Lucene search
+L

49 matches found

CVE
CVE
added 2013/10/16 6:0 p.m.45 views

CVE-2013-5863

CVE-2013-5863 is an Oracle Solaris 11.1 vulnerability in the IPS repository daemon. The NT network-facing issue could allow remote attackers to tamper with integrity via HTTP-based vectors, as described in in-scope Nessus/Cpu notes. The impact is stated as potential unauthorized modification of S...

4.3CVSS6AI score0.01897EPSS
Exploits0References4Affected Software1
CVE
CVE
added 2012/11/23 11:0 a.m.48 views

CVE-2012-5863

The CVE-2012-5863 vulnerability affects Sinapsi eSolar systems (Light, DUO, and related Sinapsi devices) with firmware prior to 2.0.2870_xx_2.2.12. It is an OS Command Injection flaw in the ping.php endpoint, where shell metacharacters in the ip dominio parameter can be used by an unauthenticated...

10CVSS7.1AI score0.24823EPSS
Exploits1References7Affected Software4
Circl
Circl
added 2010/09/20 12:0 a.m.17 views

CVE-2007-5863

creationtimestamp| type| source ---|---|--- 2010-09-20 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/16867 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/osx/browser/softwareupdate.rb 2025-02-06 03:13:38+00:00| seen|...

9.3CVSS5.7AI score0.22982EPSS
Exploits4References2
OpenVAS
OpenVAS
added 2010/05/12 12:0 a.m.275 views

Mac OS X Security Update 2007-009

The remote host is missing Security Update 2007-009. One or more of the following components are affected: Address Book CFNetwork ColorSync Core Foundation CUPS Desktop Services Flash Player Plug-in GNU Tar iChat IO Storage Family Launch Services Mail perl python Quick Look ruby Safari Safari RSS...

10CVSS8.6AI score0.70386EPSS
Exploits24
CVE
CVE
added 2009/01/06 5:0 p.m.58 views

CVE-2008-5863

CVE-2008-5863 describes an SQL injection in the Woltlab Burning Board (wBB) Userlocator module, version 3.0, via the y parameter in the get_user action within locator.php. The affected component is the Userlocator module for wBB; the vulnerability arises from unsafely handling user input, enablin...

7.5CVSS8.7AI score0.00967EPSS
Exploits1References4Affected Software1
Circl
Circl
added 2008/12/21 12:0 a.m.5 views

CVE-2008-5863

creationtimestamp| type| source ---|---|--- 2008-12-21 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/7530...

7.5CVSS5.8AI score0.00967EPSS
Exploits1References1
CVE
CVE
added 2007/12/19 9:0 p.m.63 views

CVE-2007-5863

CVE-2007-5863 concerns Apple OS X Software Update (10.5.1) where a MITM between client and server, using a modified distribution definition file with the “allow-external-scripts” option, allows remote command execution. Public sources in the connected set corroborate an Apple OS X Software Update...

9.3CVSS9.1AI score0.22982EPSS
Exploits4References9Affected Software2
Metasploit
Metasploit
added 2007/12/18 4:30 a.m.63 views

Apple OS X Software Update Command Execution

This module exploits a feature in the Distribution Packages, which are used in the Apple Software Update mechanism. This feature allows for arbitrary command execution through JavaScript. This exploit provides the malicious update server. Requests must be redirected to this server by other means...

9.3CVSS7.2AI score0.22982EPSS
Exploits4
CVE
CVE
added 2006/11/11 1:0 a.m.43 views

CVE-2006-5863

CVE-2006-5863 describes a PHP remote file inclusion in LetterIt 2, where a crafted URL in the lang parameter passed to inc/session.php allows an attacker to execute arbitrary PHP code on the server. The vulnerability is categorized as a remote code execution via user-controlled input. The availab...

7.5CVSS7.9AI score0.03462EPSS
Exploits1References6Affected Software1
Rows per page
Query Builder