002-2259

Buffer overflow in the French documentation patch for Gnuplot 3.7 in SuSE Linux before 8.0 allows local users to execute arbitrary code as root via unknown attack vectors...

7.5AI score0.00468EPSS
SaveExploits0References3
CVE
CVE
added 2007/07/06 7:00 p.m.52 views

CVE-2005-4855

CVE-2005-4855 affects eZ publish prior to specific versions: 3.5 before 3.5.5, 3.6 before 3.6.2, 3.7 before 3.7.0rc2, and 3.8 before 20050922. The issue is an unrestricted file upload that does not restrict Image datatype uploads to image content types, allowing remote authenticated users to uplo...

3.5CVSS5.5AI score0.00735EPSS
SaveExploits0References2Affected Software1
Exploit DB
Exploit DB
added 2006/12/20 12:00 a.m.42 views

Typo3 3.7/3.8/4.0 - 'Class.TX_RTEHTMLArea_PI1.php' Multiple Remote Command Execution Vulnerabilities

source: https://www.securityfocus.com/bid/21680/info TYPO3 is prone to multiple vulnerabilities that allow attackers to execute arbitrary commands. This issue occurs because the application fails to properly sanitize user-supplied data. Exploiting these issues allows unauthenticated attackers to...

7.5CVSS5.8AI score0.06166EPSS
SaveExploits2
securityvulns
securityvulns
added 2006/08/23 12:00 a.m.51 views

[SA21584] Empire CMS "check_path" File Inclusion Vulnerability

---------------------------------------------------------------------- Hardcore Disassembler / Reverse Engineer Wanted! Want to work with IDA and BinDiff? Want to write PoC's and Exploits? Your nationality is not important. We will get you a work permit, find an apartment, and offer a relocation...

0.4AI score
SaveExploits0
CVE
CVE
added 2006/08/21 6:00 p.m.46 views

CVE-2006-4240

The CVE-2006-4240 entry describes a PHP remote file inclusion in Fusion News 3.7 (index.php) that allows an attacker to execute arbitrary PHP code via a URL parameter fpath. This is the core vulnerability and the affected component is Fusion News 3.7, specifically the index.php file handling fpat...

7.5CVSS7.9AI score0.03188EPSS
SaveExploits2References6Affected Software1
Debian
Debian
added 2006/04/06 7:36 a.m.56 views

[SECURITY] [DSA 1026-1] New sash packages fix potential arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 1026-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff April 6th, 2006 http://www.debian.org/security/faq -...

7.5CVSS9.9AI score0.05581EPSS
SaveExploits3
Cvelist
Cvelist
added 2005/11/16 7:37 a.m.25 views

CVE-2003-1263

ICAL.EXE in iCal 3.7 allows remote attackers to cause a denial of service crash via a malformed HTTP request, possibly due to an invalid method name...

6.7AI score0.07752EPSS
SaveExploits3References4
exploitpack
exploitpack
added 2005/09/12 12:00 a.m.34 views

Snort 2.4.0 - SACK TCP Option Error Handling Denial of Service

Snort 2.4.0 - SACK TCP Option Error Handling Denial of Service /------------------------------------------ ||------+ Snort thsum es 0 cero, por lo tanto, el primer Router por donde pase este paquete lo descartara por no tener una checksum valida. RFC 1072 - TCP Extensions for Long-Delay Paths 3.2...

7.3AI score
SaveExploits0
Cvelist
Cvelist
added 2005/05/10 4:00 a.m.36 views

CVE-2003-1189

Unknown vulnerability in Nokia IPSO 3.7, configured as IP Clusters, allows remote attackers to cause a denial of service via unknown attack vectors...

6.6AI score0.01591EPSS
SaveExploits0References5
CVE
CVE
added 2005/05/10 4:00 a.m.53 views

CVE-2003-1189

CVE-2003-1189 relates to a vulnerability in Nokia IPSO 3.7 when configured as IP Clusters that allows remote attackers to cause a denial of service. The connected documents provide the affected product and the general impact, but do not supply root cause details, specific vulnerable components, e...

5CVSS6.9AI score0.01591EPSS
SaveExploits0References5Affected Software1
Exploit DB
Exploit DB
added 2005/04/08 12:00 a.m.44 views

sash 3.7 - Local Buffer Overflow

/ sash-3.7 buffer overflow in c argyment written by lammat for practice purposes http://grpower.ath.cx [email protected] gdb r -c perl -e 'print "A"x10256' The program being debugged has been started already. Start it from the beginning? y or n y Starting program: /sbin/sash -c perl -e 'print...

5.8AI score
SaveExploits0
seebug.org
seebug.org
added 2005/04/08 12:00 a.m.25 views

sash <= 3.7 Local Buffer Overflow Exploit

No description provided by source. / sash-3.7 buffer overflow in c argyment written by lammat for practice purposes http://grpower.ath.cx [email protected] gdb r -c perl -e 'print "A"x10256' The program being debugged has been started already. Start it from the beginning? y or n y Starting program...

7.1AI score
SaveExploits0
CVE
CVE
added 2005/02/20 5:00 a.m.45 views

CVE-2004-1597

The CVE-2004-1597 entry documents a denial-of-service condition affecting RIM BlackBerry 7230 devices running BlackBerry OS 3.7 SP1. The vulnerability arises when processing a calendar message with an excessively long Location field, which triggers a watchdog during message storage and can lead t...

5CVSS7.1AI score0.01997EPSS
SaveExploits1References8Affected Software1
NVD
NVD
added 2004/10/13 4:00 a.m.21 views

CVE-2004-1597

RIM Blackberry 7230 running RIM Blackberry OS 3.7 SP1 allows remote attackers to cause a denial of service device reboot and possibly data corruption via a calendar message with a long Location field, which triggers a watchdog while the message is being stored...

5CVSS6.7AI score0.01997EPSS
SaveExploits1References8
NVD
NVD
added 2002/12/31 5:00 a.m.17 views

CVE-2002-2259

Buffer overflow in the French documentation patch for Gnuplot 3.7 in SuSE Linux before 8.0 allows local users to execute arbitrary code as root via unknown attack vectors...

7.2CVSS7.5AI score0.00468EPSS
SaveExploits0References3
Rows per page
Query Builder