Lucene search
+L

9434 matches found

RedhatCVE
RedhatCVE
added 2025/05/21 10:43 p.m.12 views

CVE-2002-1905

Buffer overflow in the web server of Polycom ViaVideo 2.2 and 3.0 allows remote attackers to cause a denial of service crash via a long HTTP GET request...

5CVSS7.2AI score0.07541EPSS
SaveExploits2References1
Circl
Circl
added 2025/05/21 10:41 p.m.15 views

CVE-2025-5059

creationtimestamp| type| source ---|---|--- 2025-05-21 22:41:45+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/17204 2025-05-22 02:00:37+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lppzgkawzl2y...

7.2CVSS4.5AI score0.00419EPSS
SaveExploits1References2
RedhatCVE
RedhatCVE
added 2025/05/21 10:40 p.m.10 views

CVE-2002-2356

HAMweather 2.x allows remote attackers to modify administrative settings and obtain sensitive information via a direct request to hwadmin.cgi...

6.4CVSS6.6AI score0.01173EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/05/21 10:12 p.m.9 views

CVE-2005-2165

read.cgi in GlobalNoteScript allows remote attackers to execute arbitrary commands via shell metacharacters in the file parameters...

7.5CVSS8.1AI score0.02002EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2025/05/21 9:50 p.m.5 views

CVE-2007-5167

PHP remote file inclusion vulnerability in .systeme/fonctions.php in phpLister 0.5-pre2 allows remote attackers to execute arbitrary PHP code via a URL in the nomrepsysteme parameter...

6.8CVSS7.9AI score0.01209EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2025/05/21 9:49 p.m.5 views

CVE-2009-5050

konversation before 1.2.3 allows attackers to cause a denial of service...

7.5CVSS6.7AI score0.01671EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2025/05/21 9:43 p.m.10 views

CVE-2009-5130

The Rules Service in Websense Email Security before 7.1 allows remote attackers to cause a denial of service service crash via an attachment with a crafted size...

4.3CVSS6.9AI score0.01084EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/05/21 9:41 p.m.17 views

CVE-2009-2597

The Sun Java System SJS Access Manager Policy Agent module 2.2 for SJS Web Proxy Server 4.0 allows remote attackers to cause a denial of service daemon crash via a GET request...

7.8CVSS6.9AI score0.02515EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/05/21 9:30 p.m.12 views

CVE-2006-6974

Headstart Solutions DeskPRO stores sensitive information under the web root with insufficient access control, which allows remote attackers to 1 list files in the includes/ directory; obtain the SQL username and password via a direct request for 2 config.php and 3 config.php.bak in includes/; rea...

7.5CVSS7.5AI score0.01272EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2025/05/21 9:11 p.m.13 views

CVE-2006-4936

Moodle before 1.6.2 does not properly validate the module instance id when creating a course module object, which has unspecified impact and remote attack vectors...

10CVSS7.1AI score0.01466EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/05/21 8:45 p.m.10 views

CVE-2005-4691

imake in NetBSD before 2.0.3, NetBSD-current before 12 September 2005, certain versions of X.Org, and certain versions of XFree86 allows local users to overwrite arbitrary files via a symlink attack on the temporary file for the file.0 target, which is used for a pre-formatted manual page...

2.1CVSS6.8AI score0.00339EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/05/21 8:39 p.m.14 views

CVE-2002-2420

sitesearcher.cgi in Super Site Searcher allows remote attackers to execute arbitrary commands via shell metacharacters in the page parameter...

7.5CVSS8AI score0.0609EPSS
SaveExploits2References1
RedhatCVE
RedhatCVE
added 2025/05/21 8:39 p.m.13 views

CVE-2002-2410

openwebmail.pl in Open WebMail 1.7 and 1.71 reveals sensitive information in error messages and generates different responses whether a user exists or not, which allows remote attackers to identify valid usernames via brute force attacks and obtain certain configuration and version information...

5CVSS6.7AI score0.01309EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2025/05/21 8:39 p.m.12 views

CVE-2002-2354

Netgear FM114P firmware 1.3 wireless firewall allows remote attackers to cause a denial of service crash or hang via a large number of TCP connection requests...

7.8CVSS7.1AI score0.01844EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/05/21 8:39 p.m.8 views

CVE-2002-2344

Ensim WEBppliance 3.0 and 3.1 allows remote attackers to read mail intended for other users by defining an alias that is the target's email address...

5CVSS7AI score0.01205EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/05/21 8:34 p.m.7 views

CVE-2002-2145

Savant Web Server 3.1 and earlier allows remote attackers to bypass authentication for password protected user folders via a URL with a hex encoded space %20 and a '.' %2e at the end of the filename...

7.5CVSS7.5AI score0.07653EPSS
SaveExploits2References1
RedhatCVE
RedhatCVE
added 2025/05/21 8:32 p.m.12 views

CVE-2002-2100

Microsoft Outlook 2002 allows remote attackers to embed bypass the file download restrictions for attachments via an HTML email message that uses an IFRAME to reference malicious content...

5CVSS7AI score0.11363EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/05/21 8:31 p.m.11 views

CVE-2002-2058

TeeKai Tracking Online 1.0 uses weak encryption of web usage statistics in data/userlog/log.txt, which allows remote attackers to identify IP's visiting the site by dividing each octet by the MD5 hash of '20'...

7.5CVSS7AI score0.00859EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2025/05/21 8:28 p.m.7 views

CVE-2002-1974

The FTP service in Zaurus PDAs SL-5000D and SL-5500 does not require authentication, which allows remote attackers to access the file system as root...

10CVSS7.1AI score0.02766EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/05/21 8:27 p.m.12 views

CVE-2002-1935

Pingtel Xpressa 1.2.5 through 2.0.1 uses predictable 1 Call-ID, 2 CSeq, and 3 "To" and "From" SIP URL values in a Session Identification Protocol SIP request, which allows remote attackers to avoid registering with the SIP registrar...

5CVSS7AI score0.01351EPSS
SaveExploits0References1
Rows per page
Query Builder