Lucene search
+L

600 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2008/02/21 12:00 a.m.•4 views

CVE-2008-0882: Improper Restriction of Operations within the Bounds of a Memory Buffer

Double free vulnerability in the processbrowsedata function in CUPS 1.3.5 allows remote attackers to cause a denial of service daemon crash and possibly execute arbitrary code via crafted UDP Browse packets to the cupsd port 631/udp, related to an unspecified manipulation of a remote printer. NOT...

10CVSS6.6AI score0.05793EPSS
SaveExploits0References2
Fedora
Fedora
•added 2008/02/13 5:04 a.m.•36 views

[SECURITY] Fedora 8 Update: liferea-1.4.11-2.fc8

Liferea Linux Feed Reader is an RSS/RDF feed reader. It's intended to be a clone of the Windows-only FeedReader. It can be used to maintain a list of subscribed feeds, browse through their items, and show their contents...

9.3CVSS2AI score0.08633EPSS
SaveExploits5
Prion
Prion
•added 2008/01/04 1:46 a.m.•23 views

Cross site scripting

Cross-site scripting XSS vulnerability in dir.php in milliscripts Redirection allows remote attackers to inject arbitrary web script or HTML via the cat parameter in a browse action...

4.3CVSS6.1AI score0.01734EPSS
SaveExploits2References6
attackerkb
attackerkb
•added 2008/01/04 1:46 a.m.•10 views

CVE-2007-6641

Cross-site scripting XSS vulnerability in dir.php in milliscripts Redirection allows remote attackers to inject arbitrary web script or HTML via the cat parameter in a browse action...

4.3CVSS5.7AI score0.01734EPSS
SaveExploits2References7
CVE
CVE
•added 2008/01/04 1:00 a.m.•58 views

CVE-2007-6641

CVE-2007-6641 is an XSS vulnerability in milliscripts Redirection, affecting dir.php where an attacker can inject arbitrary script/HTML by supplying the cat parameter in a browse action. The NVD entry lists a medium severity (CVSS v2: AV:N/AC:M/Au:N/C:N/I:P/A:N, base score 4.3). No exploitation d...

4.3CVSS5.7AI score0.01734EPSS
SaveExploits2References6Affected Software1
Cvelist
Cvelist
•added 2007/12/15 1:00 a.m.•38 views

CVE-2007-6379

BadBlue 2.72b and earlier allows remote attackers to obtain sensitive information via an invalid browse parameter, which reveals the installation path in an error message...

6.1AI score0.03281EPSS
SaveExploits6References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2007/12/15 12:00 a.m.•8 views

CVE-2007-6379: Undefined Security Weakness

BadBlue 2.72b and earlier allows remote attackers to obtain sensitive information via an invalid browse parameter, which reveals the installation path in an error message...

5CVSS5.8AI score0.03281EPSS
SaveExploits6References2
Prion
Prion
•added 2007/12/04 5:46 p.m.•19 views

Sql injection

SQL injection vulnerability in garage.php in phpBB Garage 1.2.0 Beta3 allows remote attackers to execute arbitrary SQL commands via the makeid parameter in a search action in browse mode...

7.5CVSS9.1AI score0.01006EPSS
SaveExploits1References3Affected Software1
Fedora
Fedora
•added 2007/11/06 4:10 p.m.•32 views

[SECURITY] Fedora 8 Update: liferea-1.2.23-5.fc8

Liferea Linux Feed Reader is an RSS/RDF feed reader. It's intended to be a clone of the Windows-only FeedReader. It can be used to maintain a list of subscribed feeds, browse through their items, and show their contents...

2.1CVSS6.4AI score0.00341EPSS
SaveExploits0
seebug.org
seebug.org
•added 2007/10/09 12:00 a.m.•28 views

TorrentTrader Classic 1.07 Multiple Remote Vulnerabilities

No description provided by source. TorrentTrader Classic Mutiple Remote vulnerabilities Discovered By : HACKERS PAL Copy rights : HACKERS PAL Website : http://www.soqor.net Email Address : [email protected] Tested on TorrentTrader Classic v1.07 local file inclusion...

7.1AI score
SaveExploits0
NVD
NVD
•added 2007/09/27 7:17 p.m.•33 views

CVE-2007-5131

SQL injection vulnerability in index.php in Interspire ActiveKB NX 2.x allows remote attackers to execute arbitrary SQL commands via the catId parameter in a browse action. NOTE: it was separately reported that ActiveKB 1.5 is also affected...

7.5CVSS8.2AI score0.01169EPSS
SaveExploits2References6
myhack58
myhack58
•added 2007/09/06 12:00 a.m.•20 views

Cross-site attack to achieve Http session hijacking techniques-vulnerability warning-the black bar safety net

A Web application is by 2 ways to determine and keep track of different users: a Cookie or Sessionalso called session Cookies. Wherein the Cookie is stored on the local computer, the expiration time is very long, so for the Cookie of the means of attack is generally to steal user Cookies and then...

6.6AI score
SaveExploits0
exploitpack
exploitpack
•added 2007/08/22 12:00 a.m.•19 views

PHP 5.2.3 - PHP_win32sti Local Buffer Overflow (2)

PHP 5.2.3 - PHPwin32sti Local Buffer Overflow 2 "adm1n" password="netjackal" $SC= "\xEB\x19\x5A\x31\xC0\x50\x88\x42\x52\x52\xBB\x6D\x13\x86". "\x7C\xFF\xD3\xBB\xDA\xCD\x81\x7C\x31\xC0\x50\xFF\xD3\xE8". "\xE2\xFF\xFF\xFF\x63\x6D\x64\x2E\x65\x78\x65\x20\x2F\x63"...

1.1AI score
SaveExploits0
Atlassian
Atlassian
•added 2007/07/30 6:32 p.m.•30 views

"Current Assignee" on Browse Permission problem

I have created a permission scheme in Jira but I am experiencing an odd behaviour. I have 5 users in Jira and in the permission scheme, the Browse Projects is assigned to: - Project Lead - Project Role Administrators - Project Role Clients Among the 5 users, 3 fit these categories. One is a proje...

2.6AI score
SaveExploits0Affected Software1
Atlassian
Atlassian
•added 2007/07/30 6:32 p.m.•31 views

"Current Assignee" on Browse Permission problem

I have created a permission scheme in Jira but I am experiencing an odd behaviour. I have 5 users in Jira and in the permission scheme, the Browse Projects is assigned to: - Project Lead - Project Role Administrators - Project Role Clients Among the 5 users, 3 fit these categories. One is a proje...

2.6AI score
SaveExploits0
Packet Storm
Packet Storm
•added 2007/07/21 12:00 a.m.•45 views

blogsite-sql.txt

--==+================================================================================+==-- --==+ BlogSite Professional SQL Injection Vulnerbility +==-- --==+================================================================================+==-- AUTHOR: t0pP8uZz & xprog SITE: N/A DORK:...

7.4AI score
SaveExploits0
Prion
Prion
•added 2007/05/17 8:30 p.m.•21 views

Directory traversal

Directory traversal vulnerability in rdwhelpers.py in rdiffWeb before 0.3.5.1 allows remote attackers to read arbitrary files via a .. dot dot in the path parameter to the /browse URI...

5CVSS7.2AI score0.03514EPSS
SaveExploits1References7Affected Software1
Cvelist
Cvelist
•added 2007/05/17 8:00 p.m.•28 views

CVE-2007-2747

Directory traversal vulnerability in rdwhelpers.py in rdiffWeb before 0.3.5.1 allows remote attackers to read arbitrary files via a .. dot dot in the path parameter to the /browse URI...

6.7AI score0.03514EPSS
SaveExploits1References7
securityvulns
securityvulns
•added 2006/12/19 12:00 a.m.•54 views

WebCalendar >=1.0 Cross-Site Scripting Vulnerabilities

WebCalendar =1.0 Cross-Site Scripting Vulnerabilities |=---= WebCalendar =1.0 Cross-Site Scripting Vulnerabilities ---=| |=-----------------------------------------------------------------=| |=---------------= 7all7all7at163.com =----------------------=|...

0.8AI score
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2006/12/14 12:00 a.m.•6 views

CVE-2006-6512: Undefined Security Weakness

Directory traversal vulnerability in the Browse function /browse URI in Winamp Web Interface Wawi 7.5.13 and earlier allows remote authenticated users to list arbitrary directories via URL encoded backslashes "%2F" in the path parameter...

3.5CVSS6AI score0.01305EPSS
SaveExploits0References1
Rows per page
Query Builder