Lucene search
+L

156 matches found

The Hacker News
The Hacker News
added 2015/10/01 1:44 a.m.35 views

Apple iOS 9.0.2 Update Patches Lock Screen Bypass Exploit

Apple has rolled out the second minor iteration of its newest mobile operating system iOS 9, which fixes the iOS lockscreen vulnerability. The widely publicized LockScreen bug allowed anyone with physical access to your iOS device running iOS 9.0 or iOS 9.0.1 to access all the contacts and photos...

6.5AI score
SaveExploits0
Packet Storm
Packet Storm
added 2015/06/01 12:00 a.m.87 views

IBM Security AppScan 9.0.2 Remote Code Execution

!/usr/bin/python import BaseHTTPServer, socket IBM Security AppScan Standard OLE Automation Array Remote Code Execution Author: Naser Farhadi Linkedin: http://ir.linkedin.com/pub/naser-farhadi/85/b3b/909 Date: 1 June 2015 Version: function runmumaa On Error Resume Next set...

9.3CVSS0.94996EPSS
SaveExploits46
Prion
Prion
added 2014/03/16 2:06 p.m.24 views

Cross site request forgery (csrf)

Multiple cross-site request forgery CSRF vulnerabilities in the 1 Data Stewardship, 2 Business Admin, and 3 Product interfaces in IBM InfoSphere Master Data Management MDM Server 8.5 before 8.5.0.82, 9.0.1 before 9.0.1.38, 9.0.2 before 9.0.2.35, 10.0 before 10.0.0.0.26, and 10.1 before 10.1.0.0.1...

6.8CVSS7.7AI score0.0057EPSS
SaveExploits0References2Affected Software1
ATTACKERKB
ATTACKERKB
added 2013/01/09 12:00 a.m.52 views

CVE-2013-0631

Adobe ColdFusion 9.0, 9.0.1, and 9.0.2 allows attackers to obtain sensitive information via unspecified vectors, as exploited in the wild in January 2013. Recent assessments: Assessed Attacker Value: 0 Assessed Attacker Value: 0Assessed Attacker Value: 0...

7.5CVSS4.8AI score0.65867EPSS
SaveIn wildExploits2References3
Cvelist
Cvelist
added 2012/12/12 11:00 a.m.38 views

CVE-2012-5675

Adobe ColdFusion 9.0 through 9.0.2, and 10, allows local users to bypass intended shared-hosting sandbox permissions via unspecified vectors...

6.4AI score0.00719EPSS
SaveExploits0References1
CVE
CVE
added 2012/12/12 11:00 a.m.66 views

CVE-2012-5675

CVE-2012-5675 affects Adobe ColdFusion 9.0 through 9.0.2 and ColdFusion 10. The vulnerability is a sandbox-permission bypass in shared-hosting environments that allows local users to bypass intended sandbox restrictions via unspecified vectors. The available connected documents confirm the affect...

4.4CVSS6.5AI score0.00719EPSS
SaveExploits0References1Affected Software1
OpenVAS
OpenVAS
added 2010/08/25 12:00 a.m.30 views

3D FTP Client Directory Traversal Vulnerability

This host is installed with 3D FTP Client and is prone to directory traversal vulnerability. OpenVAS Vulnerability Test $Id: secpod3dftpclientdirtraversalvuln.nasl 5394 2017-02-22 09:22:42Z teissa $ 3D FTP Client Directory Traversal Vulnerability Authors: Antu Sanadi Copyright: Copyright C 2010...

9.3CVSS1.3AI score0.01572EPSS
SaveExploits0References5
OpenVAS
OpenVAS
added 2010/08/25 12:00 a.m.32 views

3D FTP Client Directory Traversal Vulnerability

3D FTP Client is prone to a directory traversal vulnerability. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.3CVSS6.5AI score0.01572EPSS
SaveExploits0References6
NVD
NVD
added 2008/07/15 6:41 p.m.19 views

CVE-2008-3183

PHP remote file inclusion vulnerability in ktmlpro/includes/ktedit/toolbar.php in gapicms 9.0.2 allows remote attackers to execute arbitrary PHP code via a URL in the dirDepth parameter...

7.5CVSS7.5AI score0.03117EPSS
SaveExploits1References6
Cvelist
Cvelist
added 2008/07/15 6:03 p.m.31 views

CVE-2008-3183

PHP remote file inclusion vulnerability in ktmlpro/includes/ktedit/toolbar.php in gapicms 9.0.2 allows remote attackers to execute arbitrary PHP code via a URL in the dirDepth parameter...

7.5AI score0.03117EPSS
SaveExploits1References6
CVE
CVE
added 2007/10/29 7:00 p.m.64 views

CVE-2002-2345

The CVE-2002-2345 entry concerns Oracle 9i Application Server 9.0.2, where the web cache administrator interface password is stored in plaintext. This credential leakage could allow remote attackers to access the administrator interface, implying unauthorized access to cached credentials. Public ...

7.5CVSS9.4AI score0.01398EPSS
SaveExploits0References3Affected Software1
CVE
CVE
added 2005/07/26 4:00 a.m.51 views

CVE-2005-2379

Oracle Reports 9.0.2 is affected by multiple cross-site scripting (XSS) vulnerabilities that allow remote attackers to inject arbitrary web script or HTML. The weaknesses are triggered via specific parameters: (1) debug in showenv, (2) test in parsequery, or (3) delimiter, and (4) CELLWRAPPER in ...

4.3CVSS5.7AI score0.03569EPSS
SaveExploits1References2Affected Software1
CVE
CVE
added 2005/06/30 4:00 a.m.73 views

CVE-2005-2093

CVE-2005-2093 : Oracle 9i Application Server (Oracle9iAS) 9.0.2 is vulnerable to HTTP Request Smuggling, allowing remote attackers to poison the web cache, bypass a web application firewall, and perform XSS by crafting a request containing both Transfer-Encoding: chunked and Content-Length header...

4.3CVSS8.9AI score0.04945EPSS
SaveExploits1References4Affected Software1
CVE
CVE
added 2004/09/01 4:00 a.m.59 views

CVE-2002-0842

CVE-2002-0842 is a format-string vulnerability in Oracle’s mod_dav extension (used for logging gateway errors) that could enable remote code execution via a crafted destination URI triggering a 502 Bad Gateway. The vulnerability affects Oracle9i Application Server 9.0.2 (and related mod_dav code ...

7.5CVSS9.7AI score0.14634EPSS
SaveExploits1References11Affected Software1
Positive Technologies
Positive Technologies
added 2004/04/17 12:00 a.m.10 views

PT-2004-1539 · Realnetworks · Helix Universal Server

Name of the Vulnerable Software and Affected Versions: RealNetworks Helix Universal Server versions 9.0.1 through 9.0.2 Description: The issue allows remote attackers to cause a denial of service, resulting in a crash, via malformed requests that trigger a null dereference. This can be demonstrat...

7.8CVSS6.8AI score0.54923EPSS
SaveExploits2References7
Microsoft Security Update
Microsoft Security Update
added 1976/01/01 12:00 a.m.4 views

2025-02 .NET 9.0.2 Update for x64 Client (KB5052979)

2025-02 .NET 9.0.2 Update for x64 Client KB5052979...

7AI score
SaveExploits0
Rows per page
Query Builder