Lucene search
+L

5071 matches found

Exploit DB
Exploit DB
added 2011/08/18 12:0 a.m.22 views

WordPress Plugin Global Content Blocks 1.2 - SQL Injection

Exploit Title: WordPress Global Content Blocks plugin 0 // intval"1a" = 1 : $entry = $wpdb-getrow"select from ".$wpdb-prefix."gcb where id=".$id; $finaltext = base64encode$entry-name."". base64encode$entry-description."". base64encode$entry-value."". base64encode$entry-type;...

7.4AI score
SaveExploits0
OSV
OSV
added 2011/04/11 6:55 p.m.4 views

DEBIAN-CVE-2009-5065

Cross-site scripting XSS vulnerability in feedparser.py in Universal Feed Parser aka feedparser or python-feedparser before 5.0 allows remote attackers to inject arbitrary web script or HTML via vectors involving nested CDATA stanzas...

4.3CVSS6AI score0.0453EPSS
SaveExploits1References1
Drupal
Drupal
added 2011/03/16 12:0 a.m.16 views

SA-CONTRIB-2011-013 - Tagadelic - Cross Site Scripting (XSS)

Tagadelic module offers various ways to display terms and vocabularies in a tag cloud on a page or in a block. The module does not sanitize the taxonomy vocabulary names and descriptions when displayed on listing pages or blocks, leading to a Cross-Site Scripting XSS vulnerability that may lead t...

5.9AI score
SaveExploits0References10
Zero Day Initiative
Zero Day Initiative
added 2011/03/02 12:0 a.m.42 views

Apple Webkit Font Glyph Layout Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Apple Safari's Webkit. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the way th...

9.7CVSS1.8AI score0.03181EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2011/02/20 12:0 a.m.30 views

Debian DSA-2166-1 : chromium-browser - several vulnerabilities

Several vulnerabilities were discovered in the Chromium browser. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2011-0777 Use-after-free vulnerability in Google Chrome before 9.0.597.84 allows remote attackers to cause a denial of service or possibly ha...

7.5CVSS8.1AI score0.02117EPSS
SaveExploits5References16
OpenVAS
OpenVAS
added 2011/02/17 12:0 a.m.38 views

Google Chrome Multiple Denial of Service Vulnerabilities (Feb 2011) - Windows

Google Chrome is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

10CVSS6AI score0.02631EPSS
SaveExploits4References1
OpenVAS
OpenVAS
added 2011/02/17 12:0 a.m.31 views

Google Chrome Multiple Denial of Service Vulnerabilities (Feb 2011) - Linux

Google Chrome is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

10CVSS6AI score0.02631EPSS
SaveExploits4References1
OpenVAS
OpenVAS
added 2011/02/17 12:0 a.m.36 views

Google Chrome Multiple Denial of Service Vulnerabilities - February 11(Linux)

The host is running Google Chrome and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbgooglechromemultdosvulnfeb11lin.nasl 7015 2017-08-28 11:51:24Z teissa $ Google Chrome Multiple Denial of Service Vulnerabilities - February 11Linux Authors: Madhuri D Copyright: Copyright...

10CVSS0.3AI score0.02631EPSS
SaveExploits4References1
OpenVAS
OpenVAS
added 2011/02/17 12:0 a.m.51 views

Google Chrome Multiple Denial of Service Vulnerabilities - February 11(Windows)

The host is running Google Chrome and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbgooglechromemultdosvulnfeb11win.nasl 7015 2017-08-28 11:51:24Z teissa $ Google Chrome Multiple Denial of Service Vulnerabilities - February 11Windows Authors: Madhuri D Copyright: Copyrig...

10CVSS0.4AI score0.02631EPSS
SaveExploits4References1
The Hacker News
The Hacker News
added 2011/02/13 7:5 a.m.13 views

Algeria Internet and Facebook Not Shut Down !

When the Egyptian government decided to flip the switch on its country's Internet on Jan. 27, news of the unprecedented shut down spread rapidly. Rumors that the same thing has happened today in Algeria are unfounded, even though the country has been on the radar for a possible "domino effect" of...

6.8AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2011/02/09 12:0 a.m.40 views

Google Chrome < 9.0.597.94 Multiple Vulnerabilities

The version of Google Chrome installed on the remote host is earlier than 9.0.597.94. Such versions are reportedly affected by multiple vulnerabilities : - An error exists in the processing of animations events related to stale pointers. Issue 67234 - An error exists in the processing of SVG font...

10CVSS7.3AI score0.02631EPSS
SaveExploits4References6
NVD
NVD
added 2010/09/30 3:0 p.m.27 views

CVE-2010-2943

The xfs implementation in the Linux kernel before 2.6.35 does not look up inode allocation btrees before reading inode buffers, which allows remote authenticated users to read unlinked files, or read or overwrite disk blocks that are currently assigned to an active file but were previously assign...

8.1CVSS7.5AI score0.17009EPSS
SaveExploits1References25
Prion
Prion
added 2010/09/30 3:0 p.m.36 views

Code injection

The xfs implementation in the Linux kernel before 2.6.35 does not look up inode allocation btrees before reading inode buffers, which allows remote authenticated users to read unlinked files, or read or overwrite disk blocks that are currently assigned to an active file but were previously assign...

6.4CVSS6.3AI score0.17009EPSS
SaveExploits1References25Affected Software10
CVE
CVE
added 2010/09/30 2:0 p.m.116 views

CVE-2010-2943

CVE-2010-2943 affects the Linux kernel's XFS implementation up to version 2.6.34, where inode allocation B-trees are not consulted before reading inode buffers. This allows remote authenticated users to read unlinked files or read/overwrite disk blocks that were previously allocated to an unlinke...

8.1CVSS7.2AI score0.17009EPSS
SaveExploits1References25Affected Software1
Cvelist
Cvelist
added 2010/09/30 2:0 p.m.30 views

CVE-2010-2943

The xfs implementation in the Linux kernel before 2.6.35 does not look up inode allocation btrees before reading inode buffers, which allows remote authenticated users to read unlinked files, or read or overwrite disk blocks that are currently assigned to an active file but were previously assign...

7.4AI score0.17009EPSS
SaveExploits1References25
UbuntuCve
UbuntuCve
added 2010/09/30 12:0 a.m.33 views

CVE-2010-2943

The xfs implementation in the Linux kernel before 2.6.35 does not look up inode allocation btrees before reading inode buffers, which allows remote authenticated users to read unlinked files, or read or overwrite disk blocks that are currently assigned to an active file but were previously assign...

8.1CVSS6.3AI score0.17009EPSS
SaveExploits1References9
Positive Technologies
Positive Technologies
added 2010/09/29 12:0 a.m.5 views

PT-2010-4424 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 2.6.35 Description: The issue allows remote authenticated users to read unlinked files or read and overwrite disk blocks that are currently assigned to an active file but were previously assigned to an unlinked...

8.1CVSS5.7AI score0.17009EPSS
SaveExploits5References155
Drupal
Drupal
added 2010/09/15 12:0 a.m.12 views

SA-CONTRIB-2010-093 - Advanced Taxonomy Blocks - Multiple Vulnerabilities

Advanced Taxonomy Blocks makes use of the JQuery menu module to create extremely customizable blocks for browsing through single hierarchy taxonomies. The module contained Cross Site Scripting vulnerabilities which could allow a malicious user with one of several non-default permissions to inject...

7AI score
SaveExploits0References6
Drupal
Drupal
added 2010/09/15 12:0 a.m.19 views

SA-CONTRIB-2010-092 - Advanced Book Blocks - Multiple Vulnerabilities

The Advanced Book Blocks module enables you to integrate with the API provided by the JQuery Menu module version 1.8 and higher to provide click and expand book menus with the ability to customize each block individually. The module contained Cross Site Scripting vulnerabilities which could allow...

7AI score
SaveExploits0References6
0day.today
0day.today
added 2010/08/21 12:0 a.m.23 views

Flex CMS Persistent XSS Vulnerability

Exploit for php platform in category web applications ===================================== Flex CMS Persistent XSS Vulnerability ===================================== AUTHOR : Cur53D MAIL : Hyq6xxatgmail.com DATE : 20,August,2010 Blog : www.Cur53D.dlstreet.net Type : XSS Greetz : Sid3^effects,D3...

7.1AI score
SaveExploits0
Rows per page
Query Builder