Lucene search
+L

4205 matches found

Exploit DB
Exploit DB
•added 2010/04/18 12:00 a.m.•54 views

Joomla! Component Gadget Factory 1.0.0 - Local File Inclusion

=================================================================================================================== o Joomla Component Gadget Factory Local File Inclusion Vulnerability Software : comgadgetfactory version 1.0.0 Vendor : http://www.thefactory.ro/ Author : AntiSecurity NoGe Vrs-hCk...

7.5CVSS5.8AI score0.17003EPSS
SaveExploits2
securityvulns
securityvulns
•added 2009/12/15 12:00 a.m.•32 views

Mozilla Code *sighs*

Mozilla Code sighs I reported a memory corruption vulnerability in Mozilla Codesighs, a "set of tools to help you determine the code and data size of shared libraries and executables. Once you can measure the code and data size, then you can measure drifts in size as code changes occur". Mozilla...

0.1AI score
SaveExploits0
Check Point Advisories
Check Point Advisories
•added 2009/10/06 12:00 a.m.•21 views

Microsoft Windows Vista Feed Headlines Gadget Code Execution (MS07-048; CVE-2007-3033)

Gadgets are mini applications with a variety of possible uses. They can connect to web services to deliver business data, weather information, news updates, traffic maps, Internet radio streams, and even slide shows of on-line photo albums. Windows Vista is shipped with a set of gadgets, includin...

4.3CVSS6.4AI score0.28367EPSS
SaveExploits1
NVD
NVD
•added 2009/08/24 10:30 a.m.•26 views

CVE-2008-7037

The Sidebar gadget in ITN News Gadget aka ITN Hub Gadget 1.06 for Windows Vista, and possibly other versions before 1.23, allows remote web servers or man-in-the-middle attackers to execute arbitrary commands via script in a shorttitle response...

7.5CVSS7.6AI score0.0145EPSS
SaveExploits0References3
Prion
Prion
•added 2009/08/24 10:30 a.m.•22 views

Sql injection

The Sidebar gadget in ITN News Gadget aka ITN Hub Gadget 1.06 for Windows Vista, and possibly other versions before 1.23, allows remote web servers or man-in-the-middle attackers to execute arbitrary commands via script in a shorttitle response...

7.5CVSS8.2AI score0.0145EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
•added 2009/08/24 10:00 a.m.•32 views

CVE-2008-7037

The Sidebar gadget in ITN News Gadget aka ITN Hub Gadget 1.06 for Windows Vista, and possibly other versions before 1.23, allows remote web servers or man-in-the-middle attackers to execute arbitrary commands via script in a shorttitle response...

7.6AI score0.0145EPSS
SaveExploits0References3
CVE
CVE
•added 2009/08/24 10:00 a.m.•53 views

CVE-2008-7037

The CVE-2008-7037 entry affects the ITN News Gadget (ITN Hub Gadget) 1.06 for Windows Vista and possibly earlier versions up to 1.23. Affected component: the gadget’s short_title response, where an attacker-controlled remote server or MITM can inject script to execute arbitrary commands on the us...

7.5CVSS7.8AI score0.0145EPSS
SaveExploits0References3Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2009/08/24 12:00 a.m.•6 views

CVE-2008-7037: Improper Input Validation

The Sidebar gadget in ITN News Gadget aka ITN Hub Gadget 1.06 for Windows Vista, and possibly other versions before 1.23, allows remote web servers or man-in-the-middle attackers to execute arbitrary commands via script in a shorttitle response...

7.5CVSS6.3AI score0.0145EPSS
SaveExploits0References2
securityvulns
securityvulns
•added 2007/08/15 12:00 a.m.•81 views

Microsoft Security Bulletin MS07-048 - Important Vulnerabilities in Windows Gadgets Could Allow Remote Code Execution (938123)

Microsoft Security Bulletin MS07-048 - Important Vulnerabilities in Windows Gadgets Could Allow Remote Code Execution 938123 Published: August 14, 2007 Version: 1.0 General Information Executive Summary This important security update resolves two privately reported vulnerabilities in addition to...

6.8CVSS1AI score0.28367EPSS
SaveExploits2
CERT
CERT
•added 2007/08/15 12:00 a.m.•38 views

Microsoft Windows Vista Weather Gadget vulnerability

Overview The Windows Vista Weather gadget contains a vulnerability that may allow and attacker to execute code. Description From Microsoft Security Bulletin MS07-048:Gadgets are mini-applications designed to provide the user with information or utilities. Windows Vista treats gadgets similar to t...

6.8CVSS6.5AI score0.25192EPSS
SaveExploits1References4
CERT
CERT
•added 2007/08/15 12:00 a.m.•47 views

Microsoft Windows Vista Contacts Gadget vulnerability

Overview The Windows Vista Contacts gadget contains a vulnerability that may allow an attacker to execute code. Description From Microsoft Security Bulletin MS07-048:Gadgets are mini-applications designed to provide the user with information or utilities. Windows Vista treats gadgets similar to t...

6.8CVSS6.8AI score0.25165EPSS
SaveExploits1References3
Prion
Prion
•added 2007/08/14 10:17 p.m.•30 views

Design/Logic Flaw

Unspecified vulnerability in Windows Vista Contacts Gadget in Windows Vista allows user-assisted remote attackers to execute arbitrary code via crafted contact information that is not properly handled when it is imported...

6.8CVSS7.6AI score0.25165EPSS
SaveExploits1References8
NVD
NVD
•added 2007/08/14 10:17 p.m.•30 views

CVE-2007-3032

Unspecified vulnerability in Windows Vista Contacts Gadget in Windows Vista allows user-assisted remote attackers to execute arbitrary code via crafted contact information that is not properly handled when it is imported...

6.8CVSS7.3AI score0.25165EPSS
SaveExploits1References8
Cvelist
Cvelist
•added 2007/08/14 10:00 p.m.•38 views

CVE-2007-3032

Unspecified vulnerability in Windows Vista Contacts Gadget in Windows Vista allows user-assisted remote attackers to execute arbitrary code via crafted contact information that is not properly handled when it is imported...

7.3AI score0.25165EPSS
SaveExploits1References8
CVE
CVE
•added 2007/08/14 10:00 p.m.•77 views

CVE-2007-3032

CVE-2007-3032 is a Windows Vista vulnerability in the Contacts Gadget that could allow remote code execution when a user imports specially crafted contact data. The issue, described across multiple sources, arises from insufficient validation of imported contact information, enabling code executi...

6.8CVSS7.2AI score0.25165EPSS
SaveExploits1References8Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2007/08/14 12:00 a.m.•7 views

CVE-2007-3033: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Windows Vista Feed Headlines Gadget aka Sidebar RSS Feeds Gadget in Windows Vista allows user-assisted remote attackers to execute arbitrary code via an RSS feed with crafted HTML attributes, which are not properly removed and are rendered in the local zo...

4.3CVSS6.5AI score0.28367EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2007/08/14 12:00 a.m.•9 views

CVE-2007-3032: Undefined Security Weakness

Unspecified vulnerability in Windows Vista Contacts Gadget in Windows Vista allows user-assisted remote attackers to execute arbitrary code via crafted contact information that is not properly handled when it is imported...

6.8CVSS6.5AI score0.25165EPSS
SaveExploits1References1
myhack58
myhack58
•added 2007/01/11 12:00 a.m.•27 views

Hacker chickens concealed the whereabouts of the Let account stealth-vulnerability warning-the black bar safety net

Analyzing a hack whether excellent, not a single look at his of the invasion means, whether smart, more important is to see he won't be hiding their whereabouts. I believe we have mastered a variety of invasion means that the hands control the broiler also everywhere is. However, your stealth...

1AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
•added 2006/10/14 12:00 a.m.•62 views

Debian DSA-1097-1 : kernel-source-2.4.27 - several vulnerabilities

Several local and remote vulnerabilities have been discovered in the Linux kernel that may lead to a denial of service or the execution of arbitrary code. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2006-0038 'Solar Designer' discovered that arithmet...

10CVSS6.2AI score0.06927EPSS
SaveExploits2References34
Tenable Nessus
Tenable Nessus
•added 2006/10/14 12:00 a.m.•66 views

Debian DSA-1103-1 : kernel-source-2.6.8 - several vulnerabilities

Several local and remote vulnerabilities have been discovered in the Linux kernel that may lead to a denial of service or the execution of arbitrary code. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2005-3359 Franz Filz discovered that some socket...

10CVSS6.2AI score0.06927EPSS
SaveExploits5References49
Rows per page
Query Builder