Lucene search
K

1746 matches found

NVD
NVD
added 2006/04/06 10:4 a.m.10 views

CVE-2006-1654

Directory traversal vulnerability in the HP Color LaserJet 2500 Toolbox and Color LaserJet 4600 Toolbox on Microsoft Windows before 20060402 allows remote attackers to read arbitrary files via a .. dot dot in an HTTP GET request to TCP port 5225...

5CVSS6.6AI score0.0468EPSS
Exploits1References9
Prion
Prion
added 2006/04/06 10:4 a.m.20 views

Directory traversal

Directory traversal vulnerability in the HP Color LaserJet 2500 Toolbox and Color LaserJet 4600 Toolbox on Microsoft Windows before 20060402 allows remote attackers to read arbitrary files via a .. dot dot in an HTTP GET request to TCP port 5225...

5CVSS7.1AI score0.0468EPSS
Exploits1References9Affected Software1
OpenVAS
OpenVAS
added 2006/03/26 12:0 a.m.29 views

CMSimple 'index.php?search' XSS Vulnerability - Active Check

CMSimple is prone to cross-site scripting XSS attacks due to its failure to sanitize user-supplied input to the search field. SPDX-FileCopyrightText: 2006 Josh Zlatin-Amishav Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

4.3CVSS5.8AI score0.01406EPSS
Exploits0References4
NVD
NVD
added 2006/03/12 9:2 p.m.17 views

CVE-2006-1159

Format string vulnerability in Easy File Sharing EFS Web Server 3.2 allows remote attackers to cause a denial of service server crash and possibly execute arbitrary code via format string specifiers in the query string argument in an HTTP GET request...

7.8CVSS7.8AI score0.06673EPSS
Exploits1References6
Prion
Prion
added 2006/03/12 9:2 p.m.15 views

Format string

Format string vulnerability in Easy File Sharing EFS Web Server 3.2 allows remote attackers to cause a denial of service server crash and possibly execute arbitrary code via format string specifiers in the query string argument in an HTTP GET request...

7.8CVSS8.3AI score0.06673EPSS
Exploits1References6Affected Software1
Cvelist
Cvelist
added 2006/03/12 9:0 p.m.18 views

CVE-2006-1159

Format string vulnerability in Easy File Sharing EFS Web Server 3.2 allows remote attackers to cause a denial of service server crash and possibly execute arbitrary code via format string specifiers in the query string argument in an HTTP GET request...

7.8AI score0.06673EPSS
Exploits1References6
Prion
Prion
added 2006/03/10 11:2 a.m.17 views

Stack overflow

Multiple stack-based buffer overflows in the procConnectArgs function in servmgr.cpp in PeerCast before 0.1217 allow remote attackers to execute arbitrary code via an HTTP GET request with a long 1 parameter name or 2 value in a URL, which triggers the overflow in the nextCGIarg function in...

7.5CVSS8.3AI score0.72496EPSS
Exploits9References10Affected Software1
exploitpack
exploitpack
added 2006/02/22 12:0 a.m.10 views

Ipswitch WhatsUp Professional 2006 - Remote Denial of Service

Ipswitch WhatsUp Professional 2006 - Remote Denial of Service source: https://www.securityfocus.com/bid/16771/info Ipswitch WhatsUp Professional 2006 is susceptible to a remote denial-of-service vulnerability. This issue is due to the application's failure to properly handle certain HTTP GET...

0.2AI score
Exploits0
Exploit DB
Exploit DB
added 2006/02/22 12:0 a.m.20 views

Ipswitch WhatsUp Professional 2006 - Remote Denial of Service

source: https://www.securityfocus.com/bid/16771/info Ipswitch WhatsUp Professional 2006 is susceptible to a remote denial-of-service vulnerability. This issue is due to the application's failure to properly handle certain HTTP GET requests. This issue allows remote attackers to consume excessive...

7.4AI score
Exploits0
myhack58
myhack58
added 2006/01/31 12:0 a.m.23 views

With a Winsock implementation on the website of the database data injection-vulnerability warning-the black bar safety net

In writing this article before, it is necessary to"inject"one word describes it. The difference to the usualSQL injection, where the injection actually just construct an HTTP request packet to a program instead of a WEB page is submitted, data is automatically submitted. Hey, speaking of which, I...

7.2AI score
Exploits0
Exploit DB
Exploit DB
added 2006/01/10 12:0 a.m.41 views

Hummingbird Collaboration - Application Cookie Internal Network Information Disclosure

source: https://www.securityfocus.com/bid/16195/info Hummingbird Enterprise Collaboration is prone to multiple vulnerabilities. The following specific issues were identified: The application reportedly allows remote attackers to upload arbitrary HTML files and script code to the application...

7AI score
Exploits0
CVE
CVE
added 2005/12/04 11:0 a.m.42 views

CVE-2004-2614

CVE-2004-2614 describes a buffer overflow in MyWeb 3.3 exploitable by a long HTTP GET request. Consequence: remote denial of service and potential arbitrary code execution. Affected software: MyWeb 3.3. Root cause: buffer overflow. Exploitation details, affected versions beyond 3.3, and remediati...

7.5CVSS8.4AI score0.06847EPSS
Exploits1References6Affected Software1
Cvelist
Cvelist
added 2005/12/04 11:0 a.m.13 views

CVE-2004-2614

Buffer overflow in MyWeb 3.3 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a long HTTP GET request...

8AI score0.06847EPSS
Exploits1References6
OpenVAS
OpenVAS
added 2005/11/03 12:0 a.m.27 views

eXtropia Web Store Remote File Retrieval Vulnerability - Active Check

eXtropia SPDX-FileCopyrightText: 2000 Thomas Reinke Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.10532";...

5CVSS6.8AI score0.03667EPSS
Exploits1References1
OpenVAS
OpenVAS
added 2005/11/03 12:0 a.m.22 views

Apache HTTP Server Multiple '/' Vulnerability - Active Check

Certain versions of Apache HTTP Server for Win32 have a bug wherein remote users can list directory entries. SPDX-FileCopyrightText: 2000 John Lampe Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

5CVSS6.8AI score0.46653EPSS
Exploits1References2
OpenVAS
OpenVAS
added 2005/11/03 12:0 a.m.18 views

TinyWeb < 1.93 Multiple Vulnerabilities

TinyWeb is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2003 Matt North Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.11894...

7.8CVSS7.8AI score0.0287EPSS
Exploits2References4
OpenVAS
OpenVAS
added 2005/11/03 12:0 a.m.38 views

Goollery < 0.04b Multiple XSS Vulnerabilities - Active Check

Goollery is prone to multiple cross-site-scripting XSS vulnerabilities eg. through the SPDX-FileCopyrightText: 2004 David Maciejak Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

4.3CVSS6.8AI score0.0269EPSS
Exploits2References5
OpenVAS
OpenVAS
added 2005/11/03 12:0 a.m.24 views

Check for Apache Multiple / vulnerability

Certain versions of Apache for Win32 have a bug wherein remote users can list directory entries. Specifically, by appending multiple /'s to the HTTP GET command, the remote Apache server will list all files and subdirectories within the web root as defined in httpd.conf. OpenVAS Vulnerability Tes...

5CVSS0.6AI score0.46653EPSS
Exploits1
OpenVAS
OpenVAS
added 2005/11/03 12:0 a.m.36 views

MailEnable < 1.19 HTTPMail Service GET Overflow Vulnerability - Active Check

MailEnable is prone to a heap buffer overflow vulnerability. SPDX-FileCopyrightText: 2005 George A. Theall Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

4.3CVSS7.1AI score0.03571EPSS
Exploits1References2
OpenVAS
OpenVAS
added 2005/11/03 12:0 a.m.44 views

Nuked-klan <= 1.3b Multiple Vulnerabilities - Active Check

Nuked-klan is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2003 k-otik.com Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.7AI score
Exploits0References2
Rows per page
Query Builder