Lucene search
+L

126 matches found

Exploit DB
Exploit DB
•added 2010/12/17 12:00 a.m.•42 views

ESTsoft ALYac Anti-Virus 1.5 < 5.0.1.2 - Local Privilege Escalation

ESTsoft ALYac Anti-Virus 1.5 with AYDrvNT.sys = 5.0.1.2 Local Kernel Mode Privilege Escalation Vulnerability AUTHOR MJ0011 EMAIL thdecoder$126.com VULNERABLE PRODUCTS ALYac Anti-Virus 1.5 DETAILS: AYDrvNT.sys create a device called "AYDrvNTALYAC" , and handles the device io control code = 0x223e2...

5.3AI score
SaveExploits0
seebug.org
seebug.org
•added 2010/05/23 12:00 a.m.•21 views

Kingsoft WebShield KAVSafe.sys &lt;= 2010.4.14.609(2010.5.23) Kernel Mode Local Privilege Escalation Vulnerability

Kavsafe.sys create a device called DeviceKAVSafe , and handles DeviceIoControl request IoControlCode = 0x830020d4 , which can overwrite arbitrary kernel module data Kingsoft WebShield = 3.5.1.2 2010.5.23 Signature Date: 2010-5-23 2:33:54 And KAVSafe.sys = 2010.4.14.609 Signature Date:2010-4-14...

7AI score
SaveExploits0
NVD
NVD
•added 2007/01/09 11:28 a.m.•24 views

CVE-2007-0136

Multiple cross-site scripting XSS vulnerabilities in Drupal before 4.6.11, and 4.7 before 4.7.5, allow remote attackers to inject arbitrary web script or HTML via unspecified parameters in the 1 filter and 2 system modules. NOTE: some of these details are obtained from third party information...

4.3CVSS5.8AI score0.02187EPSS
SaveExploits0References8
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2007/01/09 12:00 a.m.•4 views

CVE-2007-0136: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Drupal before 4.6.11, and 4.7 before 4.7.5, allow remote attackers to inject arbitrary web script or HTML via unspecified parameters in the 1 filter and 2 system modules. NOTE: some of these details are obtained from third party information...

4.3CVSS5.9AI score0.02187EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2006/10/17 12:00 a.m.•4 views

CVE-2006-5306: Improper Control of Generation of Code

Multiple PHP remote file inclusion vulnerabilities in the Journals System module 1.0.2 RC2 and earlier for phpBB allow remote attackers to execute arbitrary PHP code via a URL in the phpbbrootpath parameter in 1 includes/journalsdelete.php, 2 includes/journalspost.php, or 3...

6.8CVSS6.4AI score0.03052EPSS
SaveExploits2References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2001/10/12 12:00 a.m.•7 views

CVE-2001-0669: Undefined Security Weakness

Various Intrusion Detection Systems IDS including 1 Cisco Secure Intrusion Detection System, 2 Cisco Catalyst 6000 Intrusion Detection System Module, 3 Dragon Sensor 4.x, 4 Snort before 1.8.1, 5 ISS RealSecure Network Sensor 5.x and 6.x before XPU 3.2, and 6 ISS RealSecure Server Sensor 5.5 and 6...

7.5CVSS5.9AI score0.0439EPSS
SaveExploits1References1
Rows per page
Query Builder