Lucene search
+L

9809 matches found

NVD
NVD
added 2005/12/20 11:3 a.m.17 views

CVE-2005-4419

Multiple SQL injection vulnerabilities in CategoryResults.cfm in Honeycomb Archive and Honeycomb Archive Enterprise 3.0 allow remote attackers to execute arbitrary SQL commands via the 1 series, 2 catparent, 3 cat, and 4 div parameters...

7.5CVSS8.5AI score0.01233EPSS
SaveExploits1References6
NVD
NVD
added 2005/12/20 11:3 a.m.15 views

CVE-2005-4420

Cross-site scripting XSS vulnerability in Honeycomb Archive Enterprise 3.0 allows remote attackers to inject arbitrary web script or HTML via unspecified search parameters, possibly the keyword parameter in search.cfm...

4.3CVSS5.8AI score0.01177EPSS
SaveExploits0References5
CVE
CVE
added 2005/12/20 11:0 a.m.55 views

CVE-2005-4419

CVE-2005-4419 affects Honeycomb Archive and Honeycomb Archive Enterprise 3.0. Vulnerable through CategoryResults.cfm where SQL injection can be triggered via the parameters (1) series, (2) cat_parent, (3) cat, and (4) div, allowing remote arbitrary SQL execution. The NVD entry identifies the vuln...

7.5CVSS8.9AI score0.01233EPSS
SaveExploits1References6Affected Software2
Cvelist
Cvelist
added 2005/12/20 11:0 a.m.19 views

CVE-2005-4419

Multiple SQL injection vulnerabilities in CategoryResults.cfm in Honeycomb Archive and Honeycomb Archive Enterprise 3.0 allow remote attackers to execute arbitrary SQL commands via the 1 series, 2 catparent, 3 cat, and 4 div parameters...

8.5AI score0.01233EPSS
SaveExploits1References6
CVE
CVE
added 2005/12/20 11:0 a.m.43 views

CVE-2005-4420

CVE-2005-4420 describes a cross-site scripting (XSS) vulnerability in Honeycomb Archive Enterprise 3.0. The issue allows remote attackers to inject arbitrary web script or HTML by manipulating unspecified search parameters (possibly the keyword parameter in search.cfm). The provided CVSS details ...

4.3CVSS6.1AI score0.01177EPSS
SaveExploits0References5Affected Software1
exploitpack
exploitpack
added 2005/12/20 12:0 a.m.10 views

Quick Square Development Honeycomb Archive 3.0 - CategoryResults.cfm Multiple SQL Injections

Quick Square Development Honeycomb Archive 3.0 - CategoryResults.cfm Multiple SQL Injections source: https://www.securityfocus.com/bid/15995/info HoneyComb Archive is prone to multiple input validation vulnerabilities. These issues are due to a failure in the application to properly sanitize...

0.1AI score
SaveExploits0
securityvulns
securityvulns
added 2005/12/18 12:0 a.m.33 views

Honeycomb Archive & Honeycomb Archive Enterprise vuln.

Honeycomb Archive & Honeycomb Archive Enterprise vuln. Vuln. discovered by : r0t Date: 17 dec. 2005 orginal advisory:http://pridels.blogspot.com/2005/12/honeycomb-archive-honeycomb-archive.html vendor:http://www.quicksquare.com/ affected version:Honeycomb Archive 3.0 and Honeycomb Archive...

0.9AI score
SaveExploits0
OSV
OSV
added 2005/12/15 6:11 p.m.7 views

CVE-2005-4268

Buffer overflow in cpio 2.6-8.FC4 on 64-bit platforms, when creating a cpio archive, allows local users to cause a denial of service crash and possibly execute arbitrary code via a file whose size is represented by more than 8 digits...

7.3AI score
SaveExploits0References20
OSV
OSV
added 2005/12/15 6:11 p.m.4 views

DEBIAN-CVE-2005-4268

Buffer overflow in cpio 2.6-8.FC4 on 64-bit platforms, when creating a cpio archive, allows local users to cause a denial of service crash and possibly execute arbitrary code via a file whose size is represented by more than 8 digits...

3.7CVSS7.7AI score0.00543EPSS
SaveExploits1References1
CVE
CVE
added 2005/12/04 10:0 p.m.54 views

CVE-2004-2643

Technical details (affected products, versions, root cause, impact, and fixes) are not publicly available in the provided connected documents. Monitor for updates.

3.7CVSS6.9AI score0.07047EPSS
SaveExploits1References8Affected Software1
Cvelist
Cvelist
added 2005/12/04 10:0 p.m.22 views

CVE-2004-2643

Directory traversal vulnerability in Microsoft cabarc allows remote attackers to overwrite files via "../" sequences in file names in a CAB archive...

6.5AI score0.07047EPSS
SaveExploits1References8
NVD
NVD
added 2005/11/30 11:3 a.m.13 views

CVE-2005-3922

Heap-based buffer overflow in pskcmp.dll in Panda Software Antivirus library allows remote attackers to execute arbitrary code via a crafted ZOO archive...

7.5CVSS8AI score0.05552EPSS
SaveExploits0References9
CVE
CVE
added 2005/11/30 11:0 a.m.59 views

CVE-2005-3922

CVE-2005-3922 describes a heap-based buffer overflow in Panda Software Antivirus library (pskcmp.dll) when scanning ZOO archives. The root cause is a boundary/size handling error while decompressing user-supplied archives, potentially enabling arbitrary code execution with the target’s privileges...

7.5CVSS8AI score0.05552EPSS
SaveExploits0References9Affected Software19
Cvelist
Cvelist
added 2005/11/30 11:0 a.m.18 views

CVE-2005-3922

Heap-based buffer overflow in pskcmp.dll in Panda Software Antivirus library allows remote attackers to execute arbitrary code via a crafted ZOO archive...

8AI score0.05552EPSS
SaveExploits0References9
OSV
OSV
added 2005/11/29 11:3 a.m.7 views

DEBIAN-CVE-2005-3862

Buffer overflow in unalz before 0.53 allows remote attackers to execute arbitrary code via long file names in ALZ archives...

7.5CVSS8AI score0.20436EPSS
SaveExploits2References1
Exploit DB
Exploit DB
added 2005/11/28 12:0 a.m.32 views

Unalz 0.x - Archive Filename Buffer Overflow

source: https://www.securityfocus.com/bid/15577/info The 'unalz' utility is prone to a buffer-overflow vulnerability. This issue is exposed when the application extracts an ALZ archive that contains a file with a long name. An attacker could exploit this vulnerability to execute arbitrary code in...

7.5CVSS5.8AI score0.20436EPSS
SaveExploits2
exploitpack
exploitpack
added 2005/11/28 12:0 a.m.30 views

Unalz 0.x - Archive Filename Buffer Overflow

Unalz 0.x - Archive Filename Buffer Overflow source: https://www.securityfocus.com/bid/15577/info The 'unalz' utility is prone to a buffer-overflow vulnerability. This issue is exposed when the application extracts an ALZ archive that contains a file with a long name. An attacker could exploit th...

0.3AI score
SaveExploits0
NVD
NVD
added 2005/11/26 10:3 p.m.12 views

CVE-2005-3844

SQL injection vulnerability in phpWordPress PHP News and Article Manager 3.0 allows remote attackers to execute arbitrary SQL commands via the 1 poll and 2 category parameters to index.php, and 3 the ctg parameter in an archive action...

7.5CVSS8.4AI score0.01233EPSS
SaveExploits1References6
Cvelist
Cvelist
added 2005/11/26 10:0 p.m.19 views

CVE-2005-3844

SQL injection vulnerability in phpWordPress PHP News and Article Manager 3.0 allows remote attackers to execute arbitrary SQL commands via the 1 poll and 2 category parameters to index.php, and 3 the ctg parameter in an archive action...

8.4AI score0.01233EPSS
SaveExploits1References6
NVD
NVD
added 2005/11/26 7:3 p.m.18 views

CVE-2005-3831

Stack-based buffer overflow in 1 CxZIP60.dll and 2 CxZIP60u.dll, as used in SpeedProject products including a ZipStar 5.0 Build 4285, b Squeez 5.0 Build 4285, and c SpeedCommander 11.0 Build 4430 and 10.51 Build 4430, allows user-assisted attackers to execute arbitrary code via a ZIP archive...

5.1CVSS7.9AI score0.02598EPSS
SaveExploits0References8
Rows per page
Query Builder