Lucene search
+L

4436 matches found

Cvelist
Cvelist
•added 2005/11/01 11:00 a.m.•37 views

CVE-2005-3405

ATutor 1.4.1 through 1.5.1-pl1 allows remote attackers to execute arbitrary PHP functions via a direct request to forum.inc.php with a modified addslashes parameter with either the 1 asc or 2 desc parameters set, possibly due to an eval injection vulnerability...

7.8AI score0.08074EPSS
SaveExploits2References8
CVE
CVE
•added 2005/11/01 11:00 a.m.•57 views

CVE-2005-3405

ATutor

7.5CVSS6.6AI score0.08074EPSS
SaveExploits2References8
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2005/11/01 12:00 a.m.•7 views

CVE-2005-3405: Undefined Security Weakness

ATutor 1.4.1 through 1.5.1-pl1 allows remote attackers to execute arbitrary PHP functions via a direct request to forum.inc.php with a modified addslashes parameter with either the 1 asc or 2 desc parameters set, possibly due to an eval injection vulnerability...

7.5CVSS6.6AI score0.08074EPSS
SaveExploits2References1
osv_debian
osv_debian
•added 2005/10/24 10:02 a.m.•25 views

DEBIAN-CVE-2005-3302

Eval injection vulnerability in bvhimport.py in Blender 2.36 allows attackers to execute arbitrary Python code via a hierarchy element in a .bvh file, which is supplied to an eval function call...

7.3CVSS6.5AI score0.03884EPSS
SaveExploits2References1
UbuntuCve
UbuntuCve
•added 2005/10/24 10:02 a.m.•39 views

CVE-2005-3302

Eval injection vulnerability in bvhimport.py in Blender 2.36 allows attackers to execute arbitrary Python code via a hierarchy element in a .bvh file, which is supplied to an eval function call...

7.5CVSS6.2AI score0.03884EPSS
SaveExploits2References1
Vulnrichment
Vulnrichment
•added 2005/10/24 4:00 a.m.•16 views

CVE-2005-3302

Eval injection vulnerability in bvhimport.py in Blender 2.36 allows attackers to execute arbitrary Python code via a hierarchy element in a .bvh file, which is supplied to an eval function call...

8.1AI score0.03884EPSS
SaveExploits2References4
Cvelist
Cvelist
•added 2005/10/24 4:00 a.m.•45 views

CVE-2005-3302

Eval injection vulnerability in bvhimport.py in Blender 2.36 allows attackers to execute arbitrary Python code via a hierarchy element in a .bvh file, which is supplied to an eval function call...

7.3AI score0.03884EPSS
SaveExploits2References4
CVE
CVE
•added 2005/10/24 4:00 a.m.•93 views

CVE-2005-3302

CVE-2005-3302 is an eval-injection vulnerability in Blender 2.36 (bvh_import.py) that lets an attacker execute arbitrary Python code via a hierarchy element in a .bvh file fed to an eval(). The issue arises from missing input validation in the Blender importer. Impact described in sources include...

7.5CVSS7.3AI score0.03884EPSS
SaveExploits2References4Affected Software1
Debian CVE
Debian CVE
•added 2005/10/24 4:00 a.m.•63 views

CVE-2005-3302

Eval injection vulnerability in bvhimport.py in Blender 2.36 allows attackers to execute arbitrary Python code via a hierarchy element in a .bvh file, which is supplied to an eval function call...

7.5CVSS7.5AI score0.03884EPSS
SaveExploits2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2005/10/24 12:00 a.m.•7 views

CVE-2005-3302: Improper Control of Generation of Code

Eval injection vulnerability in bvhimport.py in Blender 2.36 allows attackers to execute arbitrary Python code via a hierarchy element in a .bvh file, which is supplied to an eval function call...

7.5CVSS6.3AI score0.03884EPSS
SaveExploits2References3
Cent OS
Cent OS
•added 2005/10/12 12:30 a.m.•76 views

irb, ruby security update

CentOS Errata and Security Advisory CESA-2005:799-01 Updated ruby packages that fix an arbitrary command execution issue are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Updated 25 Oct 2005 Errata has been updated to include...

7.5CVSS5.9AI score0.03256EPSS
SaveExploits0References8
Cent OS
Cent OS
•added 2005/10/11 5:07 p.m.•75 views

irb, ruby security update

CentOS Errata and Security Advisory CESA-2005:799 Updated ruby packages that fix an arbitrary command execution issue are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Updated 25 Oct 2005 Errata has been updated to include...

7.5CVSS5.9AI score0.03256EPSS
SaveExploits0References9
RedHat Linux
RedHat Linux
•added 2005/10/11 4:03 p.m.•40 views

Moderate: Red Hat Security Advisory: ruby security update

Updated ruby packages that fix an arbitrary command execution issue are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Updated 25 Oct 2005 Errata has been updated to include missing packages for Red Hat Enterprise Linux 3. Ruby ...

7.5CVSS5.9AI score0.03256EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2005/09/28 12:00 a.m.•10 views

CVE-2005-3089: Undefined Security Weakness

Firefox 1.0.6 allows attackers to cause a denial of service crash via a Proxy Auto-Config PAC script that uses an eval statement. NOTE: it is not clear whether an untrusted party has any role in triggering this issue, so it might not be a vulnerability...

2.6CVSS5.7AI score0.01683EPSS
SaveExploits0References1
RedHat Linux
RedHat Linux
•added 2005/09/22 8:16 p.m.•17 views

security flaw

Firefox 1.0.6 allows attackers to cause a denial of service crash via a Proxy Auto-Config PAC script that uses an eval statement. NOTE: it is not clear whether an untrusted party has any role in triggering this issue, so it might not be a vulnerability...

2.6CVSS5.8AI score0.01683EPSS
SaveExploits0References4
NVD
NVD
•added 2005/09/07 8:03 p.m.•27 views

CVE-2005-2837

Multiple eval injection vulnerabilities in PlainBlack Software WebGUI before 6.7.3 allow remote attackers to execute arbitrary Perl code via 1 Help.pm, 2 International.pm, or 3 WebGUI.pm...

7.5CVSS7.9AI score0.01691EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2005/09/07 4:00 a.m.•32 views

CVE-2005-2837

Multiple eval injection vulnerabilities in PlainBlack Software WebGUI before 6.7.3 allow remote attackers to execute arbitrary Perl code via 1 Help.pm, 2 International.pm, or 3 WebGUI.pm...

7.9AI score0.01691EPSS
SaveExploits0References2
CVE
CVE
•added 2005/09/07 4:00 a.m.•67 views

CVE-2005-2837

CVE-2005-2837 affects Plain Black Software WebGUI prior to 6.7.3. Multiple eval injection flaws in the modules Help.pm, International.pm, and WebGUI.pm allow remote attackers to execute arbitrary Perl code. This is a remote code execution risk on WebGUI installations exposed to an attacker; explo...

7.5CVSS7.9AI score0.01691EPSS
SaveExploits0References2Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2005/09/07 12:00 a.m.•11 views

CVE-2005-2837: Improper Control of Generation of Code

Multiple eval injection vulnerabilities in PlainBlack Software WebGUI before 6.7.3 allow remote attackers to execute arbitrary Perl code via 1 Help.pm, 2 International.pm, or 3 WebGUI.pm...

7.5CVSS6.3AI score0.01691EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2005/09/07 12:00 a.m.•21 views

PT-2005-3703 · Plain Black · Webgui

Name of the Vulnerable Software and Affected Versions: WebGUI versions prior to 6.7.3 Description: The issue allows remote attackers to execute arbitrary Perl code via multiple eval injection vulnerabilities in the following modules: 1 Help.pm, 2 International.pm, or 3 WebGUI.pm. Recommendations:...

7.5CVSS7.8AI score0.01691EPSS
SaveExploits0References4
Rows per page
Query Builder