Lucene search
+L

54 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2017/02/08 12:00 a.m.•10 views

CVE-2016-0210: Exposure of Sensitive Information to an Unauthorized Actor

IBM Sterling B2B Integrator Standard Edition could allow a remote attacker to obtain sensitive information. By allowing HTTP OPTIONS method, a remote attacker could send a specially-crafted query to a vulnerable server running to cause the server to disclose sensitive information in the HTTP...

5.3CVSS5.9AI score0.01695EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2017/02/08 12:00 a.m.•10 views

PT-2017-7593

Name of the Vulnerable Software and Affected Versions IBM Sterling B2B Integrator Standard Edition affected versions not specified Description The issue allows a remote attacker to obtain sensitive information by exploiting the HTTP OPTIONS method. A specially-crafted query sent to a vulnerable...

5.3CVSS0.01695EPSS
SaveExploits0References4
OpenVAS
OpenVAS
•added 2010/02/04 12:00 a.m.•45 views

Sun Java System Web Server Multiple Vulnerabilities - Windows

Sun Java Web Server is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

10CVSS6.3AI score0.80387EPSS
SaveExploits23References6
Prion
Prion
•added 2010/01/20 4:30 p.m.•27 views

Stack overflow

Stack-based buffer overflow in the WebDAV implementation in webservd in Sun Java System Web Server aka SJWS 7.0 Update 7 allows remote attackers to cause a denial of service daemon crash and possibly have unspecified other impact via a long URI in an HTTP OPTIONS request...

10CVSS8AI score0.80387EPSS
SaveExploits20References1Affected Software1
Cvelist
Cvelist
•added 2010/01/20 4:00 p.m.•91 views

CVE-2010-0361

Stack-based buffer overflow in the WebDAV implementation in webservd in Sun Java System Web Server aka SJWS 7.0 Update 7 allows remote attackers to cause a denial of service daemon crash and possibly have unspecified other impact via a long URI in an HTTP OPTIONS request...

7.3AI score0.80387EPSS
SaveExploits20References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2010/01/20 12:00 a.m.•6 views

CVE-2010-0361: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow in the WebDAV implementation in webservd in Sun Java System Web Server aka SJWS 7.0 Update 7 allows remote attackers to cause a denial of service daemon crash and possibly have unspecified other impact via a long URI in an HTTP OPTIONS request...

10CVSS6.1AI score0.80387EPSS
SaveExploits20References2
Cvelist
Cvelist
•added 2007/10/14 8:00 p.m.•40 views

CVE-2002-2241

Buffer overflow in httpd32.exe in Deerfield VisNetic WebSite before 3.5.15 allows remote attackers to cause a denial of service crash via a long HTTP OPTIONS request...

6.8AI score0.01552EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2007/10/14 12:00 a.m.•11 views

CVE-2002-2241: Undefined Security Weakness

Buffer overflow in httpd32.exe in Deerfield VisNetic WebSite before 3.5.15 allows remote attackers to cause a denial of service crash via a long HTTP OPTIONS request...

5CVSS5.8AI score0.01552EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2003/02/17 12:00 a.m.•76 views

Web Server HTTP OPTIONS Method URL Handling Remote Overflow

It may be possible to make the web server crash or even execute arbitrary code by sending it a too long URL through the OPTIONS method. C Tenable Network Security, Inc. Some vulnerable servers: VisNetic WebSite 3.5.13.1 References: Date: Fri, 13 Dec 2002 09:25:00 +0100 From:"Peter Kruse" Subject:...

10CVSS5.5AI score0.13875EPSS
SaveExploits2References1
NVD
NVD
•added 2002/12/31 5:00 a.m.•33 views

CVE-2002-2241

Buffer overflow in httpd32.exe in Deerfield VisNetic WebSite before 3.5.15 allows remote attackers to cause a denial of service crash via a long HTTP OPTIONS request...

5CVSS6.8AI score0.01552EPSS
SaveExploits0References3
NVD
NVD
•added 2002/05/29 4:00 a.m.•38 views

CVE-2002-0240

PHP, when installed with Apache and configured to search for index.php as a default web page, allows remote attackers to obtain the full pathname of the server via the HTTP OPTIONS method, which reveals the pathname in the resulting error message...

5CVSS6.6AI score0.07422EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2002/05/03 4:00 a.m.•49 views

CVE-2002-0240

PHP, when installed with Apache and configured to search for index.php as a default web page, allows remote attackers to obtain the full pathname of the server via the HTTP OPTIONS method, which reveals the pathname in the resulting error message...

6.6AI score0.07422EPSS
SaveExploits0References3
CVE
CVE
•added 2002/05/03 4:00 a.m.•71 views

CVE-2002-0240

CVE-2002-0240 affects PHP when deployed with Apache and configured to serve index.php by default. The vulnerability allows remote attackers to learn the server’s full pathname via the HTTP OPTIONS method, leaking a partial confidentiality breach (PARTIAL) without impact to integrity/availability,...

5CVSS7AI score0.07422EPSS
SaveExploits0References3Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2002/05/03 12:00 a.m.•8 views

CVE-2002-0240: Undefined Security Weakness

PHP, when installed with Apache and configured to search for index.php as a default web page, allows remote attackers to obtain the full pathname of the server via the HTTP OPTIONS method, which reveals the pathname in the resulting error message...

5CVSS5.9AI score0.07422EPSS
SaveExploits0References1
Rows per page
Query Builder