Lucene search
+L

5118 matches found

Cvelist
Cvelist
added 2005/04/21 4:00 a.m.33 views

CVE-2004-0928

The Microsoft IIS Connector in JRun 4.0 and Macromedia ColdFusion MX 6.0, 6.1, and 6.1 J2EE allows remote attackers to bypass authentication and view source files, such as .asp, .pl, and .php files, via an HTTP request that ends in ";.cfm"...

6.7AI score0.04075EPSS
SaveExploits0References9
CVE
CVE
added 2005/04/21 4:00 a.m.85 views

CVE-2004-0928

The CVE-2004-0928 family affects Adobe JRun 4.x servers (and ColdFusion MX 6.0/6.1/J2EE) when running with IIS, where a crafted request ending in ";.cfm" can bypass authentication and disclose script/source content (e.g., .asp, .pl, .php). Connected advisories describe URL handling flaws that tri...

5CVSS6.9AI score0.04075EPSS
SaveExploits0References9Affected Software4
CVE
CVE
added 2005/03/29 5:00 a.m.58 views

CVE-2005-0921

CVE-2005-0921 affects Microsoft Outlook 2002 Connector for IBM Lotus Domino 2.0. The vulnerability allows local users to save passwords and login credentials locally, even when password caching is disabled by a group policy. The NVD metrics show a CVSS v2 base score of 4.6 (medium), with local at...

4.6CVSS6.6AI score0.01343EPSS
SaveExploits0References2Affected Software1
NVD
NVD
added 2004/12/23 5:00 a.m.29 views

CVE-2004-0646

Buffer overflow in the WriteToLog function for JRun 3.0 through 4.0 web server connectors, such as 1 modjrun and 2 modjrun20 for Apache, with verbose logging enabled, allows remote attackers to execute arbitrary code via a long HTTP header Content-Type field or other fields...

10CVSS7.8AI score0.07104EPSS
SaveExploits4References7
Tenable Nessus
Tenable Nessus
added 2004/09/24 12:00 a.m.49 views

JRun Multiple Vulnerabilities (OF, XSS, ID, Hijacking)

The remote host is running JRun, a J2EE application server running on top of IIS or Apache. There are multiple flaws in the remote version of this software : - The JSESSIONID variable is not implemented securely. An attacker may use this flaw to guess the session id number of other users. Only JR...

10CVSS6.5AI score0.07104EPSS
SaveExploits4References10
Tenable Nessus
Tenable Nessus
added 2004/09/13 12:00 a.m.18 views

MailEnable SMTP Connector Service DNS MX Response DoS

According to its banner, the remote host is running at least one instance of MailEnable's SMTP Connector service. A flaw exists in both the Standard Edition 1.7x and Professional Edition 1.2x/1.5a-e that results in this service crashing if it receives a DNS response with over 100 MX records. A...

5.6AI score
SaveExploits0
Cvelist
Cvelist
added 2003/04/02 5:00 a.m.33 views

CVE-2002-0054

SMTP service in 1 Microsoft Windows 2000 and 2 Internet Mail Connector IMC in Exchange Server 5.5 does not properly handle responses to NTLM authentication, which allows remote attackers to perform mail relaying via an SMTP AUTH command using null session credentials...

6.8AI score0.22438EPSS
SaveExploits0References3
securityvulns
securityvulns
added 2003/03/14 12:00 a.m.38 views

Sun One Application Server buffer overflow

Buffer overflow on oversized URI in connector module...

4.8AI score
SaveExploits0References1Affected Software1
NVD
NVD
added 2002/08/12 4:00 a.m.29 views

CVE-2002-0698

Buffer overflow in Internet Mail Connector IMC for Microsoft Exchange Server 5.5 allows remote attackers to execute arbitrary code via an EHLO request from a system with a long name as obtained through a reverse DNS lookup, which triggers the overflow in IMC's hello response...

7.5CVSS7.8AI score0.20257EPSS
SaveExploits0References5
Exploit DB
Exploit DB
added 2000/10/23 12:00 a.m.43 views

Allaire JRun 3 - Directory Disclosure

source: https://www.securityfocus.com/bid/1830/info Allaire JRun is a web application development suite with JSP and Java Servlets. Each web application directory contains a WEB-INF directory, this directory contains information on web application classes, pre-compiled JSP files, server side...

5CVSS5.8AI score0.08179EPSS
SaveExploits1
CVE
CVE
added 1976/01/01 12:00 a.m.9 views

CVE-2023-24541

This CVE ID is rejected by its CNA as unused and does not represent an active vulnerability entry.

SaveExploits0
Microsoft KB
Microsoft KB
added 1970/01/01 12:00 a.m.25 views

Security update 1970-01-01

...

5.3AI score
SaveExploits0
Microsoft Security Update
Microsoft Security Update
added 1970/01/01 12:00 a.m.7 views

Exchange 2000 ADC Product

...

1.5AI score
SaveExploits0
Microsoft Security Update
Microsoft Security Update
added 1970/01/01 12:00 a.m.14 views

Exchange 2003 ADC Product

...

1.5AI score
SaveExploits0
Microsoft KB
Microsoft KB
added 1970/01/01 12:00 a.m.88 views

Security update 1970-01-01

...

5.3AI score
SaveExploits0
Microsoft Security Update
Microsoft Security Update
added 1970/01/01 12:00 a.m.7 views

Exchange ADC ITA Lang

...

1.5AI score
SaveExploits0
Microsoft Security Update
Microsoft Security Update
added 1970/01/01 12:00 a.m.12 views

Service Pack 2 for Microsoft SharePoint 2010 Indexing Connector for Documentum (KB2687459)

Service Pack 2 SP2 for Microsoft SharePoint 2010 Indexing Connector for Documentum contains new updates which improve security, performance, and stability. Additionally, the SP is a roll-up of all previously released updates...

1.6AI score
SaveExploits0
Microsoft Security Update
Microsoft Security Update
added 1970/01/01 12:00 a.m.10 views

Service Pack 1 for Microsoft SharePoint 2010 Indexing Connector for Documentum (KB2460054)

Service Pack 1 SP1 for Microsoft SharePoint 2010 Indexing Connector for Documentum contains new updates which improve security, performance, and stability. Additionally, the SP is a roll-up of all previously released updates...

1.6AI score
SaveExploits0
Rows per page
Query Builder