Lucene search
+L

755 matches found

securityvulns
securityvulns
•added 2006/08/17 12:00 a.m.•41 views

Multiple MySQL security vulnerabilities

Privilege escalation with stored routine, privilege escalation with creating a database with the name different only in case from existing one...

2.8AI score
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2006/04/01 2:00 a.m.•48 views

CVE-2005-4759

BEA WebLogic Server and WebLogic Express 8.1 and 7.0, during a migration across operating system platforms, do not warn the administrative user about platform differences in URLResource case sensitivity, which might cause local users to inadvertently lose protection of Web Application pages...

6.3AI score0.01092EPSS
SaveExploits0References3
CVE
CVE
•added 2006/04/01 2:00 a.m.•70 views

CVE-2005-4759

CVE-2005-4759 affects BEA WebLogic Server and WebLogic Express 8.1 and 7.0. During OS platform migrations, it does not warn the admin about URLResource case-sensitivity differences, which may cause local users to inadvertently lose protection of Web Application pages. The NVD metrics show a base ...

5CVSS6.7AI score0.01092EPSS
SaveExploits0References3Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2006/04/01 12:00 a.m.•7 views

CVE-2005-4759: Undefined Security Weakness

BEA WebLogic Server and WebLogic Express 8.1 and 7.0, during a migration across operating system platforms, do not warn the administrative user about platform differences in URLResource case sensitivity, which might cause local users to inadvertently lose protection of Web Application pages...

5CVSS5.8AI score0.01092EPSS
SaveExploits0References1
NVD
NVD
•added 2005/12/31 5:00 a.m.•31 views

CVE-2005-4759

BEA WebLogic Server and WebLogic Express 8.1 and 7.0, during a migration across operating system platforms, do not warn the administrative user about platform differences in URLResource case sensitivity, which might cause local users to inadvertently lose protection of Web Application pages...

5CVSS6.3AI score0.01092EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2005/12/23 12:00 a.m.•17 views

PT-2005-5196 · Webwasher · Webwasher Csm Appliance Suite

Name of the Vulnerable Software and Affected Versions: Webwasher CSM Appliance Suite version 5.x Description: The encapsulation script mechanism in the affected software uses case-sensitive detection of malicious tokens. This allows attackers to bypass script detection by using tokens that can be...

5CVSS7.2AI score0.01559EPSS
SaveExploits0References7
CERT
CERT
•added 2005/08/31 12:00 a.m.•23 views

Reflection for Secure IT Windows Server 6.0 changed case sensitivity of allow and deny lists

Overview Reflection for Secure IT Windows Server version 6.0 uses different case-sensitivity in evaluating the allow and deny lists as previous versions, potentionally allowing unintended access. Description Reflection for Secure IT Windows Server version 6.0, an SSH server from WRQ formerly know...

6.8AI score
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2005/07/17 12:00 a.m.•6 views

CVE-2004-2214: Improper Handling of Case Sensitivity

Mbedthis AppWeb HTTP server before 1.1.3 allows remote attackers to bypass access restrictions via a URI with mixed case characters...

9.8CVSS5.8AI score0.02696EPSS
SaveExploits0References2
RedHat Linux
RedHat Linux
•added 2005/07/14 5:48 p.m.•24 views

security flaw

CUPS before 1.1.21rc1 treats a Location directive in cupsd.conf as case sensitive, which allows attackers to bypass intended ACLs via a printer name containing uppercase or lowercase letters that are different from what is specified in the directive...

9.8CVSS5.8AI score0.02072EPSS
SaveExploits0References4
Debian CVE
Debian CVE
•added 2005/07/05 4:00 a.m.•48 views

CVE-2004-2154

CUPS before 1.1.21rc1 treats a Location directive in cupsd.conf as case sensitive, which allows attackers to bypass intended ACLs via a printer name containing uppercase or lowercase letters that are different from what is specified in the directive...

9.8CVSS6.2AI score0.02072EPSS
SaveExploits0
CVE
CVE
•added 2005/07/05 4:00 a.m.•108 views

CVE-2004-2154

CVE-2004-2154 affects CUPS prior to 1.1.21rc1, where a Location directive in cupsd.conf is treated as case sensitive. This allows bypassing ACLs by using a printer name whose capitalization differs from that in the directive, enabling unauthorized access to printers. The issue is propagated acros...

9.8CVSS9.3AI score0.02072EPSS
SaveExploits0References7Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2005/07/05 12:00 a.m.•5 views

CVE-2004-2154: Improper Handling of Case Sensitivity

CUPS before 1.1.21rc1 treats a Location directive in cupsd.conf as case sensitive, which allows attackers to bypass intended ACLs via a printer name containing uppercase or lowercase letters that are different from what is specified in the directive...

9.8CVSS5.8AI score0.02072EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2005/06/28 12:00 a.m.•5 views

CVE-2002-1820: Improper Handling of Case Sensitivity

register.php in Ultimate PHP Board UPB 1.0 and 1.0b uses an administrative account Admin with a capital "A," but allows a remote attacker to impersonate the administrator by registering an account name of admin with a lower case "a."...

9.8CVSS5.9AI score0.02375EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2005/04/14 4:00 a.m.•54 views

CVE-2004-1083

Apache for Apple Mac OS X 10.2.8 and 10.3.6 restricts access to files in a case sensitive manner, but the Apple HFS+ filesystem accesses files in a case insensitive manner, which allows remote attackers to read .DSStore files and files beginning with ".ht" using alternate capitalization...

7.1AI score0.01878EPSS
SaveExploits0References7
CVE
CVE
•added 2005/04/14 4:00 a.m.•71 views

CVE-2004-1083

Apache on Apple Mac OS X 10.2.8 and 10.3.6 is affected by a vulnerability arising from case-sensitivity handling: Apache restricts file access in a case-sensitive way while the HFS+ filesystem on Mac is case-insensitive, allowing remote attackers to read .DS_Store and files starting with ".ht" vi...

7.5CVSS7.3AI score0.01878EPSS
SaveExploits0References7Affected Software2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2005/04/14 12:00 a.m.•3 views

CVE-2004-1083: Improper Handling of Case Sensitivity

Apache for Apple Mac OS X 10.2.8 and 10.3.6 restricts access to files in a case sensitive manner, but the Apple HFS+ filesystem accesses files in a case insensitive manner, which allows remote attackers to read .DSStore files and files beginning with ".ht" using alternate capitalization...

7.5CVSS5.9AI score0.01878EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2005/02/10 12:00 a.m.•3 views

CVE-2005-0269: Improper Handling of Case Sensitivity

The file extension check in GNUBoard 3.40 and earlier only verifies extensions that contain all lowercase letters, which allows remote attackers to upload arbitrary files via file extensions that include uppercase letters...

9.8CVSS5.9AI score0.02639EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2005/02/10 12:00 a.m.•18 views

PT-2005-1347 · Gnu · Gnuboard

Name of the Vulnerable Software and Affected Versions: GNUBoard versions 3.40 and earlier Description: The issue allows remote attackers to upload arbitrary files by exploiting a weakness in the file extension check, which only verifies extensions containing all lowercase letters. This enables...

9.8CVSS6.8AI score0.02639EPSS
SaveExploits1References7
UbuntuCve
UbuntuCve
•added 2004/12/31 5:00 a.m.•33 views

CVE-2004-2154

CUPS before 1.1.21rc1 treats a Location directive in cupsd.conf as case sensitive, which allows attackers to bypass intended ACLs via a printer name containing uppercase or lowercase letters that are different from what is specified in the directive...

9.8CVSS5.9AI score0.02072EPSS
SaveExploits0References2
OSV
OSV
•added 2004/12/31 5:00 a.m.•16 views

CVE-2004-2154

CUPS before 1.1.21rc1 treats a Location directive in cupsd.conf as case sensitive, which allows attackers to bypass intended ACLs via a printer name containing uppercase or lowercase letters that are different from what is specified in the directive...

9.8CVSS9.2AI score
SaveExploits0References9
Rows per page
Query Builder