Lucene search
+L

494 matches found

Zero Day Initiative
Zero Day Initiative
added 2013/05/29 12:00 a.m.30 views

Novell iPrint Client IPP Response Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Novell iPrint. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of...

7.5CVSS1.7AI score0.06227EPSS
SaveExploits4References1
Prion
Prion
added 2013/05/15 3:36 a.m.22 views

Spoofing

Writer in Microsoft Windows Essentials 2011 and 2012 allows remote attackers to bypass proxy settings and overwrite arbitrary files via crafted URL parameters, aka "Windows Essentials Improper URI Handling Vulnerability."...

6.8CVSS7.2AI score0.16097EPSS
SaveExploits0References3Affected Software1
Check Point Advisories
Check Point Advisories
added 2013/05/14 12:00 a.m.13 views

Windows Live Essentials Improper URI Handling Vulnerability (MS13-045; CVE-2013-0096)

An information disclosure vulnerability exists when Windows Live Writer fails to properly handle a specially crafted URL. An attacker who successfully exploited this vulnerability could perform various actions on behalf of the logged-on user. These actions include the ability to overwrite files a...

5.5AI score0.16097EPSS
SaveExploits0
Symantec
Symantec
added 2013/05/14 12:00 a.m.35 views

Microsoft Windows Essentials CVE-2013-0096 URI Handling Information Disclosure Vulnerability

Description Microsoft Windows Essentials is prone to an information-disclosure vulnerability. Attackers can exploit this issue to obtain sensitive information that may aid in further attacks. Technologies Affected Microsoft Windows Essentials 2011 Microsoft Windows Essentials 2012 Recommendations...

6.8CVSS0.2AI score0.16097EPSS
SaveExploits0References1Affected Software1
RubySec
RubySec
added 2013/03/18 12:00 a.m.28 views

command_wrap Gem for Ruby URI Handling Arbitrary Command Injection

commandwrap Gem for Ruby contains a flaw that is triggered during the handling of input passed via the URL that contains a semicolon character ;. This will allow a remote attacker to inject arbitrary commands and have them executed in the context of the user clicking it...

7.5CVSS4.9AI score0.03633EPSS
SaveExploits0References1
RubySec
RubySec
added 2013/03/13 12:00 a.m.33 views

fastreader Gem for Ruby URI Handling Arbitrary Command Injection

fastreader Gem for Ruby contains a flaw that is triggered during the handling of specially crafted input passed via a URL that contains a ';' character. This may allow a context-dependent attacker to potentially execute arbitrary commands...

7.5CVSS4.7AI score0.02268EPSS
SaveExploits1References1
RubySec
RubySec
added 2013/03/12 12:00 a.m.22 views

MiniMagick Gem for Ruby URI Handling Arbitrary Command Injection

MiniMagick Gem for Ruby contains a flaw that is triggered during the handling of specially crafted input from an untrusted source passed via a URL that contains a ';' character. This may allow a context-dependent attacker to potentially execute arbitrary commands...

7.5CVSS4.5AI score0.03633EPSS
SaveExploits0References1Affected Software1
Cent OS
Cent OS
added 2013/01/09 7:45 p.m.78 views

gnome security update

CentOS Errata and Security Advisory CESA-2013:0131 Updated gnome-vfs2 packages that fix one security issue and several bugs are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having low security impact. A Common Vulnerability Scoring Syst...

4.3CVSS6.5AI score0.08437EPSS
SaveExploits2References7
OpenVAS
OpenVAS
added 2012/09/11 12:00 a.m.34 views

Slackware Advisory SSA:2004-238-01 kdelibs

The remote host is missing an update as announced via advisory SSA:2004-238-01. OpenVAS Vulnerability Test $Id: esoftslkssa200423801.nasl 6598 2017-07-07 09:36:44Z cfischer $ Description: Auto-generated from the corresponding slackware advisory Authors: Thomas Reinke Copyright: Copyright c 2012...

7.5CVSS0.8AI score0.07778EPSS
SaveExploits0
OpenVAS
OpenVAS
added 2012/09/10 12:00 a.m.44 views

Slackware: Security Advisory (SSA:2004-238-01)

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS6.5AI score0.07778EPSS
SaveExploits0References2
CVE
CVE
added 2012/07/25 7:00 p.m.64 views

CVE-2012-3696

CVE-2012-3696 is a WebKit/Safari vulnerability (pre-6.0) exposed via crafted WebSockets URI handling leading to CRLF HTTP header injection and potential HTTP request splitting. The issue affects WebKit in Safari and is documented alongside other WebKit/WebKit-related CVEs in the 2012-09 timeframe...

4.3CVSS6.3AI score0.00907EPSS
SaveExploits0References5Affected Software1
NVD
NVD
added 2012/02/03 8:55 p.m.25 views

CVE-2011-4879

miniweb.exe in the HMI web server in Siemens WinCC flexible 2004, 2005, 2007, and 2008 before SP3; WinCC V11 aka TIA portal before SP2 Update 1; the TP, OP, MP, Comfort Panels, and Mobile Panels SIMATIC HMI panels; WinCC V11 Runtime Advanced; and WinCC flexible Runtime does not properly handle UR...

8.5CVSS6.7AI score0.12545EPSS
SaveExploits1References8
Kaspersky
Kaspersky
added 2012/01/24 12:00 a.m.61 views

KLA10394 Multiple vulnerabilities in Siemens

Multiple critical vulnerabilities have been found in Siemens products. Malicious users can exploit these vulnerabilities to read & modify arbitrary files, cause denial of service, execute arbitrary code, bypass authentication, obtain access and inject arbitrary HTTP headers. Below is a complete...

10CVSS8.4AI score0.14013EPSS
SaveExploits1References5
Tenable Nessus
Tenable Nessus
added 2011/12/14 12:00 a.m.231 views

Oracle Java JDK / JRE 6 < Update 30 Multiple Vulnerabilities

The version of Oracle formerly Sun Java Runtime Environment JRE 6.x installed on the remote host is earlier than Update 30 and is potentially affected by the following vulnerabilities: - A stack overflow error exists related to proxy tunnels. Bug 6670868 - An error exists related to foreach loops...

5.7AI score
SaveExploits0References6
OpenVAS
OpenVAS
added 2011/12/08 12:00 a.m.12 views

SopCast 'sop://' URI Handling Buffer Overflow Vulnerability

SopCast is prone to a buffer overflow vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8AI score
SaveExploits0References5
exploitpack
exploitpack
added 2011/12/05 12:00 a.m.13 views

SopCast 3.4.7 - sop: URI Handling Remote Stack Buffer Overflow (PoC)

SopCast 3.4.7 - sop: URI Handling Remote Stack Buffer Overflow PoC !/usr/bin/perl SopCast 3.4.7 sop:// URI Handling Remote Stack Buffer Overflow PoC Vendor: SopCast.com Product web page: http://www.sopcast.com Affected version: 3.4.7.45585 Summary: SopCast is a simple, free way to broadcast video...

0.5AI score
SaveExploits0
zdt
zdt
added 2011/12/05 12:00 a.m.25 views

SopCast 3.4.7 sop:// URI Handling Remote Stack Buffer Overflow PoC

Exploit for windows platform in category remote exploits !/usr/bin/perl SopCast 3.4.7 sop:// URI Handling Remote Stack Buffer Overflow PoC Vendor: SopCast.com Product web page: http://www.sopcast.com Affected version: 3.4.7.45585 Summary: SopCast is a simple, free way to broadcast video and audio...

7.1AI score
SaveExploits0
Packet Storm
Packet Storm
added 2011/12/05 12:00 a.m.26 views

SopCast 3.4.7 Stack Buffer Overflow

!/usr/bin/perl SopCast 3.4.7 sop:// URI Handling Remote Stack Buffer Overflow PoC Vendor: SopCast.com Product web page: http://www.sopcast.com Affected version: 3.4.7.45585 Summary: SopCast is a simple, free way to broadcast video and audio or watch the video and listen to radio on the Internet...

0.6AI score
SaveExploits0
Zero Science Lab
Zero Science Lab
added 2011/12/05 12:00 a.m.25 views

SopCast 3.4.7 sop:// URI Handling Remote Stack Buffer Overflow PoC

Summary SopCast is a simple, free way to broadcast video and audio or watch the video and listen to radio on the Internet. Adopting P2PPeer-to-Peer technology, It is very efficient and easy to use. SoP is the abbreviation for Streaming over P2P. Sopcast is a Streaming Direct Broadcasting System...

6.5AI score
SaveExploits0
Cvelist
Cvelist
added 2011/08/03 12:00 a.m.23 views

CVE-2011-2819

Google Chrome before 13.0.782.107 allows remote attackers to bypass the Same Origin Policy via vectors related to handling of the base URI...

6AI score0.01382EPSS
SaveExploits0References9
Rows per page
Query Builder