Lucene search
+L

115 matches found

Circl
Circl
added 2014/07/27 12:0 a.m.6 views

CVE-2014-5115

creationtimestamp| type| source ---|---|--- 2014-07-27 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/34173...

5CVSS5.8AI score0.0626EPSS
SaveExploits2References1
Packet Storm
Packet Storm
added 2012/11/30 12:0 a.m.30 views

Axis Commerce 0.8.7.2 Cross Site Scripting

Axis Commerce 0.8.7.2 Remote Script Insertion Vulnerabilities alert'XSS';", "base":"TESTSTRING", "secure":"TESTSTRING2", "rootcategory":"2"' / input type="hidden" name="a...

7.4AI score
SaveExploits0
OpenVAS
OpenVAS
added 2012/11/09 12:0 a.m.42 views

Google Chrome Multiple Vulnerabilities - Nov2012 (Mac OS X)

This host is installed with Google Chrome and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbgooglechromemultvulnnov12macosx.nasl 5999 2017-04-21 09:02:32Z teissa $ Google Chrome Multiple Vulnerabilities - Nov2012 Mac OS X Authors: Antu Sanadi Copyright: Copyright c 2012...

7.5CVSS1.3AI score0.01619EPSS
SaveExploits0References2
CVE
CVE
added 2012/11/07 11:0 a.m.60 views

CVE-2012-5115

CVE-2012-5115 affects Google Chrome on Mac OS X prior to 23.0.1271.64. The issue is an improper write behavior in graphics drivers that can, via unknown vectors triggering “wild writes,” cause a denial of service (and potentially other impact). Affected software is Chrome for Mac OS X; remediatio...

7.5CVSS7.4AI score0.01272EPSS
SaveExploits0References5Affected Software1
Cvelist
Cvelist
added 2012/08/23 8:0 p.m.26 views

CVE-2011-5115

Cross-site scripting XSS vulnerability in DLGuard, possibly 4.6 and earlier, allows remote attackers to inject arbitrary web script or HTML via the searchCart parameter to index.php...

5.8AI score0.01003EPSS
SaveExploits1References2
CVE
CVE
added 2012/08/23 8:0 p.m.41 views

CVE-2011-5115

DLGuard is affected by an XSS vulnerability (likely in version 4.6 and earlier) that can be triggered via the searchCart parameter to index.php. The root cause is insufficient input sanitization, allowing injection of arbitrary scripts/HTML. OpenVAS notes the vulnerability with a WillNotFix remed...

4.3CVSS6AI score0.01003EPSS
SaveExploits1References2Affected Software1
CVE
CVE
added 2012/08/22 10:0 a.m.45 views

CVE-2009-5115

CVE-2009-5115 affects McAfee CMA 3.5.5 (3.5.5.588) and 3.6.0 (3.6.0.608), and McAfee Agent 4.0 prior to Patch 3. An authenticated remote attacker could overwrite arbitrary files by accessing a report-writing ActiveX control COM object. Remediation: apply Patch 3 for McAfee Agent 4.0 (and correspo...

6.5CVSS6.6AI score0.01066EPSS
SaveExploits0References2Affected Software1
Prion
Prion
added 2010/11/22 8:0 p.m.14 views

Code injection

Cisco Unified Videoconferencing UVC System 5110 and 5115, when the Linux operating system is used, uses world-readable permissions for the /etc/shadow file, which allows local users to discover encrypted passwords by reading this file, aka Bug ID CSCti54043...

4.9CVSS6.9AI score0.00352EPSS
SaveExploits0References3Affected Software2
CVE
CVE
added 2010/11/22 7:0 p.m.43 views

CVE-2010-4303

CVE-2010-4303 affects Cisco Unified Videoconferencing (UVC) System 5110 and 5115 when running Linux. The root cause described in the sources is that /etc/shadow is world-readable, enabling local users to read encrypted password hashes. This is a local disclosure vulnerability as stated. The conne...

4.9CVSS6.6AI score0.00352EPSS
SaveExploits0References3Affected Software4
CVE
CVE
added 2010/11/22 7:0 p.m.63 views

CVE-2010-3037

CVE-2010-3037 affects Cisco Unified Videoconferencing (UVC) products (5110/5115 Linux; 3545, 5230 VxWorks; 3527 PRI Gateway; 3522 BRI Gateway; 3515 MCU). The flaw is a remote command-injection in the web interface via the /goform/websXMLAdminRequestCgi.cgi, allowing an authenticated administrator...

8.5CVSS7.9AI score0.02934EPSS
SaveExploits0References5Affected Software4
Cvelist
Cvelist
added 2008/11/18 12:0 a.m.40 views

CVE-2008-5115

Cross-site request forgery CSRF vulnerability in Sun Java System Identity Manager 6.0 through 6.0 SP4, 7.0, and 7.1 allows remote attackers to hijack the authentication of administrators for requests that update the password via idm/admin/changeself.jsp...

7.3AI score0.03156EPSS
SaveExploits2References9
Circl
Circl
added 2008/11/11 12:0 a.m.7 views

CVE-2008-5115

creationtimestamp| type| source ---|---|--- 2008-11-11 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/32579...

6.8CVSS5.8AI score0.03156EPSS
SaveExploits2References1
Tenable Nessus
Tenable Nessus
added 2008/04/04 12:0 a.m.47 views

SuSE 10 Security Update : CUPS (ZYPP Patch Number 5115)

specially crafted GIF files could cause a buffer overflow in the printer filter for image files. CVE-2008-1373 - specially crafted files could cause a buffer overflow in the HP-GL/2 printer filter. CVE-2008-0053 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this...

10CVSS7.9AI score0.08282EPSS
SaveExploits3References4
CVE
CVE
added 2007/09/26 11:0 p.m.52 views

CVE-2007-5115

CVE-2007-5115 describes multiple PHP remote file inclusion vulnerabilities in Ekke Doerre Contenido 42VariablVersion (42VV10) used with contenido_hacks in Mods 4 Xoops Contenido eZ publish (pdf4cms). The flaw allows an attacker to force the inclusion of remote PHP code by supplying a URL in param...

7.5CVSS7.7AI score0.01303EPSS
SaveExploits1References2Affected Software1
NVD
NVD
added 2006/10/03 4:3 a.m.18 views

CVE-2006-5115

Directory traversal vulnerability in kgcall.php in KGB 1.87 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the engine parameter, as demonstrated by uploading a file containing PHP code with an image/jpeg content type, and then referencing this file throug...

5.1CVSS7.3AI score0.02371EPSS
SaveExploits2References5
Rows per page
Query Builder