Lucene search
+L

384 matches found

NVD
NVD
•added 2017/02/06 3:59 p.m.•25 views

CVE-2017-5877

XSS was discovered in dotCMS 3.7.0, with an unauthenticated attack against the /about-us/locations/index direction parameter...

6.1CVSS6.1AI score0.00922EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2017/02/06 12:00 a.m.•2 views

CVE-2017-5877: Improper Neutralization of Input During Web Page Generation

XSS was discovered in dotCMS 3.7.0, with an unauthenticated attack against the /about-us/locations/index direction parameter...

6.1CVSS5.7AI score0.00922EPSS
SaveExploits1References2
Microsoft KB
Microsoft KB
•added 2016/05/03 12:00 a.m.•17 views

May 3, 2016, update for InfoPath 2013 (KB3114818)

None None...

5.7AI score
SaveExploits0
hackapp
hackapp
•added 2016/04/01 10:12 a.m.•16 views

Quiz of One Direction - Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Quiz of One Direction published at the 'play' market has multiple vulnerabilities...

0.1AI score
SaveExploits0References1Affected Software1
Zero Day Initiative
Zero Day Initiative
•added 2015/12/17 12:00 a.m.•50 views

Microsoft Internet Explorer TextBlock Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to leak sensitive information on vulnerable installations of Microsoft Internet Explorer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...

9.3CVSS5.3AI score0.19436EPSS
SaveExploits0References1
RedHat Linux
RedHat Linux
•added 2014/10/15 4:12 p.m.•22 views

Mozilla: Use-after-free interacting with text directionality (MFSA 2014-79)

Use-after-free vulnerability in DirectionalityUtils.cpp in Mozilla Firefox before 33.0, Firefox ESR 31.x before 31.2, and Thunderbird 31.x before 31.2 allows remote attackers to execute arbitrary code via text that is improperly handled during the interaction between directionality resolution and...

7.5CVSS7.3AI score0.04055EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
•added 2013/09/17 7:15 p.m.•11 views

Mozilla: Memory corruption involving scrolling (MFSA 2013-90)

The nsGfxScrollFrameInner::IsLTR function in Mozilla Firefox before 24.0, Firefox ESR 17.x before 17.0.9, Thunderbird before 24.0, Thunderbird ESR 17.x before 17.0.9, and SeaMonkey before 2.21 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via...

10CVSS8.1AI score0.05391EPSS
SaveExploits0References5
The Hacker News
The Hacker News
•added 2011/05/23 5:59 a.m.•19 views

BlackHole Exploit Kit 1.0.2 - Download !

BlackHole Exploit Kit 1.0.2 - Download ! First Public Release of BlackHole Exploit Kit. BlackHole exploit kit is yet another in an ongoing wave of attack toolkits flooding the underground market. The kit first appeared on the crimeware market in September of 2010 and ever since then has quickly...

6.9AI score
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2010/04/22 12:00 a.m.•3 views

CVE-2009-4796: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in the ExecuteQueries function in private/system/classes/listfactory.class.php in glFusion 1.1.2 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 order and 2 direction parameters to search.php...

7.5CVSS6.4AI score0.02337EPSS
SaveExploits2References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2009/08/24 12:00 a.m.•5 views

CVE-2008-7036: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in index.php in DevTracker module 3.0 for bcoos 1.1.11 and earlier, and DevTracker module 0.20 for E-XooPS 1.0.8 and earlier, allow remote attackers to inject arbitrary web script or HTML via the 1 direction and 2 orderby parameters...

4.3CVSS5.8AI score0.01497EPSS
SaveExploits2References2
Packet Storm
Packet Storm
•added 2009/03/30 12:00 a.m.•2434 views

glFusion 1.1.2 SQL Injection

= 4.1 php.ini independent our site: http://retrogod.altervista.org/ software site: http://www.glfusion.org/ google dork: "Page created in" "seconds by glFusion" +RSS Vulnerability, sql injection in 'order' and 'direction' arguments: look ExecuteQueries function in...

0.2AI score
SaveExploits0
exploitpack
exploitpack
•added 2009/03/29 12:00 a.m.•1726 views

glFusion 1.1.2 - COM_applyFilter()order SQL Injection

glFusion 1.1.2 - COMapplyFilterorder SQL Injection = 4.1 php.ini independent our site: http://retrogod.altervista.org/ software site: http://www.glfusion.org/ google dork: "Page created in" "seconds by glFusion" +RSS Vulnerability, sql injection in 'order' and 'direction' arguments: look...

0.3AI score
SaveExploits0
OpenVAS
OpenVAS
•added 2009/02/13 12:00 a.m.•23 views

Fedora Core 9 FEDORA-2009-1366 (gpsdrive)

The remote host is missing an update to gpsdrive announced via advisory FEDORA-2009-1366. OpenVAS Vulnerability Test $Id: fcore20091366.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-1366 gpsdrive Authors: Thomas Reinke Copyright: Copyright c 2009...

6.9CVSS0.4AI score0.0045EPSS
SaveExploits1References3
Fedora
Fedora
•added 2009/02/05 2:22 a.m.•40 views

[SECURITY] Fedora 9 Update: gpsdrive-2.09-7.fc9

Gpsdrive is a map-based navigation system. It displays your position on a zoomable map provided from a NMEA-capable GPS receiver. The maps are autoselected for the best resolution, depending of your position, and the displayed image can be zoomed. Maps can be downloaded from the Internet with one...

6.9CVSS1AI score0.0045EPSS
SaveExploits1
Fedora
Fedora
•added 2009/02/05 2:10 a.m.•52 views

[SECURITY] Fedora 10 Update: gpsdrive-2.09-7.fc10

Gpsdrive is a map-based navigation system. It displays your position on a zoomable map provided from a NMEA-capable GPS receiver. The maps are autoselected for the best resolution, depending of your position, and the displayed image can be zoomed. Maps can be downloaded from the Internet with one...

6.9CVSS1AI score0.0045EPSS
SaveExploits1
Oracle linux
Oracle linux
•added 2008/06/26 12:00 a.m.•81 views

kernel security and bug fix update

2.6.9-67.0.20.0.1.EL - fix skb alignment that was causing sendto to fail with EFAULT Olaf Kirch orabug 6845794 - fix entropy flag in bnx2 driver to generate entropy pool John Sobecki orabug 5931647 - fix enomem due to larger mtu size page alloc Zach Brown orabug 5486128 - fix percpu api bugon wit...

10CVSS1.4AI score0.07091EPSS
SaveExploits8
RedHat Linux
RedHat Linux
•added 2008/06/25 3:13 p.m.•10 views

Kernel doesn't clear DF for signal handlers

gcc 4.3.x does not generate a cld instruction while compiling functions used for string manipulation such as memcpy and memmove on x86 and i386, which can prevent the direction flag DF from being reset in violation of ABI conventions and cause data to be copied in the wrong direction during signa...

7.5CVSS5.7AI score0.02791EPSS
SaveExploits1References4
RedHat Linux
RedHat Linux
•added 2008/05/07 7:39 a.m.•14 views

Kernel doesn't clear DF for signal handlers

gcc 4.3.x does not generate a cld instruction while compiling functions used for string manipulation such as memcpy and memmove on x86 and i386, which can prevent the direction flag DF from being reset in violation of ABI conventions and cause data to be copied in the wrong direction during signa...

7.5CVSS5.7AI score0.02791EPSS
SaveExploits1References4
RedHat Linux
RedHat Linux
•added 2008/05/07 6:56 a.m.•9 views

Kernel doesn't clear DF for signal handlers

gcc 4.3.x does not generate a cld instruction while compiling functions used for string manipulation such as memcpy and memmove on x86 and i386, which can prevent the direction flag DF from being reset in violation of ABI conventions and cause data to be copied in the wrong direction during signa...

7.5CVSS5.7AI score0.02791EPSS
SaveExploits1References4
Prion
Prion
•added 2008/03/17 11:44 p.m.•30 views

Memory corruption

gcc 4.3.x does not generate a cld instruction while compiling functions used for string manipulation such as memcpy and memmove on x86 and i386, which can prevent the direction flag DF from being reset in violation of ABI conventions and cause data to be copied in the wrong direction during signa...

7.5CVSS6.3AI score0.02791EPSS
SaveExploits1References28Affected Software1
Rows per page
Query Builder