Lucene search
+L

2046 matches found

NVD
NVD
•added 2004/06/14 4:00 a.m.•31 views

CVE-2004-0199

Help and Support Center in Microsoft Windows XP and Windows Server 2003 SP1 does not properly validate HCP URLs, which allows remote attackers to execute arbitrary code, as demonstrated using certain hcp:// URLs that access the DVD Upgrade capability dvdupgrd.htm...

5.1CVSS7.2AI score0.26133EPSS
SaveExploits1References9
Tenable Nessus
Tenable Nessus
•added 2004/05/11 12:00 a.m.•32 views

MS04-015: Microsoft Help Center Remote Code Execution (840374)

The remote host contains bugs in the Microsoft Help and Support Center in the way it handles HCP URL validation. 840374 An attacker could use this bug to execute arbitrary commands on the remote host. To exploit this bug, an attacker would need to lure a user of the remote host into visiting a...

5.1CVSS6AI score0.26133EPSS
SaveExploits1References2
CERT
CERT
•added 2004/05/11 12:00 a.m.•41 views

Microsoft Help and Support Center (HCP) fails to properly validate HCP URLs

Overview The Microsoft Help and Support Center HCP fails to properly handle HCP URL validation. Exploitation of this vulnerability may permit remote attackers to execute arbitrary code on the system with the privileges of the current user. Description Microsoft Windows XP and Server 2003 Help and...

5.1CVSS6.9AI score0.26133EPSS
SaveExploits1References2
securityvulns
securityvulns
•added 2002/03/05 12:00 a.m.•155 views

ReBB javascripts vulnerability

Hi! Another php - board named ReBB http://www.rebb.net has a img vulnerability. Exploit: Use this string my favorite : - imgjavascript:alert'test'/img Possible decision: All urls in img tag should start with http:// SliderGod...

SaveExploits0
Exploit DB
Exploit DB
•added 1999/05/25 12:00 a.m.•42 views

FloosieTek FTGate 2.1 - Web File Access

source: https://www.securityfocus.com/bid/280/info A vulnerability in Floosietek's FTGate allows remote malicious users to steal local files. Floosietek's FTGate is a Win32 mail server program. One of its features is allowing administrators to check the status of the mail server using a web brows...

5CVSS5.8AI score0.05767EPSS
SaveExploits1
CVE
CVE
•added 1976/01/01 12:00 a.m.•25 views

CVE-2025-13398

This CVE ID is rejected as a duplicate of CVE-2025-13542 and does not represent an active vulnerability entry.

SaveExploits0
Rows per page
Query Builder