Lucene search
+L

156 matches found

Positive Technologies
Positive Technologies
•added 2016/11/08 12:00 a.m.•3 views

PT-2016-2967

Name of the Vulnerable Software and Affected Versions Microsoft Edge affected versions not specified Description The issue is related to a spoofing vulnerability that exists when Microsoft Edge does not properly parse HTTP content. This could allow an attacker to trick a user by redirecting them ...

5.3CVSS0.09335EPSS
SaveExploits0References9
Positive Technologies
Positive Technologies
•added 2016/07/12 12:00 a.m.•1 views

PT-2016-2489

Name of the Vulnerable Software and Affected Versions Microsoft Internet Explorer versions 9 through 11 Microsoft Edge affected versions not specified Description The issue is related to a spoofing attack that can be conducted via a crafted URL. An attacker could exploit this to trick a user by...

3.1CVSS0.08297EPSS
SaveExploits0References11
OSV
OSV
•added 2014/10/10 10:55 a.m.•14 views

CVE-2014-3581

The cachemergeheadersout function in modules/cache/cacheutil.c in the modcache module in the Apache HTTP Server before 2.4.11 allows remote attackers to cause a denial of service NULL pointer dereference and application crash via an empty HTTP Content-Type header...

4.5AI score
SaveExploits0References35
Prion
Prion
•added 2014/10/10 10:55 a.m.•44 views

Null pointer dereference

The cachemergeheadersout function in modules/cache/cacheutil.c in the modcache module in the Apache HTTP Server before 2.4.11 allows remote attackers to cause a denial of service NULL pointer dereference and application crash via an empty HTTP Content-Type header...

5CVSS6.8AI score0.13558EPSS
SaveExploits0References29Affected Software9
Cvelist
Cvelist
•added 2014/10/10 10:00 a.m.•102 views

CVE-2014-3581

The cachemergeheadersout function in modules/cache/cacheutil.c in the modcache module in the Apache HTTP Server before 2.4.11 allows remote attackers to cause a denial of service NULL pointer dereference and application crash via an empty HTTP Content-Type header...

6.5AI score0.13558EPSS
SaveExploits0References29
Mend
Mend
•added 2014/10/10 10:00 a.m.•8 views

CVE-2014-3581

The cachemergeheadersout function in modules/cache/cacheutil.c in the modcache module in the Apache HTTP Server before 2.4.11 allows remote attackers to cause a denial of service NULL pointer dereference and application crash via an empty HTTP Content-Type header...

6.9CVSS0.13558EPSS
SaveExploits0References32
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2014/10/10 12:00 a.m.•5 views

CVE-2014-3581: NULL Pointer Dereference

The cachemergeheadersout function in modules/cache/cacheutil.c in the modcache module in the Apache HTTP Server before 2.4.11 allows remote attackers to cause a denial of service NULL pointer dereference and application crash via an empty HTTP Content-Type header...

5CVSS5.9AI score0.13558EPSS
SaveExploits0References2
OpenVAS
OpenVAS
•added 2013/12/12 12:00 a.m.•35 views

Microsoft ASP.NET Insecure Site Configuration Vulnerability (2905247)

This host is missing an important security update according to Microsoft advisory 2905247. OpenVAS Vulnerability Test $Id: gbmicrosoftsecurityadvisory2905247.nasl 6086 2017-05-09 09:03:30Z teissa $ Microsoft ASP.NET Insecure Site Configuration Vulnerability 2905247 Authors: Thanga Prakash S...

0.2AI score
SaveExploits0References2
w3af
w3af
•added 2013/06/10 11:02 p.m.•29 views

content_negotiation

This plugin uses HTTP content negotiation to find new resources. The plugin has three distinctive phases: Identify if the web server has content negotiation enabled. For every resource found by any other plugin, perform a request to find new related resources. For example, if another plugin finds...

7.1AI score
SaveExploits0
Kitploit
Kitploit
•added 2013/03/08 12:12 a.m.•28 views

[Snort 2.9.4.1] Network Intrusion Detection System

Snort is a free and open source network intrusion prevention system NIPS and network intrusion detection system NIDS . Snort having the ability to perform real-time traffic analysis and packet logging on Internet Protocol IP networks. Snort performs protocol analysis, content searching, and conte...

7.4AI score
SaveExploits0
Kitploit
Kitploit
•added 2013/03/05 2:01 p.m.•31 views

[Snort 2.9.4.1] Network Intrusion Detection System

Snort is a free and open source network intrusion prevention system NIPS and network intrusion detection system NIDS . Snort having the ability to perform real-time traffic analysis and packet logging on Internet Protocol IP networks. Snort performs protocol analysis, content searching, and conte...

7.4AI score
SaveExploits0
OpenVAS
OpenVAS
•added 2010/11/16 12:00 a.m.•13 views

Mandriva Update for snort MDVA-2010:224 (snort)

Check for the Version of snort OpenVAS Vulnerability Test Mandriva Update for snort MDVA-2010:224 snort Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

7.1AI score
SaveExploits0References2
OpenVAS
OpenVAS
•added 2010/07/23 12:00 a.m.•38 views

RedHat Update for thunderbird RHSA-2010:0544-01

Check for the Version of thunderbird OpenVAS Vulnerability Test RedHat Update for thunderbird RHSA-2010:0544-01 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it und...

10CVSS0.3AI score0.11418EPSS
SaveExploits16References2
OpenVAS
OpenVAS
•added 2010/04/13 12:00 a.m.•35 views

Opera Browser 'Content-Length' Header Buffer Overflow Vulnerability (Linux)

The host is installed with Opera Web Browser and is prone to buffer overflow vulnerability. OpenVAS Vulnerability Test $Id: gboperacontentlengthheaderbofvulnlin.nasl 5323 2017-02-17 08:49:23Z teissa $ Opera Browser 'Content-Length' Header Buffer Overflow Vulnerability Linux Authors: Antu Sanadi...

10CVSS1AI score0.19792EPSS
SaveExploits2References4
Symantec
Symantec
•added 2009/10/13 12:00 a.m.•43 views

Microsoft Internet Explorer 'deflate' HTTP Content Encoding Remote Code Execution Vulnerability

Description Microsoft Internet Explorer is prone to a remote code-execution vulnerability. Attackers can exploit this issue to execute arbitrary code in the context of the user running the application. Successful exploits will compromise the application and possibly the computer. Failed attacks m...

9.3CVSS7.2AI score0.37436EPSS
SaveExploits9References4Affected Software4
Exploit DB
Exploit DB
•added 2009/10/13 12:00 a.m.•47 views

Microsoft Internet Explorer 5.0.1 - 'deflate' HTTP Content Encoding Remote Code Execution

source: https://www.securityfocus.com/bid/36622/info Microsoft Internet Explorer is prone to a remote code-execution vulnerability. Attackers can exploit this issue to execute arbitrary code in the context of the user running the application. Successful exploits will compromise the application an...

9.3CVSS5.8AI score0.37436EPSS
SaveExploits9
OpenVAS
OpenVAS
•added 2009/06/17 12:00 a.m.•37 views

Opera Web Script Execution Vulnerabilities - June09 (Linux)

This host has Opera browser installed and is prone to Web Script Execution vulnerabilities. OpenVAS Vulnerability Test $Id: secpodoperawebscriptexecvulnjun09lin.nasl 5122 2017-01-27 12:16:00Z teissa $ Opera Web Script Execution Vulnerabilities - June09 Linux Authors: Sharath S Copyright: Copyrigh...

6.8CVSS7.6AI score0.01369EPSS
SaveExploits1References2
OpenVAS
OpenVAS
•added 2009/06/17 12:00 a.m.•36 views

Opera Web Script Execution Vulnerabilities - June09 (Windows)

This host has Opera browser installed and is prone to Web Script Execution vulnerabilities. OpenVAS Vulnerability Test $Id: secpodoperawebscriptexecvulnjun09win.nasl 5122 2017-01-27 12:16:00Z teissa $ Opera Web Script Execution Vulnerabilities - June09 Windows Authors: Sharath S Copyright:...

6.8CVSS0.1AI score0.01369EPSS
SaveExploits1References2
NVD
NVD
•added 2009/06/15 7:30 p.m.•38 views

CVE-2009-2065

Mozilla Firefox 3.0.10, and possibly other versions, detects http content in https web pages only when the top-level frame uses https, which allows man-in-the-middle attackers to execute arbitrary web script, in an https site's context, by modifying an http page to include an https iframe that...

6.8CVSS7.6AI score0.00851EPSS
SaveExploits1References4
UbuntuCve
UbuntuCve
•added 2009/06/15 7:30 p.m.•76 views

CVE-2009-2065

Mozilla Firefox 3.0.10, and possibly other versions, detects http content in https web pages only when the top-level frame uses https, which allows man-in-the-middle attackers to execute arbitrary web script, in an https site's context, by modifying an http page to include an https iframe that...

6.8CVSS6.1AI score0.00851EPSS
SaveExploits1References1
Rows per page
Query Builder