Lucene search
+L

67 matches found

Cvelist
Cvelist
added 2014/12/28 3:00 p.m.34 views

CVE-2014-6228

Integer overflow in the stringchunksplit function in hphp/runtime/base/zend-string.cpp in Facebook HipHop Virtual Machine HHVM before 3.3.0 allows remote attackers to cause a denial of service application crash or possibly have unspecified other impact via crafted arguments to the chunksplit...

7.7AI score0.01934EPSS
SaveExploits0References1
CVE
CVE
added 2014/12/28 3:00 p.m.63 views

CVE-2014-6228

HHVM before 3.3.0 is affected by an integer overflow in the string_chunk_split function (zend-string.cpp) that can be triggered by crafted chunk_split arguments, allowing remote denial of service (application crash) or potentially other impact. The CVE is supported by the NVD entry; no remediatio...

7.5CVSS8AI score0.01934EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2009/02/20 11:00 p.m.31 views

CVE-2008-6228

Pre Multi-Vendor Shopping Malls allows remote attackers to bypass authentication and gain administrative access by setting the 1 adminname and the 2 adminid cookies to "admin"...

7.2AI score0.02663EPSS
SaveExploits1References3
CVE
CVE
added 2009/02/20 11:00 p.m.64 views

CVE-2008-6228

CVE-2008-6228 describes an authentication bypass in Pre Multi-Vendor Shopping Malls where remote attackers can gain administrative access by setting the adminname and adminid cookies to “admin.” The issue is triggered by cookie-based authentication bypass, with a CVSS2 base score of 7.5 (HIGH) an...

7.5CVSS7.4AI score0.02663EPSS
SaveExploits1References3Affected Software1
Circl
Circl
added 2008/11/05 12:00 a.m.11 views

CVE-2008-6228

creationtimestamp| type| source ---|---|--- 2008-11-05 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6999...

7.5CVSS5.8AI score0.02663EPSS
SaveExploits1References1
CVE
CVE
added 2007/12/04 6:00 p.m.76 views

CVE-2007-6228

The CVE-2007-6228 issue is a stack-based buffer overflow in the yt.ythelper.2 ActiveX control used by Yahoo! Toolbar 1.4.1. A long argument to the c() method can remotely trigger a denial of service (browser crash). Public documentation notes no patch from the vendor at the time of reports; users...

6.8CVSS7AI score0.0211EPSS
SaveExploits3References3Affected Software1
CVE
CVE
added 2006/12/02 2:00 a.m.57 views

CVE-2006-6228

CVE-2006-6228 is an XSS vulnerability in Codewalkers ltwCalendar (also called PHP Event Calendar) prior to 4.2.1. Remote attackers can inject arbitrary HTML or web script via unknown vectors. The NVD record notes a CVSSv2 base score of 6.8 (MEDIUM) with network attack vector, no authentication, a...

6.8CVSS6.1AI score0.01143EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder