Lucene search
+L

121 matches found

Cvelist
Cvelist
added 2013/10/24 1:00 a.m.38 views

CVE-2013-5169

CoreGraphics in Apple Mac OS X before 10.9, when display-sleep mode is used, does not ensure that screen locking blocks the visibility of all windows, which allows physically proximate attackers to obtain sensitive information by reading the screen...

5.3AI score0.00343EPSS
SaveExploits0References1
CVE
CVE
added 2012/10/22 11:00 p.m.61 views

CVE-2012-5169

CVE-2012-5169 affects ATutor AContent (ATutor) prior to/including 1.2-2, specifically the file_manager/preview_top.php XSS via GET parameters pathext, popup, framed, or file. The flaw stems from improper sanitisation of user-controlled input returned to the browser, enabling arbitrary script exec...

4.3CVSS5.7AI score0.02135EPSS
SaveExploits5References7Affected Software1
securityvulns
securityvulns
added 2012/10/22 12:00 a.m.73 views

Multiple vulnerabilities in AContent

Advisory ID: HTB23117 Product: AContent Vendor: ATutor Vulnerable Versions: 1.2 and probably prior Tested Version: 1.2 Vendor Notification: September 26, 2012 Public Disclosure: October 17, 2012 Vulnerability Type: SQL Injection CWE-89, Improper Authentication CWE-287, Cross-Site Scripting CWE-79...

7.5CVSS0.3AI score0.04697EPSS
SaveExploits7
exploitpack
exploitpack
added 2012/10/22 12:00 a.m.74 views

ATutor 1.2 - Multiple Vulnerabilities

ATutor 1.2 - Multiple Vulnerabilities Advisory ID: HTB23117 Product: AContent Vendor: ATutor Vulnerable Versions: 1.2 and probably prior Tested Version: 1.2 Vendor Notification: September 26, 2012 Public Disclosure: October 17, 2012 Vulnerability Type: SQL Injection CWE-89, Improper Authenticatio...

7.5CVSS0.04697EPSS
SaveExploits7
Exploit DB
Exploit DB
added 2012/10/22 12:00 a.m.73 views

ATutor 1.2 - Multiple Vulnerabilities

Advisory ID: HTB23117 Product: AContent Vendor: ATutor Vulnerable Versions: 1.2 and probably prior Tested Version: 1.2 Vendor Notification: September 26, 2012 Public Disclosure: October 17, 2012 Vulnerability Type: SQL Injection CWE-89, Improper Authentication CWE-287, Cross-Site Scripting CWE-79...

7.5CVSS5.2AI score0.04697EPSS
SaveExploits8
Packet Storm
Packet Storm
added 2012/10/18 12:00 a.m.59 views

ATutor AContent 1.2 XSS / Authentication / SQL Injection

Advisory ID: HTB23117 Product: AContent Vendor: ATutor Vulnerable Versions: 1.2 and probably prior Tested Version: 1.2 Vendor Notification: September 26, 2012 Public Disclosure: October 17, 2012 Vulnerability Type: SQL Injection CWE-89, Improper Authentication CWE-287, Cross-Site Scripting CWE-79...

7.5CVSS0.5AI score0.04697EPSS
SaveExploits7
OpenVAS
OpenVAS
added 2012/09/25 12:00 a.m.24 views

SonicWall Viewpoint 'scheduleID' Parameter SQL Injection Vulnerability

This host is running SonicWall Viewpoint and is prone to sql injection vulnerability. OpenVAS Vulnerability Test $Id: gbsonicwallviewpointscheduleidsqlinjvuln.nasl 5988 2017-04-20 09:02:29Z teissa $ SonicWall Viewpoint 'scheduleID' Parameter SQL Injection Vulnerability Authors: Rachana Shetty...

7.5CVSS0.5AI score0.01118EPSS
SaveExploits2References4
OpenVAS
OpenVAS
added 2012/09/25 12:00 a.m.32 views

SonicWall Viewpoint <= 6.0 SP2 SQLi Vulnerability - Active Check

SonicWall Viewpoint is prone to an SQL injection SQLi vulnerability. Copyright C 2012 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free...

7.5CVSS7.7AI score0.01118EPSS
SaveExploits2References5
NVD
NVD
added 2012/09/15 5:55 p.m.19 views

CVE-2011-5169

SQL injection vulnerability in sgms/reports/scheduledreports/configure/scheduleProps.jsp in SonicWall ViewPoint 6.0 SP2 allows remote attackers to execute arbitrary SQL commands via the scheduleID parameter...

7.5CVSS8.3AI score0.01118EPSS
SaveExploits2References4
SonicWall
SonicWall
added 2012/09/15 5:55 p.m.16 views

SonicWall Viewpoint 'scheduleID' Parameter SQL Injection Vulnerability

SQL injection vulnerability in sgms/reports/scheduledreports/configure/scheduleProps.jsp in SonicWall ViewPoint 6.0 SP2 allows remote attackers to execute arbitrary SQL commands via the scheduleID parameter. CVE: CVE-2011-5169 Last updated: Sept. 17, 2012, 3:14 p.m...

7.5CVSS8.6AI score0.01118EPSS
SaveExploits2
CVE
CVE
added 2012/09/15 5:00 p.m.54 views

CVE-2011-5169

CVE-2011-5169 affects SonicWall ViewPoint 6.0 SP2. The vulnerability is an SQL injection in sgms/reports/scheduledreports/configure/scheduleProps.jsp via the scheduleID parameter, allowing remote attackers to execute arbitrary SQL commands. Exploitation status and patch/remediation details are no...

7.5CVSS8.7AI score0.01118EPSS
SaveExploits2References4Affected Software1
CVE
CVE
added 2012/08/25 9:00 p.m.44 views

CVE-2010-5169

CVE-2010-5169 describes a race condition in Online Armor Premium 4.0.0.35 on Windows XP that lets local users bypass kernel-mode hook handlers and execute code blocked by the handler or by signature-based malware detection. The KHOBE/argument-switch attack relies on specific user-space memory cha...

7CVSS6.9AI score0.00298EPSS
SaveExploits0References9Affected Software1
Vulnrichment
Vulnrichment
added 2012/08/25 9:00 p.m.16 views

CVE-2010-5169

Race condition in Online Armor Premium 4.0.0.35 on Windows XP allows local users to bypass kernel-mode hook handlers, and execute dangerous code that would otherwise be blocked by a handler but not blocked by signature-based malware detection, via certain user-space memory changes during...

6.9AI score0.00298EPSS
SaveExploits0References9
Tenable Nessus
Tenable Nessus
added 2011/12/13 12:00 a.m.32 views

SuSE 11.1 Security Update : quagga (SAT Patch Number 5169)

This update fixes the following security issues : - 718056: OSPF6D buffer overflow while decoding Link State Update with Inter Area Prefix Lsa. CVE-2011-3323 - 718058: OSPF6D DoS while decoding Database Description packet. CVE-2011-3324 - 718059: OSPFD DoS while decoding Hello packet. CVE-2011-33...

7.5CVSS8.5AI score0.07615EPSS
SaveExploits0References15
Tenable Nessus
Tenable Nessus
added 2011/12/13 12:00 a.m.32 views

SuSE 11.1 Security Update : quagga (SAT Patch Number 5169)

This update fixes the following security issues : - 718056: OSPF6D buffer overflow while decoding Link State Update with Inter Area Prefix Lsa. CVE-2011-3323 - 718058: OSPF6D DoS while decoding Database Description packet. CVE-2011-3324 - 718059: OSPFD DoS while decoding Hello packet. CVE-2011-33...

7.5CVSS8.5AI score0.07615EPSS
SaveExploits0References15
Circl
Circl
added 2011/10/02 12:00 a.m.14 views

CVE-2011-5169

creationtimestamp| type| source ---|---|--- 2011-10-02 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/36196...

7.5CVSS5.8AI score0.01118EPSS
SaveExploits2References1
CVE
CVE
added 2008/11/19 6:00 p.m.62 views

CVE-2008-5169

CVE-2008-5169 is a SQL injection vulnerability affecting Drinks Complete Website 2.1.0, described as allowing remote attackers to execute arbitrary SQL commands through the drinkid parameter in drinks/drink.php. The vulnerability is confirmed by multiple sources (NVD entry and related CVE records...

7.5CVSS8.4AI score0.01042EPSS
SaveExploits1References5Affected Software1
Saint
Saint
added 2007/11/19 12:00 a.m.43 views

Adobe PageMaker MAIPM6.DLL font name buffer overflow

Added: 11/19/2007 CVE: CVE-2007-5169 BID: 25989 OSVDB: 38067 Background Adobe PageMaker is page layout software. Problem A buffer overflow vulnerability in MAIPM6.DLL allows command execution when a user opens a .PMD file containing specially crafted font names. Resolution Apply the update...

9.3CVSS6.7AI score0.10175EPSS
SaveExploits4
Saint
Saint
added 2007/11/19 12:00 a.m.74 views

Adobe PageMaker MAIPM6.DLL font name buffer overflow

Added: 11/19/2007 CVE: CVE-2007-5169 BID: 25989 OSVDB: 38067 Background Adobe PageMaker is page layout software. Problem A buffer overflow vulnerability in MAIPM6.DLL allows command execution when a user opens a .PMD file containing specially crafted font names. Resolution Apply the update...

9.3CVSS6.7AI score0.10175EPSS
SaveExploits4
CVE
CVE
added 2007/10/11 10:00 a.m.72 views

CVE-2007-5169

Summary (CVE-2007-5169 family) : Adobe PageMaker 7.0.1/7.0.2 on Windows contains a stack-based buffer overflow in the PMD parsing path (MAIPM6.dll) when processing font-related data. The overflow is triggered by a long/crafted font name in a PMD file, leading to potential remote code execution wi...

9.3CVSS7.7AI score0.10175EPSS
SaveExploits4References8Affected Software1
Rows per page
Query Builder