Lucene search
+L

113 matches found

Cvelist
Cvelist
added 2005/04/16 4:00 a.m.32 views

CVE-2005-1148

calendar.pl in CalendarScript 3.21 allows remote attackers to obtain sensitive information via invalid 1 year or 2 month parameters, which leaks the full pathname and debug information...

6.2AI score0.01582EPSS
SaveExploits1References3
CVE
CVE
added 2005/04/16 4:00 a.m.58 views

CVE-2005-1148

CalendarScript 3.21's calendar.pl is vulnerable to information disclosure: remote attackers can trigger invalid year or month parameters to leak the full path and debug info. Affected: calendar.pl in CalendarScript 3.21. Root cause: improper handling of year/month input leads to leakage of filesy...

5CVSS6.6AI score0.01582EPSS
SaveExploits1References3Affected Software1
CVE
CVE
added 2005/04/16 4:00 a.m.41 views

CVE-2005-1147

CVE-2005-1147 affects CalendarScript 3.20’s calendar.pl, where remote attackers can trigger information disclosure through invalid (1) calendar or (2) template parameters. The issue leaks the full pathname and debug information, revealing sensitive data and indicating a flaw in input validation f...

5CVSS6.6AI score0.01427EPSS
SaveExploits0References4
CVE
CVE
added 2005/04/09 4:00 a.m.36 views

CVE-2005-1032

This CVE entry is rejected/not used; it does not represent an active vulnerability.

6.6AI score
SaveExploits1
CVE
CVE
added 2005/03/26 5:00 a.m.52 views

CVE-2005-0871

The CVE-2005-0871 entry describes a vulnerability in the Topic Calendar 1.0.1 module for phpBB. When run on Microsoft IIS, remote attackers can obtain sensitive information by supplying invalid parameters, which cause error messages to reveal the server path. The affected component is calendar_sc...

5CVSS6.5AI score0.01548EPSS
SaveExploits1References4Affected Software1
Cvelist
Cvelist
added 2005/03/17 5:00 a.m.31 views

CVE-2005-0083

MySQL MaxDB 7.5.00 for Windows, and possibly earlier versions and other platforms, allows remote attackers to cause a denial of service application crash via invalid parameters to the 1 DBMCliString::ReallocString, 2 DBMCliString::operator, 3 DBMCliBuffer::ForceResize, 4...

6.8AI score0.01412EPSS
SaveExploits0References2
RedHat Linux
RedHat Linux
added 2004/12/23 8:47 p.m.8 views

security flaw

Multiple vulnerabilities in the IGMP functionality for Linux kernel 2.4.22 to 2.4.28, and 2.6.x to 2.6.9, allow local and remote attackers to cause a denial of service or execute arbitrary code via 1 the ipmcsource function, which decrements a counter to -1, or 2 the igmpmarksources function, whi...

10CVSS6.2AI score0.20825EPSS
SaveExploits2References4
securityvulns
securityvulns
added 2004/09/30 12:00 a.m.36 views

Multiple PHP request parsing bugs

Invalid request parameters parsing leads to leakage of memory content and rewriting of internal variables...

3.4AI score
SaveExploits0References3Affected Software1
CVE
CVE
added 2004/07/23 4:00 a.m.57 views

CVE-2004-0729

CVE-2004-0729 affects PhpBB 2.0.8. The vulnerability occurs when users supply invalid input via (1) category_rows to index.php, (2) faq to faq.php, or (3) ranksrow to profile.php, triggering error messages that reveal the full server path. The available documents confirm the component and origin ...

5CVSS6.9AI score0.01425EPSS
SaveExploits0References5Affected Software1
Cvelist
Cvelist
added 2004/07/23 4:00 a.m.27 views

CVE-2004-0729

PhpBB 2.0.8 allows remote attackers to gain sensitive information via an invalid 1 categoryrows parameter to index.php, 2 faq parameter to faq.php, or 3 ranksrow parameter to profile.php, which reveal the full path in an error message...

6.5AI score0.01425EPSS
SaveExploits0References5
NVD
NVD
added 2004/04/26 4:00 a.m.13 views

CVE-2004-1971

modules.php in PHP-Nuke Video Gallery Module 0.1 Beta 5 allows remote attackers to gain sensitive information via an HTTP request with an invalid 1 catid or 2 clipid parameter, which reveals the full path in an error message...

5CVSS6.6AI score0.01181EPSS
SaveExploits0References2
securityvulns
securityvulns
added 2000/04/11 12:00 a.m.153 views

BeOS syscall bug

Summary: BeOS crashes when system call with invalid parameters is issued. Details: When using direct kernel calls through int 0x25 not libroot.so functions BeOS dies on most system calls with invalid parameters/stack. Allthough Be has registered this bug before R5.0, it is present in R5.0, and is...

6.9AI score
SaveExploits0
exploitpack
exploitpack
added 2000/04/10 12:00 a.m.14 views

Be BeOS 4.55.0 - Invalid System Call

Be BeOS 4.55.0 - Invalid System Call source: https://www.securityfocus.com/bid/1098/info A direct system call containing invalid parameters through int 0x25 will cause the BeOS to crash. Reboot of the machine is required in order to regain normal functionality...

7.4AI score
SaveExploits0
Rows per page
Query Builder