Lucene search
+L

805 matches found

CVE
CVE
•added 2006/06/05 8:00 p.m.•87 views

CVE-2006-2830

The CVE-2006-2830 entry describes a buffer-overflow vulnerability in the HTTP administrative interface of TIBCO Rendezvous before 7.5.1, TIBCO Runtime Agent (TRA) before 5.4, and Hawk before 4.6.1. Remote attackers could trigger a denial of service and possibly execute arbitrary code via the HTTP...

7.5CVSS7.8AI score0.05983EPSS
SaveExploits0References7Affected Software3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2006/06/05 12:00 a.m.•7 views

CVE-2006-2830: Undefined Security Weakness

Buffer overflow in TIBCO Rendezvous before 7.5.1, TIBCO Runtime Agent TRA before 5.4, and Hawk before 4.6.1 allows remote attackers to cause a denial of service and possibly execute arbitrary code via the HTTP administrative interface...

7.5CVSS6.4AI score0.05983EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2006/05/19 12:00 a.m.•3 views

CVE-2006-2477: Undefined Security Weakness

Cross-site scripting XSS vulnerability in the administrative interface Bitrix Site Manager 4.1.x allows remote attackers to inject arbitrary web script or HTML via unspecified inputs...

4.9CVSS6AI score0.0115EPSS
SaveExploits1References1
securityvulns
securityvulns
•added 2006/05/11 12:00 a.m.•54 views

[SA20067] ManageEngine OpManager "searchTerm" Cross-Site Scripting

TITLE: ManageEngine OpManager "searchTerm" Cross-Site Scripting SECUNIA ADVISORY ID: SA20067 VERIFY ADVISORY: http://secunia.com/advisories/20067/ CRITICAL: Less critical IMPACT: Cross Site Scripting WHERE: From remote SOFTWARE: ManageEngine OpManager 6.x http://secunia.com/product/9902/...

0.4AI score
SaveExploits0
NVD
NVD
•added 2006/02/07 6:06 p.m.•22 views

CVE-2006-0571

Multiple cross-site scripting XSS vulnerabilities in phpstatus 1.0 allow remote attackers to inject arbitrary web script or HTML via unknown attack vectors in the administrative interface...

4.3CVSS5.7AI score0.0133EPSS
SaveExploits1References6
NVD
NVD
•added 2006/02/07 6:06 p.m.•44 views

CVE-2006-0570

Multiple SQL injection vulnerabilities in phpstatus 1.0, when gpcmagicquotes is disabled, allow remote attackers to execute arbitrary SQL commands and bypass authentication via 1 the username parameter in check.php and 2 unknown attack vectors in the administrative interface...

7.5CVSS8.7AI score0.01446EPSS
SaveExploits1References6
Prion
Prion
•added 2006/02/07 6:06 p.m.•24 views

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in phpstatus 1.0 allow remote attackers to inject arbitrary web script or HTML via unknown attack vectors in the administrative interface...

4.3CVSS6AI score0.0133EPSS
SaveExploits1References6Affected Software1
Cvelist
Cvelist
•added 2006/02/07 6:00 p.m.•39 views

CVE-2006-0571

Multiple cross-site scripting XSS vulnerabilities in phpstatus 1.0 allow remote attackers to inject arbitrary web script or HTML via unknown attack vectors in the administrative interface...

5.7AI score0.0133EPSS
SaveExploits1References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2006/02/07 12:00 a.m.•3 views

CVE-2006-0571: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in phpstatus 1.0 allow remote attackers to inject arbitrary web script or HTML via unknown attack vectors in the administrative interface...

4.3CVSS5.8AI score0.0133EPSS
SaveExploits1References1
Prion
Prion
•added 2006/02/01 11:02 p.m.•24 views

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Easy CMS allow remote attackers to inject arbitrary web script or HTML via 1 unknown attack vectors in the administrative interface and 2 input fields of the contact form...

4.3CVSS6.1AI score0.01338EPSS
SaveExploits0References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2006/02/01 12:00 a.m.•5 views

CVE-2006-0507: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in Easy CMS allow remote attackers to inject arbitrary web script or HTML via 1 unknown attack vectors in the administrative interface and 2 input fields of the contact form...

4.3CVSS5.8AI score0.01338EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2006/01/16 9:00 p.m.•33 views

CVE-2005-4658

Multiple cross-site scripting XSS vulnerabilities in ASP-Programmers.com ASPKnowledgebase allow remote attackers to inject arbitrary web script or HTML via unknown attack vectors in the administrative interface...

5.7AI score0.01473EPSS
SaveExploits1References4
CVE
CVE
•added 2006/01/16 9:00 p.m.•52 views

CVE-2005-4658

CVE-2005-4658 describes multiple cross-site scripting (XSS) vulnerabilities in ASP-Programmers.com ASPKnowledgebase. Affected component: the administrative interface of ASPKnowledgebase. Root cause: unspecified XSS flaws that allow remote attackers to inject arbitrary scripts or HTML via unknown ...

6.8CVSS5.9AI score0.01473EPSS
SaveExploits1References4Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2006/01/16 12:00 a.m.•5 views

CVE-2005-4658: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in ASP-Programmers.com ASPKnowledgebase allow remote attackers to inject arbitrary web script or HTML via unknown attack vectors in the administrative interface...

6.8CVSS5.8AI score0.01473EPSS
SaveExploits1References2
NVD
NVD
•added 2005/12/31 5:00 a.m.•24 views

CVE-2005-4658

Multiple cross-site scripting XSS vulnerabilities in ASP-Programmers.com ASPKnowledgebase allow remote attackers to inject arbitrary web script or HTML via unknown attack vectors in the administrative interface...

6.8CVSS5.7AI score0.01473EPSS
SaveExploits1References4
Cvelist
Cvelist
•added 2005/11/16 9:17 p.m.•33 views

CVE-2002-2149

Buffer overflow in Lucent Access Point 300, 600, and 1500 Service Routers allows remote attackers to cause a denial of service reboot via a long HTTP request to the administrative interface...

6.9AI score0.0341EPSS
SaveExploits2References3
OpenVAS
OpenVAS
•added 2005/11/03 12:00 a.m.•70 views

Netscape Enterprise Default Administrative Password (HTTP)

This host is running the Netscape Enterprise Server. The Administrative interface for this web server, which operates on port 8888/TCP, is using the default username and password of SPDX-FileCopyrightText: 2003 Digital Defense Inc. Some text descriptions might be excerpted from a referenced...

7.5CVSS9.9AI score0.53338EPSS
SaveExploits41
NVD
NVD
•added 2005/10/20 11:02 p.m.•45 views

CVE-2005-3269

Stack-based buffer overflow in help.cgi in the HTTP administrative interface for 1 Sun Java System Directory Server 5.2 2003Q4, 2004Q2, and 2005Q1, 2 Red Hat Directory Server and 3 Certificate Server before 7.1 SP1, 4 Sun ONE Directory Server 5.1 SP4 and earlier, and 5 Sun ONE Administration Serv...

7.5CVSS7AI score0.03148EPSS
SaveExploits0References17
CERT
CERT
•added 2005/10/07 12:00 a.m.•37 views

Symantec AntiVirus Scan Engine administrative interface contains a buffer overflow vulnerability

Overview Symantec AntiVirus Scan Engine administrative interface contains a remotely exploitatble buffer overflow that may allow an attacker to execute arbitrary code. Description The Symantec AntiVirus Scan Engine provides a programming interface to Symantec content scanning and virus detection...

10CVSS7.6AI score0.13436EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2005/10/05 12:00 a.m.•6 views

CVE-2005-2758: Undefined Security Weakness

Integer signedness error in the administrative interface for Symantec AntiVirus Scan Engine 4.0 and 4.3 allows remote attackers to execute arbitrary code via crafted HTTP headers with negative values, which lead to a heap-based buffer overflow...

10CVSS6.8AI score0.13436EPSS
SaveExploits0References1
Rows per page
Query Builder