Lucene search
+L

6673 matches found

Tenable Nessus
Tenable Nessus
•added 2002/07/25 12:00 a.m.•32 views

Sendmail < 8.8.5 MIME Conversion Malformed Header Overflow

The remote Sendmail server, according to its version number, may be vulnerable to a MIME conversion overflow attack which allows anyone to execute arbitrary commands as root. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid10055; scriptversion"1.22";...

10CVSS5.7AI score0.03112EPSS
SaveExploits0References1
securityvulns
securityvulns
•added 2002/06/18 12:00 a.m.•48 views

Buffer overflow in Apache

Signed/unsigned conversion bug on CHUNKed POST...

4.7AI score
SaveExploits0References4Affected Software1
securityvulns
securityvulns
•added 2002/05/03 12:00 a.m.•39 views

Directory traversal in DocBook

During conversion to HTML identifuers are used to form a filename without check for ../...

1.7AI score
SaveExploits0References1Affected Software1
NVD
NVD
•added 2002/03/25 5:00 a.m.•22 views

CVE-2002-0094

configconverters.py in BSCW Basic Support for Cooperative Work 3.x and versions before 4.06 allows remote attackers to execute arbitrary commands via shell metacharacters in the file name during filename conversion...

7.5CVSS7.7AI score0.03287EPSS
SaveExploits0References4
securityvulns
securityvulns
•added 2002/03/21 12:00 a.m.•36 views

format string vulnerability protection bypass in libsafe

Not all of possible converion flags are processed...

2.7AI score
SaveExploits0References2Affected Software1
securityvulns
securityvulns
•added 2002/03/19 12:00 a.m.•47 views

Code execution bugs in virtual Java machines

Bug in data conversion routines...

5AI score
SaveExploits0References2Affected Software3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2002/03/09 12:00 a.m.•6 views

CVE-2001-0980: Undefined Security Weakness

docview before 1.0-15 allows remote attackers to execute arbitrary commands via shell metacharacters that are processed when converting a man page to a web page...

7.5CVSS6.3AI score0.02355EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2001/09/12 4:00 a.m.•44 views

CVE-1999-1357

Netscape Communicator 4.04 through 4.7 and possibly other versions in various UNIX operating systems converts the 0x8b character to a "" sign, which could allow remote attackers to attack other clients via cross-site scripting CSS in CGI programs that do not filter these characters...

6.2AI score0.02035EPSS
SaveExploits0References1
securityvulns
securityvulns
•added 2001/08/28 12:00 a.m.•59 views

Выполнение кода через LPRng &#40;code execution&#41;

При конфертации TeX файла не включается безопасный режим, что позволяет выполнение макрокоманд...

1AI score
SaveExploits0References1
NVD
NVD
•added 2001/07/17 4:00 a.m.•29 views

CVE-2001-0980

docview before 1.0-15 allows remote attackers to execute arbitrary commands via shell metacharacters that are processed when converting a man page to a web page...

7.5CVSS7.7AI score0.02355EPSS
SaveExploits1References3
securityvulns
securityvulns
•added 2000/05/20 12:00 a.m.•46 views

Remote root против antisniff

Некорректное преобразование типов данных позволяет обойти проверку на размер строки и переполнить буфер...

1.5AI score
SaveExploits0References2Affected Software1
securityvulns
securityvulns
•added 2000/05/10 12:00 a.m.•61 views

DoS против knfsd в Linux

Некорректное преобразование между знаковыми/беззнаковыми величинами приводит к краху сервера...

0.6AI score
SaveExploits0Affected Software1
CVE
CVE
•added 2000/04/25 4:00 a.m.•102 views

CVE-1999-0997

CVE-1999-0997 affects wu-ftpd with FTP conversion enabled. A malformed file name can be interpreted as an argument to the converter, enabling command execution (e.g., via tar or uncompress) and giving an attacker the ability to run arbitrary commands with wu-ftpd’s privileges. Related advisories ...

7.5CVSS6.6AI score0.06224EPSS
SaveExploits1References1Affected Software2
Cvelist
Cvelist
•added 2000/04/25 4:00 a.m.•55 views

CVE-1999-0997

wu-ftp with FTP conversion enabled allows an attacker to execute commands via a malformed file name that is interpreted as an argument to the program that does the conversion, e.g. tar or uncompress...

6.6AI score0.06224EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2000/04/25 12:00 a.m.•4 views

CVE-1999-0997: Undefined Security Weakness

wu-ftp with FTP conversion enabled allows an attacker to execute commands via a malformed file name that is interpreted as an argument to the program that does the conversion, e.g. tar or uncompress...

7.5CVSS6.1AI score0.06224EPSS
SaveExploits1References1
CVE
CVE
•added 2000/03/22 5:00 a.m.•78 views

CVE-2000-0088

CVE-2000-0088 describes a buffer overflow in the conversion utilities for Word 5 documents (Japanese, Korean and Chinese) that allows a local attacker to execute arbitrary commands. The vulnerability is identified as the "Malformed Conversion Data" issue. The available references indicate a high ...

7.2CVSS7.5AI score0.01909EPSS
SaveExploits0References2Affected Software4
Cvelist
Cvelist
•added 2000/03/22 5:00 a.m.•43 views

CVE-2000-0088

Buffer overflow in the conversion utilities for Japanese, Korean and Chinese Word 5 documents allows an attacker to execute commands, aka the "Malformed Conversion Data" vulnerability...

7.1AI score0.01909EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2000/03/22 12:00 a.m.•3 views

CVE-2000-0088: Undefined Security Weakness

Buffer overflow in the conversion utilities for Japanese, Korean and Chinese Word 5 documents allows an attacker to execute commands, aka the "Malformed Conversion Data" vulnerability...

7.2CVSS6.1AI score0.01909EPSS
SaveExploits0References1
NVD
NVD
•added 2000/01/20 5:00 a.m.•33 views

CVE-2000-0088

Buffer overflow in the conversion utilities for Japanese, Korean and Chinese Word 5 documents allows an attacker to execute commands, aka the "Malformed Conversion Data" vulnerability...

7.2CVSS7.1AI score0.01909EPSS
SaveExploits0References2
NVD
NVD
•added 1999/12/20 5:00 a.m.•41 views

CVE-1999-0997

wu-ftp with FTP conversion enabled allows an attacker to execute commands via a malformed file name that is interpreted as an argument to the program that does the conversion, e.g. tar or uncompress...

7.5CVSS6.8AI score0.06224EPSS
SaveExploits1References1
Rows per page
Query Builder