Lucene search
+L

49 matches found

The Hacker News
The Hacker News
added 2012/12/20 11:07 a.m.48 views

VMware View critical directory traversal vulnerability

DDI Vulnerability Research Team VRT for reported a critical vulnerability in VMware View Server , that is a directory traversal vulnerability that allows an unauthenticated remote attacker to retrieve arbitrary files from affected View Servers. Exploitation of this issue may expose sensitive...

5CVSS6.3AI score0.02802EPSS
SaveExploits0
CVE
CVE
added 2012/12/19 11:00 a.m.74 views

CVE-2012-5978

CVE-2012-5978 describes directory traversal in VMware View components: View Connection Server and View Security Server. A remote, unauthenticated attacker can read arbitrary files via crafted URLs due to the tunnel-server not validating that requested URLs stay within web root and are permitted f...

5CVSS7AI score0.02802EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
added 2012/12/19 11:00 a.m.41 views

CVE-2012-5978

Multiple directory traversal vulnerabilities in the 1 View Connection Server and 2 View Security Server in VMware View 4.x before 4.6.2 and 5.x before 5.1.2 allow remote attackers to read arbitrary files via unspecified vectors...

7AI score0.02802EPSS
SaveExploits0References3
Kaspersky
Kaspersky
added 2012/12/19 12:00 a.m.41 views

KLA10384 RLF vulnerability in VMware View

A directory traversal vulnerability was found in VMware Viewer. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited remotely via unspecified vectors. Original advisories VMware bulletin Related products VMware-View CVE list CVE-2012-597...

5CVSS7.2AI score0.02802EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2011/07/12 12:00 a.m.14 views

Port 80 Non-HTTP Traffic Detection

Binary data 5978.prm...

7.3AI score
SaveExploits0
CVE
CVE
added 2009/01/27 1:00 a.m.58 views

CVE-2008-5978

CVE-2008-5978 affects Ocean12 Mailing List Manager Gold. The vulnerability is a SQL injection in the Email parameter for two pages (default.asp and s_edit.asp), allowing remote attackers to execute arbitrary SQL commands. The issue is caused by unsafely concatenating user input into SQL queries, ...

7.5CVSS8.8AI score0.01142EPSS
SaveExploits3References4Affected Software1
Circl
Circl
added 2008/11/29 12:00 a.m.8 views

CVE-2008-5978

creationtimestamp| type| source ---|---|--- 2008-11-29 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/32603 2008-12-02 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/7319...

7.5CVSS5.8AI score0.01142EPSS
SaveExploits3References2
CVE
CVE
added 2007/11/15 12:00 a.m.49 views

CVE-2007-5978

CVE-2007-5978 describes an SQL injection in the XOOPS mylinks module, via brokenlink.php parameter lid. The vulnerability allows remote attackers to execute arbitrary SQL commands. CVSS v2.0 base score 7.5 (HIGH) with network access, low attack complexity, no authentication required, and partial ...

7.5CVSS8.4AI score0.00991EPSS
SaveExploits1References5Affected Software1
CVE
CVE
added 2006/11/20 9:00 p.m.51 views

CVE-2006-5978

Technical details of CVE-2006-5978 are not provided in the supplied documents. No affected version, impact, or remediation information is disclosed here. Monitor for updates from official advisories and CVE records.

10CVSS7.1AI score0.01646EPSS
SaveExploits0References4Affected Software1
Rows per page
Query Builder