Lucene search
+L

1014 matches found

NVD
NVD
•added 2002/07/03 4:00 a.m.•17 views

CVE-2002-0537

The admin.html file in StepWeb Search Engine SWS 2.5 stores passwords in links to manager.pl, which allows remote attackers who can access the admin.html file to gain administrative privileges to SWS...

10CVSS6.9AI score0.03115EPSS
SaveExploits1References3
Cvelist
Cvelist
•added 2002/06/11 4:00 a.m.•32 views

CVE-2002-0537

The admin.html file in StepWeb Search Engine SWS 2.5 stores passwords in links to manager.pl, which allows remote attackers who can access the admin.html file to gain administrative privileges to SWS...

6.9AI score0.03115EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2002/06/11 12:00 a.m.•3 views

CVE-2002-0537: Undefined Security Weakness

The admin.html file in StepWeb Search Engine SWS 2.5 stores passwords in links to manager.pl, which allows remote attackers who can access the admin.html file to gain administrative privileges to SWS...

10CVSS5.9AI score0.03115EPSS
SaveExploits1References1
CVE
CVE
•added 2002/03/09 5:00 a.m.•57 views

CVE-2000-0180

The CVE-2000-0180 issue affects the Sojourn search engine through the sojourn.cgi CGI, where a directory-traversal (.. ) flaw allows remote attackers to read arbitrary files. The vulnerability enables information disclosure by exploiting the CGI’s input handling, executing with the web server’s p...

5CVSS6.7AI score0.07396EPSS
SaveExploits2References3Affected Software1
Cvelist
Cvelist
•added 2002/03/09 5:00 a.m.•33 views

CVE-2000-0180

Sojourn search engine allows remote attackers to read arbitrary files via a .. dot dot attack...

6.7AI score0.07396EPSS
SaveExploits2References3
exploitpack
exploitpack
•added 2002/01/29 12:00 a.m.•17 views

AHG Search Engine 1.0 - search.cgi Arbitrary Command Execution

AHG Search Engine 1.0 - search.cgi Arbitrary Command Execution source: https://www.securityfocus.com/bid/3985/info Search.CGI is a component of the HTMLsearch Search Engine software distributed by AHG. The software is available for the Unix, Linux, and Microsoft platforms. The search.cgi script...

0.4AI score
SaveExploits0
Exploit DB
Exploit DB
•added 2002/01/29 12:00 a.m.•42 views

AHG Search Engine 1.0 - 'search.cgi' Arbitrary Command Execution

source: https://www.securityfocus.com/bid/3985/info Search.CGI is a component of the HTMLsearch Search Engine software distributed by AHG. The software is available for the Unix, Linux, and Microsoft platforms. The search.cgi script included with the AHG Search Engine does not adequately filter...

7.5CVSS5.8AI score0.03871EPSS
SaveExploits2
NVD
NVD
•added 2001/06/27 4:00 a.m.•23 views

CVE-2001-0476

Multiple buffer overflows in s.cgi program in Aspseek search engine 1.03 and earlier allow remote attackers to execute arbitrary commands via 1 a long HTTP query string, or 2 a long tmpl parameter...

7.5CVSS7.8AI score0.09573EPSS
SaveExploits2References4
Cvelist
Cvelist
•added 2001/05/24 4:00 a.m.•34 views

CVE-2001-0476

Multiple buffer overflows in s.cgi program in Aspseek search engine 1.03 and earlier allow remote attackers to execute arbitrary commands via 1 a long HTTP query string, or 2 a long tmpl parameter...

7.8AI score0.09573EPSS
SaveExploits2References4
CVE
CVE
•added 2001/05/24 4:00 a.m.•58 views

CVE-2001-0476

Aspseek vulnerable component: s.cgi in Aspseek 1.03 and earlier. Root cause: multiple buffer overflows in s.cgi allow remote attackers to execute arbitrary commands via (1) a long HTTP query string or (2) a long tmpl parameter. Impact: remote command execution with partial confidentiality/integri...

7.5CVSS8.2AI score0.09573EPSS
SaveExploits2References4Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2001/05/24 12:00 a.m.•4 views

CVE-2001-0476: Undefined Security Weakness

Multiple buffer overflows in s.cgi program in Aspseek search engine 1.03 and earlier allow remote attackers to execute arbitrary commands via 1 a long HTTP query string, or 2 a long tmpl parameter...

7.5CVSS6.5AI score0.09573EPSS
SaveExploits2References1
securityvulns
securityvulns
•added 2001/03/20 12:00 a.m.•37 views

Aspseek Buffer Overflow

|---------------------------------------------------------------------------------------| / Product: Aspseek Search Engine. Vendor URL: www.aspseek.org / Tested on: v1.0.0 - v1.0.3 Freeware Linux Vendor Contact: Mailed on 8th March NO Reply Vendor Patched though / |-- The Problem,...

7.6AI score
SaveExploits0
securityvulns
securityvulns
•added 2000/11/01 12:00 a.m.•35 views

Дырки Netscape Server

Переполнение буфера в сегменте кучи при обращении к LDAP-gateway Серверу. Кроме того, некорректный GET-запрос приводит к краху поисковой системы...

0.6AI score
SaveExploits0References2Affected Software2
securityvulns
securityvulns
•added 2000/08/25 12:00 a.m.•33 views

Linux news 25.08.00

Linux 2.2.17pre20 Вышла новая pre-версия следующего стабильного ядра Linux: 2.2.17pre20. Список изменений пока не попался мне на глаза. Подробнее: ftp://ftp.kernel.org/pub/linux/kernel/people/alan/2.2.17pre/ Linux-2.4.0-test7 Вышло новое "нестабильное" ядро Linux: Linux-2.4.0-test7. Подробнее:...

7.3AI score
SaveExploits0
exploitpack
exploitpack
•added 2000/07/18 12:00 a.m.•25 views

Armada Design Master Index 1.0 - Directory Traversal

Armada Design Master Index 1.0 - Directory Traversal source: https://www.securityfocus.com/bid/1772/info Master Index is a commercially supported search engine. Certain versions of this software ship with a path traversal vulnerability. This is to say that a remote user may 'back out' .../ of the...

0.7AI score
SaveExploits0
Cvelist
Cvelist
•added 2000/03/22 5:00 a.m.•28 views

CVE-2000-0039

AltaVista search engine allows remote attackers to read files above the document root via a .. dot dot in the query.cgi CGI program...

6.5AI score0.05917EPSS
SaveExploits1References2
CVE
CVE
•added 2000/03/22 5:00 a.m.•63 views

CVE-2000-0039

CVE-2000-0039 affects AltaVista search engine via a directory traversal vulnerability in the query.cgi CGI program, allowing remote attackers to read files above the document root by exploiting a .. (dot dot) parameter. The issue is documented across multiple sources (NVD, CVE List, Nessus listin...

5CVSS6.5AI score0.05917EPSS
SaveExploits1References2Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2000/03/22 12:00 a.m.•3 views

CVE-1999-0996: Undefined Security Weakness

Buffer overflow in Infoseek Ultraseek search engine allows remote attackers to execute commands via a long GET request...

7.5CVSS6.1AI score0.07709EPSS
SaveExploits1References1
Tenable Nessus
Tenable Nessus
•added 2000/03/17 12:00 a.m.•57 views

Sojourn Search Engine sojourn.cgi cat Parameter Traversal Arbitrary File Access

The 'sojourn.cgi' CGI is installed. This CGI has a well known security flaw that lets an attacker read arbitrary files with the privileges of the http daemon usually root or nobody. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include 'compat.inc' ; ifdescription scriptid10349;...

5CVSS5.4AI score0.07396EPSS
SaveExploits2References2
NVD
NVD
•added 2000/03/14 5:00 a.m.•19 views

CVE-2000-0180

Sojourn search engine allows remote attackers to read arbitrary files via a .. dot dot attack...

5CVSS6.7AI score0.07396EPSS
SaveExploits2References3
Rows per page
Query Builder