Lucene search
+L

51 matches found

CVE
CVE
•added 2015/09/28 1:00 a.m.•64 views

CVE-2015-6007

CVE-2015-6007 concerns Web Reference Database (refbase) up to version 0.9.6, with multiple reported vulnerabilities in a single entry. Public sources document a CSRF flaw allowing attackers to hijack user sessions, and the consolidated OpenVAS entry lists additional issues in the same 0.9.6+ bran...

6.8CVSS7.4AI score0.0066EPSS
SaveExploits0References1Affected Software1
CVE
CVE
•added 2014/09/22 10:00 a.m.•53 views

CVE-2014-6007

The CVE-2014-6007 entry affects the Android app LikeHero Get Instagram Likes (com.fraoula.likehero) version 1.0.7. The root cause is the app’s failure to verify X.509 certificates from SSL servers, which allows a man-in-the-middle to spoof servers and obtain sensitive information via a crafted ce...

5.4CVSS6AI score0.00271EPSS
SaveExploits0References3Affected Software1
CVE
CVE
•added 2012/12/19 11:00 a.m.•80 views

CVE-2012-6007

Cisco Wireless LAN Controller (WLC) devices running software 7.2.110.0 are affected by CVE-2012-6007, a cross-site scripting (XSS) vulnerability in screens/base/web_auth_custom.html. The issue allows remote authenticated users to inject arbitrary web script or HTML via the headline parameter (Bug...

4.3CVSS5.3AI score0.03657EPSS
SaveExploits6References1Affected Software9
Exploit DB
Exploit DB
•added 2012/12/13 12:00 a.m.•66 views

Cisco Wireless Lan Controller 7.2.110.0 - Multiple Vulnerabilities

Cisco WLC CSRF, DoS, and Persistent XSS Vulnerabilities Exploit Title: u M@d? - Cisco WLC CSRF, DoS, and Persistent XSS Vulnerabilities Date: Discovered and reported November 2012 Author: Jacob Holcomb/Gimppy042 - Security Analyst @ Independent Security Evaluators Software: Cisco Wireless Lan...

6.8CVSS5.2AI score0.05519EPSS
SaveExploits8
CVE
CVE
•added 2009/01/30 6:03 p.m.•52 views

CVE-2008-6007

CVE-2008-6007 describes an SQL injection in QuidaScript BookMarks Favourites Script (APB) where the vulnerability exists in view_group.php and is exploitable via the id parameter. The root cause is unsanitized input leading to arbitrary SQL execution, with potential impact including data access o...

7.5CVSS6.6AI score0.00973EPSS
SaveExploits2References4Affected Software1
Circl
Circl
•added 2008/09/30 12:00 a.m.•13 views

CVE-2008-6007

creationtimestamp| type| source ---|---|--- 2008-09-30 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6637...

7.5CVSS5.8AI score0.00973EPSS
SaveExploits2References1
Circl
Circl
•added 2008/07/05 12:00 a.m.•16 views

CVE-2008-3087

creationtimestamp| type| source ---|---|--- 2008-07-05 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6007...

5CVSS5.8AI score0.02906EPSS
SaveExploits1References1
CVE
CVE
•added 2007/11/15 10:00 p.m.•70 views

CVE-2007-6007

The CVE-2007-6007 entry describes an integer overflow in the ID_PSP.apl plug-in used by ACDSee Photo Manager 9.0 (build 108), Pro Photo Manager 8.1 (build 99), and Photo Editor 4.0 (build 195). The overflow triggers a heap-based buffer overflow via a crafted PSP image, enabling user-assisted remo...

6.8CVSS7.8AI score0.03012EPSS
SaveExploits0References7Affected Software3
CVE
CVE
•added 2007/11/15 10:00 p.m.•69 views

CVE-2007-6009

CVE-2007-6009 is a buffer-overflow vulnerability in ACDSee plug-ins used to process XPM files. Connected sources confirm a boundary/section-string overflow in ID_X.apl, IDE_ACDStd.apl, ID_PSP.apl, and AM_LHA.apl that could allow remote code execution when a user opens a crafted XPM file, with suc...

9.3CVSS6.9AI score0.03927EPSS
SaveExploits5References3Affected Software3
NVD
NVD
•added 2006/11/21 11:07 p.m.•32 views

CVE-2006-6007

saveprofile.asp in WebEvents Online Event Registration Template 2.0 and earlier allows remote attackers to change the profiles, passwords, and other information for arbitrary users via a modified UserID parameter...

5CVSS6.6AI score0.01024EPSS
SaveExploits0References2
CVE
CVE
•added 2006/11/21 11:00 p.m.•59 views

CVE-2006-6007

The CVE-2006-6007 issue affects WebEvents (Online Event Registration Template) 2.0 and earlier, specifically save_profile.asp. The underlying flaw allows remote attackers to change profiles, passwords, and other information for arbitrary users by altering the UserID parameter. This describes a us...

5CVSS6.9AI score0.01024EPSS
SaveExploits0References2Affected Software1
Rows per page
Query Builder