Lucene search
+L

5342 matches found

Exploit DB
Exploit DB
•added 2013/01/01 12:00 a.m.•40 views

Linux/x86 - Reverse TCP Shellcode (67 bytes)

Linux/x86 - Reverse TCP Shellcode 67 bytes. Shellcode exploit for Linx86 platform / Tiny Shell Reverse TCP Shellcode - C Language Linux/x86 Written in 2013 by Geyslan G. Bem, Hacking bits http://hackingbits.com [email protected] This source is licensed under the Creative Commons...

7.4AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
•added 2012/12/20 12:00 a.m.•57 views

Fedora 16 : tomcat-7.0.33-1.fc16 (2012-20151)

Updated to 7.0.33 - Resolves: rhbz 873620 need chkconfig for update-alternatives - Resolves: rhbz 883676,883691,883704,873707 fix several security issues - Resolves: rhbz 883806 refix logdir ownership - Resolves: rhbz 820119 Remove bundled apache-commons-dbcp Note that Tenable Network Security...

5CVSS6AI score0.12098EPSS
SaveExploits5References13
RedHat Linux
RedHat Linux
•added 2012/12/04 7:24 p.m.•10 views

Moderate: Red Hat Security Advisory: CloudForms Commons 1.1 security update

Updated CloudForms Commons packages that fix several security issues are now available. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, are available for each...

7.5CVSS6.9AI score0.04923EPSS
SaveExploits14References16
Positive Technologies
Positive Technologies
•added 2012/11/20 12:00 a.m.•8 views

PT-2012-1252

Name of the Vulnerable Software and Affected Versions Apache Commons HttpClient versions prior to 4.2.3 Description The issue is related to insufficient verification of input data in the Apache Commons HttpClient library, part of Apache HttpComponents. This allows a remote attacker to spoof SSL...

5CVSS0.05844EPSS
SaveExploits0References48
OSV
OSV
•added 2012/11/04 10:55 p.m.•10 views

DEBIAN-CVE-2012-5783

Apache Commons HttpClient 3.x, as used in Amazon Flexible Payments Service FPS merchant Java SDK and other products, does not verify that the server hostname matches a domain name in the subject's Common Name CN or subjectAltName field of the X.509 certificate, which allows man-in-the-middle...

5.8CVSS9.1AI score0.09213EPSS
SaveExploits0References1
NVD
NVD
•added 2012/11/04 10:55 p.m.•30 views

CVE-2012-5783

Apache Commons HttpClient 3.x, as used in Amazon Flexible Payments Service FPS merchant Java SDK and other products, does not verify that the server hostname matches a domain name in the subject's Common Name CN or subjectAltName field of the X.509 certificate, which allows man-in-the-middle...

5.8CVSS6.3AI score0.09213EPSS
SaveExploits0References18
Prion
Prion
•added 2012/11/04 10:55 p.m.•31 views

Code injection

Apache Commons HttpClient 3.x, as used in Amazon Flexible Payments Service FPS merchant Java SDK and other products, does not verify that the server hostname matches a domain name in the subject's Common Name CN or subjectAltName field of the X.509 certificate, which allows man-in-the-middle...

5.8CVSS6.6AI score0.09213EPSS
SaveExploits0References18Affected Software2
Debian CVE
Debian CVE
•added 2012/11/04 10:00 p.m.•83 views

CVE-2012-5783

Apache Commons HttpClient 3.x, as used in Amazon Flexible Payments Service FPS merchant Java SDK and other products, does not verify that the server hostname matches a domain name in the subject's Common Name CN or subjectAltName field of the X.509 certificate, which allows man-in-the-middle...

5.8CVSS7.3AI score0.09213EPSS
SaveExploits0
Cvelist
Cvelist
•added 2012/11/04 10:00 p.m.•39 views

CVE-2012-5783

Apache Commons HttpClient 3.x, as used in Amazon Flexible Payments Service FPS merchant Java SDK and other products, does not verify that the server hostname matches a domain name in the subject's Common Name CN or subjectAltName field of the X.509 certificate, which allows man-in-the-middle...

6.7AI score0.09213EPSS
SaveExploits0References18
CVE
CVE
•added 2012/11/04 10:00 p.m.•562 views

CVE-2012-5783

Apache Commons HttpClient 3.x (as used in Amazon FPS Java SDK and related products) is affected by CVE-2012-5783: the code does not verify that the server hostname matches the CN/subjectAltName in the X.509 certificate, enabling potential MITM spoofing with arbitrary certificates. AIX advisories,...

5.8CVSS6.8AI score0.09213EPSS
SaveExploits0References18Affected Software1
Mend
Mend
•added 2012/11/04 10:00 p.m.•2 views

CVE-2012-5783

Apache Commons HttpClient 3.x, as used in Amazon Flexible Payments Service FPS merchant Java SDK and other products, does not verify that the server hostname matches a domain name in the subject's Common Name CN or subjectAltName field of the X.509 certificate, which allows man-in-the-middle...

6.3CVSS0.09213EPSS
SaveExploits0References20
UbuntuCve
UbuntuCve
•added 2012/11/04 12:00 a.m.•56 views

CVE-2012-5783

Apache Commons HttpClient 3.x, as used in Amazon Flexible Payments Service FPS merchant Java SDK and other products, does not verify that the server hostname matches a domain name in the subject's Common Name CN or subjectAltName field of the X.509 certificate, which allows man-in-the-middle...

5.8CVSS6.9AI score0.09213EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2012/11/04 12:00 a.m.•6 views

PT-2012-6095

Name of the Vulnerable Software and Affected Versions Apache Commons HttpClient versions 3.x Description The issue arises from the failure to verify that the server hostname matches a domain name in the subject's Common Name CN or subjectAltName field of the X.509 certificate. This allows...

5.8CVSS0.09213EPSS
SaveExploits0References40
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2012/11/04 12:00 a.m.•5 views

CVE-2012-5783: Improper Certificate Validation

Apache Commons HttpClient 3.x, as used in Amazon Flexible Payments Service FPS merchant Java SDK and other products, does not verify that the server hostname matches a domain name in the subject's Common Name CN or subjectAltName field of the X.509 certificate, which allows man-in-the-middle...

5.8CVSS6.5AI score0.09213EPSS
SaveExploits0References2
NVD
NVD
•added 2012/10/31 4:55 p.m.•32 views

CVE-2012-4483

The commonsdiscussionviewsdefaultviews function in modules/features/commonsdiscussion/commonsdiscussion.viewsdefault.inc in the Drupal Commons module 6.x-2.x before 6.x-2.8 for Drupal does not properly enforce intended node access restrictions, which might allow remote attackers to obtain sensiti...

5CVSS6.2AI score0.01369EPSS
SaveExploits0References5
Prion
Prion
•added 2012/10/31 4:55 p.m.•27 views

Design/Logic Flaw

The commonsdiscussionviewsdefaultviews function in modules/features/commonsdiscussion/commonsdiscussion.viewsdefault.inc in the Drupal Commons module 6.x-2.x before 6.x-2.8 for Drupal does not properly enforce intended node access restrictions, which might allow remote attackers to obtain sensiti...

5CVSS6.8AI score0.01369EPSS
SaveExploits0References5Affected Software1
Cvelist
Cvelist
•added 2012/10/31 4:00 p.m.•39 views

CVE-2012-4483

The commonsdiscussionviewsdefaultviews function in modules/features/commonsdiscussion/commonsdiscussion.viewsdefault.inc in the Drupal Commons module 6.x-2.x before 6.x-2.8 for Drupal does not properly enforce intended node access restrictions, which might allow remote attackers to obtain sensiti...

6.2AI score0.01369EPSS
SaveExploits0References5
CVE
CVE
•added 2012/10/31 4:00 p.m.•63 views

CVE-2012-4483

CVE-2012-4483 affects the Drupal Commons module (6.x-2.x) before 6.x-2.8. The underling root cause is that the function commons_discussion_views_default_views does not properly enforce node access restrictions, potentially allowing remote attackers to view sensitive information via the recent com...

5CVSS5.9AI score0.01369EPSS
SaveExploits0References5Affected Software1
Positive Technologies
Positive Technologies
•added 2012/10/31 12:00 a.m.•6 views

PT-2012-5429

Name of the Vulnerable Software and Affected Versions Drupal Commons module versions 6.x-2.x before 6.x-2.8 Description The issue is related to the commons discussion views default views function in the Drupal Commons module, which does not properly enforce intended node access restrictions. This...

5CVSS0.01369EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2012/10/31 12:00 a.m.•4 views

CVE-2012-4483: Undefined Security Weakness

The commonsdiscussionviewsdefaultviews function in modules/features/commonsdiscussion/commonsdiscussion.viewsdefault.inc in the Drupal Commons module 6.x-2.x before 6.x-2.8 for Drupal does not properly enforce intended node access restrictions, which might allow remote attackers to obtain sensiti...

5CVSS5.9AI score0.01369EPSS
SaveExploits0References2
Rows per page
Query Builder