Lucene search
+L

3166 matches found

Prion
Prion
•added 2007/02/06 7:28 p.m.•28 views

Sql injection

SQL injection vulnerability in badword.asp in Ublog Reload 1.0.5 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

7.5CVSS9AI score0.01152EPSS
SaveExploits0References5Affected Software1
NVD
NVD
•added 2007/02/06 7:28 p.m.•37 views

CVE-2007-0798

Multiple cross-site scripting XSS vulnerabilities in Ublog Reload 1.0.5 allow remote attackers to inject arbitrary web script or HTML via unspecified parameters to 1 login.asp; and allow remote authenticated users to inject arbitrary web script or HTML via unspecified parameters to 2 badword.asp,...

4.3CVSS5.5AI score0.02028EPSS
SaveExploits0References8
NVD
NVD
•added 2007/02/06 7:28 p.m.•27 views

CVE-2007-0799

SQL injection vulnerability in badword.asp in Ublog Reload 1.0.5 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

7.5CVSS8.4AI score0.01152EPSS
SaveExploits0References5
Cvelist
Cvelist
•added 2007/02/06 7:00 p.m.•49 views

CVE-2007-0798

Multiple cross-site scripting XSS vulnerabilities in Ublog Reload 1.0.5 allow remote attackers to inject arbitrary web script or HTML via unspecified parameters to 1 login.asp; and allow remote authenticated users to inject arbitrary web script or HTML via unspecified parameters to 2 badword.asp,...

5.5AI score0.02028EPSS
SaveExploits0References8
Cvelist
Cvelist
•added 2007/02/06 7:00 p.m.•41 views

CVE-2007-0799

SQL injection vulnerability in badword.asp in Ublog Reload 1.0.5 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

8.4AI score0.01152EPSS
SaveExploits0References5
CVE
CVE
•added 2007/02/06 7:00 p.m.•90 views

CVE-2007-0798

CVE-2007-0798 affects Ublog Reload 1.0.5. The issue comprises multiple cross-site scripting (XSS) vulnerabilities allowing an attacker to inject arbitrary web script or HTML via unspecified parameters to (1) login.asp (remote, unauthenticated) and (2–4) badword.asp, polls.asp, and users.asp (remo...

4.3CVSS5.5AI score0.02028EPSS
SaveExploits0References8Affected Software1
CVE
CVE
•added 2007/02/06 7:00 p.m.•69 views

CVE-2007-0799

CVE-2007-0799 involves a SQL injection in badword.asp of Ublog Reload 1.0.5. The vulnerability arises from improper handling of user-supplied input, enabling remote attackers to execute arbitrary SQL commands via unspecified vectors. Affected product/version: Ublog Reload 1.0.5; vulnerable compon...

7.5CVSS8.4AI score0.01152EPSS
SaveExploits0References5Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2007/02/06 12:00 a.m.•6 views

CVE-2007-0799: Undefined Security Weakness

SQL injection vulnerability in badword.asp in Ublog Reload 1.0.5 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

7.5CVSS6.4AI score0.01152EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2007/02/06 12:00 a.m.•8 views

CVE-2007-0798: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in Ublog Reload 1.0.5 allow remote attackers to inject arbitrary web script or HTML via unspecified parameters to 1 login.asp; and allow remote authenticated users to inject arbitrary web script or HTML via unspecified parameters to 2 badword.asp,...

4.3CVSS5.8AI score0.02028EPSS
SaveExploits0References1
securityvulns
securityvulns
•added 2007/02/04 12:00 a.m.•83 views

Ublog Reload Admin Panel Multiple HTML Injections

Ublog Reload Admin Panel Multiple HTML Injections Ublog Reload has been developed to run exclusively on web sites hosted on Windows Servers with Internet Information Server 4.0 or higher and ASP 3.0 installed. No other Platforms are supported. Ublog Reload supports Microsoft Access, Microsoft Sql...

0.1AI score
SaveExploits0
Cisco
Cisco
•added 2007/01/31 12:00 a.m.•36 views

SIP Packets Reload IOS Devices with support for SIP

Cisco devices running an affected version of Internetwork Operating System IOS which supports Session Initiation Protocol SIP are affected by a vulnerability that may lead to a reload of the device when receiving a specific series of packets destined to port 5060. This issue is compounded by a...

7.8CVSS6.2AI score0.03629EPSS
SaveExploits0References1
securityvulns
securityvulns
•added 2007/01/11 12:00 a.m.•65 views

Cisco IOS Data-link Switching DoS

Device reload on malformed DLSw message parsing...

5CVSS2.7AI score0.02644EPSS
SaveExploits0References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2007/01/11 12:00 a.m.•4 views

CVE-2007-0199: Undefined Security Weakness

The Data-link Switching DLSw feature in Cisco IOS 11.0 through 12.4 allows remote attackers to cause a denial of service device reload via "an invalid value in a DLSw message... during the capabilities exchange."...

5CVSS5.8AI score0.02644EPSS
SaveExploits0References1
Cisco
Cisco
•added 2007/01/10 4:00 p.m.•49 views

DLSw Vulnerability

A vulnerability exists in the Data-link Switching DLSw feature in Cisco IOS where an invalid value in a DLSw message could result in a reload of the DLSw device. Successful exploitation of this vulnerability requires that an attacker be able to establish a DLSw connection to the device. There are...

5CVSS5.9AI score0.02644EPSS
SaveExploits0References1
Prion
Prion
•added 2006/04/05 6:04 p.m.•30 views

Design/Logic Flaw

Unspecified vulnerability in the HTTP compression functionality in Cisco CSS 11500 Series Content Services switches allows remote attackers to cause a denial of service device reload via 1 "valid, but obsolete" or 2 "specially crafted" HTTP requests...

5CVSS7.2AI score0.01857EPSS
SaveExploits0References7
CVE
CVE
•added 2006/04/05 6:00 p.m.•62 views

CVE-2006-1631

The CVE-2006-1631 entry refers to a vulnerability in Cisco 11500 Series Content Services switches where the HTTP compression feature can be abused to trigger a denial-of-service (device reload) by sending certain HTTP requests (either valid but obsolete or specially crafted). Exploitation details...

5CVSS6.7AI score0.01857EPSS
SaveExploits0References7Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2006/04/05 12:00 a.m.•8 views

CVE-2006-1631: Undefined Security Weakness

Unspecified vulnerability in the HTTP compression functionality in Cisco CSS 11500 Series Content Services switches allows remote attackers to cause a denial of service device reload via 1 "valid, but obsolete" or 2 "specially crafted" HTTP requests...

5CVSS5.9AI score0.01857EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2006/01/31 12:00 a.m.•7 views

CVE-2006-0483: Undefined Security Weakness

Cisco VPN 3000 series concentrators running software 4.7.0 through 4.7.2.A allow remote attackers to cause a denial of service device reload or user disconnect via a crafted HTTP packet...

7.8CVSS5.8AI score0.03196EPSS
SaveExploits0References1
securityvulns
securityvulns
•added 2006/01/16 12:00 a.m.•44 views

Cisco IP Phones DoS

Syn-flood causes phone to reload...

1.7AI score
SaveExploits0References1Affected Software1
NVD
NVD
•added 2005/11/02 12:02 a.m.•29 views

CVE-2005-3426

Cisco CSS 11500 Content Services Switch CSS with SSL termination services allows remote attackers to cause a denial of service memory corruption and device reload via a malformed client certificate during SSL session negotiation...

5CVSS6.8AI score0.01024EPSS
SaveExploits0References5
Rows per page
Query Builder