Lucene search
+L

2314 matches found

Prion
Prion
•added 2007/01/11 11:28 a.m.•20 views

Buffer overflow

Buffer overflow in the cmdusr function in ftp-gw in TIS Internet Firewall Toolkit FWTK allows remote attackers to execute arbitrary code via a long destination hostname dest...

10CVSS8.5AI score0.04797EPSS
SaveExploits0References5Affected Software1
securityvulns
securityvulns
•added 2006/11/23 12:00 a.m.•62 views

Firefox password manager form information leak

Password manager doesn't check form destination. It makes it possible for attacker to retrieve saved paramters, including saved login/password if he can insert form into content of the site...

3.4AI score
SaveExploits0Affected Software1
UbuntuCve
UbuntuCve
•added 2006/10/23 5:07 p.m.•27 views

CVE-2006-5449

procmail in Ingo H3 before 1.1.2 Horde module allows remote authenticated users to execute arbitrary commands via shell metacharacters in the mailbox destination of a filter rule...

6.5CVSS6.2AI score0.04059EPSS
SaveExploits0References1
CVE
CVE
•added 2006/10/23 5:00 p.m.•85 views

CVE-2006-5449

CVE-2006-5449 affects Ingo H3 (Horde module) and allows remote authenticated users to execute arbitrary shell commands via metacharacters in the mailbox destination of a filter rule. The issue arises from inadequate escaping in procmail rule generation. Affected software is Ingo H3 up to version ...

6.5CVSS6.9AI score0.04059EPSS
SaveExploits0References9Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2006/09/28 12:00 a.m.•7 views

CVE-2006-5056: Undefined Security Weakness

Cross-site scripting XSS vulnerability in index.php in Opial Audio/Video Download Management 1.0 allows remote attackers to inject arbitrary web script or HTML via the destination parameter in the Login view...

5.1CVSS6AI score0.01984EPSS
SaveExploits2References1
RedHat Linux
RedHat Linux
•added 2006/08/10 7:31 p.m.•11 views

security flaw

net/ipv4/netfilter/ipconntrackcore.c in Linux kernel 2.4 and 2.6, and possibly net/ipv4/netfilter/nfconntrackl3protoipv4.c in 2.6, does not clear sockaddrin.sinzero before returning IPv4 socket names from the getsockopt function with SOORIGINALDST, which allows local users to obtain portions of...

2.1CVSS5.8AI score0.00431EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
•added 2006/07/20 1:17 p.m.•17 views

security flaw

net/ipv4/netfilter/ipconntrackcore.c in Linux kernel 2.4 and 2.6, and possibly net/ipv4/netfilter/nfconntrackl3protoipv4.c in 2.6, does not clear sockaddrin.sinzero before returning IPv4 socket names from the getsockopt function with SOORIGINALDST, which allows local users to obtain portions of...

2.1CVSS5.8AI score0.00431EPSS
SaveExploits0References4
OSV
OSV
•added 2006/07/07 12:05 a.m.•19 views

DEBIAN-CVE-2006-3415

Tor before 0.1.1.20 uses improper logic to validate the "OR" destination, which allows remote attackers to perform a man-in-the-middle MITM attack via unspecified vectors...

6.4CVSS5.9AI score0.02047EPSS
SaveExploits0References1
UbuntuCve
UbuntuCve
•added 2006/07/07 12:05 a.m.•35 views

CVE-2006-3415

Tor before 0.1.1.20 uses improper logic to validate the "OR" destination, which allows remote attackers to perform a man-in-the-middle MITM attack via unspecified vectors...

6.4CVSS6AI score0.02047EPSS
SaveExploits0References1
Debian CVE
Debian CVE
•added 2006/07/07 12:00 a.m.•51 views

CVE-2006-3415

Tor before 0.1.1.20 uses improper logic to validate the "OR" destination, which allows remote attackers to perform a man-in-the-middle MITM attack via unspecified vectors...

6.4CVSS6.4AI score0.02047EPSS
SaveExploits0
Cvelist
Cvelist
•added 2006/07/07 12:00 a.m.•33 views

CVE-2006-3415

Tor before 0.1.1.20 uses improper logic to validate the "OR" destination, which allows remote attackers to perform a man-in-the-middle MITM attack via unspecified vectors...

6.6AI score0.02047EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2006/07/07 12:00 a.m.•4 views

CVE-2006-3415: Undefined Security Weakness

Tor before 0.1.1.20 uses improper logic to validate the "OR" destination, which allows remote attackers to perform a man-in-the-middle MITM attack via unspecified vectors...

6.4CVSS5.9AI score0.02047EPSS
SaveExploits0References1
CVE
CVE
•added 2006/07/07 12:00 a.m.•53 views

CVE-2006-3415

Summary: CVE-2006-3415 affects Tor before 0.1.1.20 due to an improper validation of the \

6.4CVSS6.6AI score0.02047EPSS
SaveExploits0References4Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2006/06/23 12:00 a.m.•5 views

CVE-2006-3177: Undefined Security Weakness

PHP remote file inclusion vulnerability in Admin/rtfparser.php in The Bible Portal Project 2.12 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the destination parameter...

7.5CVSS6.4AI score0.03454EPSS
SaveExploits1References1
seebug.org
seebug.org
•added 2006/06/14 12:00 a.m.•18 views

The Bible Portal Project <= 2.12 (destination) File Include Vulnerability

No description provided by source. $$$$$$$$$$$$$$$ DEVIL TEAM THE BEST POLISH TEAM $$$$$$$$$$$$$$$ $$ $$ The Bible Portal Project destination = 2.12 Remote File Include Vulnerability $$ script site: http://www.bibleportalproject.com/ $$...

7.1AI score
SaveExploits0
Check Point Advisories
Check Point Advisories
•added 2006/06/06 12:00 a.m.•8 views

Update Protection against Microsoft ISA Server Manipulation Vulnerability

ISA Server 2004 is an application-layer firewall, virtual private network VPN, and Web cache solution. A Log Manipulation vulnerability was reported in Microsoft ISA Server 2004. When exploited, the vulnerability will enable an attacker to manipulate the Destination Host parameter of the log file...

1.9AI score
SaveExploits0
myhack58
myhack58
•added 2006/05/30 12:00 a.m.•17 views

“Vulnerability exploits”is compiled out of the-vulnerability warning-the black bar safety net

Step 2. Choose to install the desired program source of the method There are 3 kinds of way.“ The Install from Internet”to directly download the desired program and immediately installed; the“Download from Internet”to only download the required program and is not installed; the“Install from Local...

6.9AI score
SaveExploits0
Prion
Prion
•added 2006/02/10 11:02 a.m.•24 views

Design/Logic Flaw

Orbicule Undercover uses a third-party web server to determine the IP address through which the computer is accessing the Internet, but does not document this third-party disclosure, which leads to a potential privacy leak that might allow transmission of sensitive information to an unintended...

2.6CVSS6.8AI score0.008EPSS
SaveExploits0References1
NVD
NVD
•added 2006/02/10 11:02 a.m.•26 views

CVE-2006-0641

Orbicule Undercover uses a third-party web server to determine the IP address through which the computer is accessing the Internet, but does not document this third-party disclosure, which leads to a potential privacy leak that might allow transmission of sensitive information to an unintended...

2.6CVSS6.2AI score0.008EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2006/02/10 11:00 a.m.•33 views

CVE-2006-0641

Orbicule Undercover uses a third-party web server to determine the IP address through which the computer is accessing the Internet, but does not document this third-party disclosure, which leads to a potential privacy leak that might allow transmission of sensitive information to an unintended...

6.2AI score0.008EPSS
SaveExploits0References1
Rows per page
Query Builder