1755 matches found
CVE-2005-2420
CVE-2005-2420 affects FtpLocate 2.02 (flsearch.pl) and allows remote command execution by injecting shell metacharacters through HTTP GET. Connected Nessus plugin NASL confirms a remote file inclusion style input manipulation via the fsite parameter, enabling arbitrary command execution on the af...
CVE-2004-2271
CVE-2004-2271 affects MiniShare webserver versions 1.4.1 and earlier. The vulnerability is a remote buffer overflow in the HTTP request handling, originally demonstrated via a long GET request, which can be exploited to execute arbitrary code. Connected exploits and payloads show that not only GE...
CVE-2004-2271
Buffer overflow in MiniShare 1.4.1 and earlier allows remote attackers to execute arbitrary code via a long HTTP GET request...
Oracle Reports Server 6.0.8/9.0.x - Unauthorized Report Execution
source: https://www.securityfocus.com/bid/14316/info Oracle Reports Server is susceptible to an unauthorized report execution vulnerability. By placing a report file in a globally accessible location, users can trigger the execution of the report by issuing an HTTP GET request to the affected...
Oracle Reports Server 6.0.89.0.x - Arbitrary File Disclosure
Oracle Reports Server 6.0.89.0.x - Arbitrary File Disclosure source: https://www.securityfocus.com/bid/14312/info Oracle Reports Server may allow remote attackers to disclose parts of arbitrary files. Reportedly, the server fails to restrict users from accessing parts of arbitrary files when...
Oracle Reports Server 6.0.89.0.x - Unauthorized Report Execution
Oracle Reports Server 6.0.89.0.x - Unauthorized Report Execution source: https://www.securityfocus.com/bid/14316/info Oracle Reports Server is susceptible to an unauthorized report execution vulnerability. By placing a report file in a globally accessible location, users can trigger the execution...
CVE-2004-2221
CVE-2004-2221 describes a buffer overflow in the SoftCart.exe CGI of Mercantec SoftCart 4.00b. The vulnerability allows remote attackers to execute arbitrary code by sending a long parameter in an HTTP GET request. Public references show Metasploit and Exploit-DB demonstrations of an exploit for ...
CVE-2004-2224
Appfoundry Message Foundry 2.75 .0003 allows remote attackers to cause a denial of service crash via an HTTP GET request that contains MS-DOS device names such as com1...
CVE-2002-1951
CVE-2002-1951 describes a buffer overflow in GoAhead WebServer 2.1 . An attacker can trigger the overflow by sending a long HTTP GET request with a large number of subdirectories, potentially enabling remote code execution. The available documents do not provide specific details on the vulnerable...
CVE-2002-1895
The vulnerability CVE-2002-1895 affects the Tomcat servlet engine in versions 3.3 and 4.0.4 when used with IIS and the ajp1.3 connector. Affected component: servlet engine; issue: remote attackers can trigger a denial of service (crash) by issuing a large sequence of HTTP GET requests for MS-DOS ...
CVE-2002-1907
TelCondex SimpleWebServer 2.06.20817 is reported affected. A remote attacker can cause a denial-of-service (crash) by sending a long HTTP GET request, per CVE-2002-1907. The CVSS data indicates network access, low attack complexity, no authentication, and a partial availability impact (base score...
CVE-2002-1816
Off-by-one buffer overflow in the sockgets function in sockhelp.c for ATPhttpd 0.4b and earlier allows remote attackers to execute arbitrary code via a long HTTP GET request...
CVE-2002-1905
CVE-2002-1905 describes a buffer overflow in the Polycom ViaVideo web server (versions 2.2 and 3.0) that can be triggered by a long HTTP GET request, leading to remote denial of service (crash). Affected software: Polycom ViaVideo web server (2.2, 3.0). Root cause: improper handling of long HTTP ...
CVE-2002-1816
Off-by-one buffer overflow in the sockgets function in sockhelp.c for ATPhttpd 0.4b and earlier allows remote attackers to execute arbitrary code via a long HTTP GET request...
CVE-2002-1951
Buffer overflow in GoAhead WebServer 2.1 allows remote attackers to execute arbitrary code via a long HTTP GET request with a large number of subdirectories...
CVE-2002-1941
Buffer overflow in RadioBird WebServer 4 Everyone 1.28 allows remote attackers to cause a denial of service crash via a long HTTP GET request with the Host header set...
CVE-2002-1828
Savant Webserver 3.1 allows remote attackers to cause a denial of service crash via an HTTP GET request with a negative Content-Length value...
EUVD-2002-1883
Buffer overflow in the Log function in util.c in GazTek ghttpd 1.4 through 1.4.3 allows remote attackers to execute arbitrary code via a long HTTP GET request...
CVE-2002-1965
Cross-site scripting XSS vulnerability in Errors.gsl in Imatix Xitami 2.5b4 and 2.5b5 allows remote attackers to inject arbitrary web script or HTML via the 1 Javascript events, as demonstrated via an onerror event in an IMG SRC tag or 2 User-Agent field in an HTTP GET request...