Lucene search
+L

47 matches found

Prion
Prion
added 2017/03/23 6:59 a.m.11 views

Design/Logic Flaw

The SAML2 implementation in Identity Server in NetIQ Access Manager 4.1 before 4.1.2 HF1 and 4.2 before 4.2.2 was handling unsigned SAML requests incorrectly, leaking results to a potentially malicious "Assertion Consumer Service URL" instead of the original requester...

5CVSS7AI score0.0109EPSS
Exploits0References1Affected Software1
0day.today
0day.today
added 2014/11/17 12:0 a.m.1410 views

.NET Remoting Services Remote Command Execution Vulnerability

Exploit for windows platform in category remote exploits Source: https://github.com/tyranid/ExploitRemotingService Exploit Database Mirror: http://www.exploit-db.com/sploits/35280.zip ExploitRemotingService c 2014 James Forshaw ============================================= A tool to exploit .NET...

10CVSS6.5AI score0.39589EPSS
Exploits4
Prion
Prion
added 2014/03/06 11:55 a.m.18 views

Code injection

EMC Documentum TaskSpace TSP 6.7SP1 before P25 and 6.7SP2 before P11 allows remote authenticated users to read arbitrary files via a modified imaging-service URL...

4CVSS6.7AI score0.00955EPSS
Exploits1References1Affected Software1
Cvelist
Cvelist
added 2014/03/06 11:0 a.m.29 views

CVE-2014-0630

EMC Documentum TaskSpace TSP 6.7SP1 before P25 and 6.7SP2 before P11 allows remote authenticated users to read arbitrary files via a modified imaging-service URL...

6.2AI score0.00955EPSS
Exploits1References1
CVE
CVE
added 2005/09/13 4:0 a.m.103 views

CVE-2005-2874

CVE-2005-2874 affects the Common UNIX Printing System (CUPS) prior to 1.1.23, where the is_path_absolute check in scheduler/client.c can be bypassed by a crafted URL ("..\.."), leading to a denial of service via a tight CPU loop when handling HTTP requests. Public advisories (RHSA-2005:772 / CESA...

5CVSS6.2AI score0.02969EPSS
Exploits1References7Affected Software1
NVD
NVD
added 2001/06/26 4:0 a.m.21 views

CVE-2001-1083

Icecast 1.3.7, and other versions before 1.3.11 with HTTP server file streaming support enabled allows remote attackers to cause a denial of service crash via a URL that ends in . dot, / forward slash, or \ backward slash...

5CVSS6.4AI score0.09628EPSS
Exploits2References9
Friends Of PHP
Friends Of PHP
added 1970/01/01 12:0 a.m.8 views

CVE-2026-45074: Cas2Handler Derives CAS service URL from Client Host Header → Cross-Service Ticket Replay

More info at https://symfony.com/cve-2026-45074...

8.1CVSS5.8AI score0.00402EPSS
Exploits0Affected Software1
Rows per page
Query Builder