Lucene search
+L

72 matches found

CVE
CVE
added 2010/12/14 3:0 p.m.52 views

CVE-2010-4396

CVE-2010-4396 involves a Cross-zone scripting vulnerability in RealNetworks RealPlayer's ActiveX control (NavigateToURL path) affecting RealPlayer 11.0–11.1, RealPlayer SP 1.0–1.1.5, and RealPlayer Enterprise 2.1.2. The HandleAction method can be exploited to inject arbitrary web script/HTML into...

4.3CVSS6AI score0.01157EPSS
Exploits0References4Affected Software1
Tenable Nessus
Tenable Nessus
added 2010/11/16 12:0 a.m.44 views

RealPlayer for Windows < Build 12.0.1.609 Multiple Vulnerabilities

According to its build number, the installed version of RealPlayer on the remote Windows host is affected by multiple vulnerabilities: - An error in the 'Cook' codec initialization function and can be used to access uninitialized memory. CVE-2010-0121 - Freed pointer access in the handling of the...

10CVSS6.5AI score0.06627EPSS
Exploits0References44
Tenable Nessus
Tenable Nessus
added 2010/11/15 12:0 a.m.22 views

Real Networks RealPlayer < 14.0.1.609 (Build 12.0.1.609) Multiple Vulnerabilities

Binary data 5709.prm...

10CVSS6.7AI score0.06627EPSS
Exploits0References46
Cvelist
Cvelist
added 2009/12/22 11:0 p.m.24 views

CVE-2009-4396

SQL injection vulnerability in the Diocese of Portsmouth Resources Database pdresources extension 0.1.1 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

8.4AI score0.01013EPSS
Exploits0References1
CVE
CVE
added 2009/12/22 11:0 p.m.48 views

CVE-2009-4396

The CVE-2009-4396 entry concerns a SQL injection vulnerability in the Diocese of Portsmouth Resources Database (pd_resources) TYPO3 extension, version 0.1.1 and earlier. The issue allows remote attackers to execute arbitrary SQL commands via unspecified vectors. Affected component: TYPO3 extensio...

7.5CVSS8.4AI score0.01013EPSS
Exploits0References1Affected Software1
Tenable Nessus
Tenable Nessus
added 2008/02/22 12:0 a.m.9 views

Sybase SQL Anywhere Database Version Detection

Binary data 4396.prm...

7.3AI score
Exploits0
NVD
NVD
added 2007/08/18 9:17 p.m.15 views

CVE-2007-4396

Multiple CRLF injection vulnerabilities in 1 ixmmsa.pl 0.3, 2 l33tmusic.pl 2.00, 3 mpg123.pl 0.01, 4 ogg123.pl 0.01, 5 xmms.pl 2.0, 6 xmms2.pl 1.1.3, and 7 xmmsinfo.pl 1.1.1.1 scripts for irssi before 0.8.11 allow user-assisted remote attackers to execute arbitrary IRC commands via CRLF sequences...

9.3CVSS7.9AI score0.02292EPSS
Exploits0References8
OSV
OSV
added 2007/08/18 9:17 p.m.10 views

CVE-2007-4396

Multiple CRLF injection vulnerabilities in 1 ixmmsa.pl 0.3, 2 l33tmusic.pl 2.00, 3 mpg123.pl 0.01, 4 ogg123.pl 0.01, 5 xmms.pl 2.0, 6 xmms2.pl 1.1.3, and 7 xmmsinfo.pl 1.1.1.1 scripts for irssi before 0.8.11 allow user-assisted remote attackers to execute arbitrary IRC commands via CRLF sequences...

8.2AI score
Exploits0References8
CVE
CVE
added 2007/08/18 9:0 p.m.49 views

CVE-2007-4396

CVE-2007-4396 describes multiple CRLF injection vulnerabilities in irssi scripts: ixmmsa.pl 0.3, l33tmusic.pl 2.00, mpg123.pl 0.01, ogg123.pl 0.01, xmms.pl 2.0, xmms2.pl 1.1.3, and xmmsinfo.pl 1.1.1.1. These flaws allow user-assisted remote attackers to execute arbitrary IRC commands via CRLF seq...

9.3CVSS7.9AI score0.02292EPSS
Exploits0References8Affected Software1
CVE
CVE
added 2006/11/30 4:0 p.m.55 views

CVE-2006-4396

The CVE-2006-4396 issue affects Apple Type Services (ATS) server in Mac OS X 10.4.8 and earlier. The ATS server fails to securely create log files, which can allow a local attacker to overwrite or create files with system privileges via unspecified vectors (possibly related to a symlink attack). ...

4.6CVSS6.1AI score0.00891EPSS
Exploits2References9Affected Software1
Microsoft Security Update
Microsoft Security Update
added 1976/01/01 12:0 a.m.4 views

MS:B43BB90B-7333-4396-A16A-F2705076942B

...

7AI score
Exploits0
Microsoft Security Update
Microsoft Security Update
added 1976/01/01 12:0 a.m.3 views

MS:69CCF092-4C16-4396-B390-0F7494D9C3EA

...

7AI score
Exploits0
Rows per page
Query Builder