23601 matches found
CVE-2007-5559
Heap-based buffer overflow in the IBM ThinkVantage TPM Service allows remote attackers to execute arbitrary code via a crafted HTTP packet. NOTE: as of 20071016, the only disclosure is a vague pre-advisory with no actionable information. However, since it is from a well-known researcher, it is...
CVE-2007-5775
Unspecified vulnerability in BitDefender allows attackers to execute arbitrary code via unspecified vectors, aka EEYEB-20071024. NOTE: as of 20071029, the only disclosure is a vague pre-advisory with no actionable information. However, since it is from a well-known researcher, it is being assigne...
CVE-2007-5554
Oracle allows remote attackers to obtain server memory contents via crafted packets, aka Oracle reference number 7892711. NOTE: as of 20071016, the only disclosure is a vague pre-advisory with no actionable information. However, since it is from a well-known researcher, it is being assigned a CVE...
CVE-2008-5914
An unspecified function in the JavaScript implementation in Apple Safari creates and exposes a "temporary footprint" when there is a current login to a web site, which makes it easier for remote attackers to trick a user into acting upon a spoofed pop-up message, aka an "in-session phishing...
CVE-2008-1062
InterVideo IMC Server aka IMCSvr.exe and InterVideo Home Theater aka IHT.exe in InterVideo WinDVD Media Center 2.11.15.0 allow remote attackers to cause a denial of service NULL dereference and application crash via a crafted packet with two CRLF sequences. NOTE: the provenance of this informatio...
CVE-2002-1990
Resin 2.0.5 through 2.1.2 allows remote attackers to reveal physical path information via a URL request for the example Java class file HelloServlet...
CVE-2025-34027
creationtimestamp| type| source ---|---|--- 2025-05-21 22:41:55+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/17212 2025-05-21 23:25:41+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114548404428327018 2025-05-22 01:55:36+00:00| seen|...
CVE-2025-47947
creationtimestamp| type| source ---|---|--- 2025-05-21 22:41:54+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/17210 2025-05-21 23:26:56+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114548409339459848 2025-05-22 01:21:11+00:00| seen|...
CVE-2025-48070
creationtimestamp| type| source ---|---|--- 2025-05-21 22:41:53+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/17209 2025-05-22 01:27:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lppxlfcpza27...
CVE-2002-2180
The setitimer2 system call in OpenBSD 2.0 through 3.1 does not properly check certain arguments, which allows local users to write to kernel memory and possibly gain root privileges, possibly via an integer signedness error...
CVE-2002-2229
Directory traversal vulnerability in Sapio Design Ltd. WebReflex 1.53 allows remote attackers to read arbitrary files via a .. in an HTTP request...
CVE-2002-2052
Cisco 2611 router running IOS 12.16.5, possibly an interim release, allows remote attackers to cause a denial of service via port scans such as 1 scanning all ports on a single host and 2 scanning a network of hosts for a single open port through the router. NOTE: the vendor could not reproduce...
CVE-2002-2416
Directory traversal vulnerability in Zeroo web server 1.5 allows remote attackers to read arbitrary files via a .. dot dot in a URL GET request...
CVE-2006-5988
Unspecified vulnerability in Windows 2000 Advanced Server SP4 running Active Directory allows remote attackers to cause a denial of service via unknown vectors, as demonstrated by a certain VulnDisco Pack module. NOTE: the provenance of this information is unknown; the details are obtained from...
CVE-2025-5059
The CVE-2025-5059 entry concerns Campcodes Online Shopping Portal 1.0. The vulnerability resides in the admin/edit-subcategory.php handler, where manipulating the arguments productimage1, productimage2, or productimage3 enables unrestricted file uploads. Exploitation is possible remotely, and mul...
CVE-2004-2287
Directory traversal vulnerability in explorer.php in DSM Light Web File Browser 2.0 allows remote attackers to read arbitrary files via .. dot dot in the wdir parameter...
CVE-2006-7199
EMC RSA Security SiteKey allows remote attackers to display the correct image via a man-in-the-middle MITM attack in which an attacker-controlled server proxies authentication data to and from a legitimate SiteKey server. NOTE: the vendor disputes the severity of the issue, stating that it is...
CVE-2006-6998
install/loaderhelp.php in Headstart Solutions DeskPRO allows remote attackers to obtain configuration information via a q=phpinfo QUERYSTRING, which calls the phpinfo function...
CVE-2005-4860
Spectrum Cash Receipting System before 6.504 uses weak cryptography static substitution in the PASSFILE password file, which makes it easier for local users to gain privileges by decrypting a password...