Lucene search
+L

128 matches found

CVE
CVE
added 2009/09/17 10:00 a.m.137 views

CVE-2009-3235

The CVE describes multiple stack-based buffer overflows in the Sieve plugin used by Dovecot (Sieve implementation derived from Cyrus libsieve). Affected are Dovecot 1.0.x prior to 1.0.4 and Dovecot 1.1.x prior to 1.1.7. The vulnerabilities enable context-dependent attackers to cause a denial of s...

7.5CVSS6.8AI score0.0404EPSS
SaveExploits0References17Affected Software1
NVD
NVD
added 2008/07/21 4:41 p.m.24 views

CVE-2008-3235

Unspecified vulnerability in the PropFilePasswordEncoder utility in the Security component in IBM WebSphere Application Server WAS 5.1 before 5.1.1.19 has unknown impact and attack vectors...

10CVSS6.4AI score0.01769EPSS
SaveExploits0References6
CVE
CVE
added 2008/07/21 4:00 p.m.58 views

CVE-2008-3235

The CVE-2008-3235 entry concerns an unspecified vulnerability in the PropFilePasswordEncoder utility of the Security component in IBM WebSphere Application Server (WAS) 5.1 prior to 5.1.1.19. The impact and attack vectors are unknown per the description. Connected records reiterate the same issue...

10CVSS6.4AI score0.01769EPSS
SaveExploits0References6Affected Software1
Prion
Prion
added 2007/06/19 6:30 p.m.22 views

Cross site scripting

Cross-site scripting XSS vulnerability in low.php in Fuzzylime Forum 1.01b and earlier allows remote attackers to inject arbitrary web script or HTML via the fromaction parameter in a log action, a different vector than CVE-2007-3235...

4.3CVSS6AI score0.01868EPSS
SaveExploits2References7Affected Software1
CVE
CVE
added 2007/06/15 1:00 a.m.60 views

CVE-2007-3235

CVE-2007-3235 is an XSS in Fuzzylime Forum 1.0, via the topic parameter in low.php. The vulnerability allows remote injection of arbitrary HTML/script. Root cause noted as possible linkage to SQL injection; no explicit exploit details or patch information are provided in the connected documents.

4.3CVSS6.3AI score0.00898EPSS
SaveExploits1References4Affected Software1
CVE
CVE
added 2006/06/27 10:00 a.m.46 views

CVE-2006-3235

This CVE refers to multiple cross-site scripting (XSS) flaws in index.php of FineShop 3.0 and earlier. The vulnerabilities allow remote attackers to inject arbitrary script or HTML via the parameters (1) promocja, (2) wysw, or (3) id_produc. Affected product: FineShop 3.0 and earlier (web applica...

2.6CVSS6AI score0.01293EPSS
SaveExploits0References6Affected Software1
NVD
NVD
added 2005/10/14 10:02 a.m.22 views

CVE-2005-3235

Multiple interpretation error in unspecified versions of Proland Protector Plus 2000 Antivirus allows remote attackers to bypass virus detection via a malicious executable in a specially crafted RAR file with malformed central and local headers, which can still be opened by products such as Winra...

5.1CVSS6.5AI score0.0172EPSS
SaveExploits0References2
CVE
CVE
added 2005/10/14 4:00 a.m.52 views

CVE-2005-3235

CVE-2005-3235 concerns multiple interpretation errors in unspecified versions of Proland Protector Plus 2000 Antivirus, enabling remote attackers to bypass virus detection via a malicious executable embedded in a specially crafted RAR file with malformed central and local headers. The same crafte...

5.1CVSS7AI score0.0172EPSS
SaveExploits0References2Affected Software1
Rows per page
Query Builder