Lucene search
+L

273 matches found

OSV
OSV
added 2006/07/06 8:5 p.m.3 views

DEBIAN-CVE-2006-3390

WordPress 2.0.3 allows remote attackers to obtain the installation path via a direct request to various files, such as those in the 1 wp-admin, 2 wp-content, and 3 wp-includes directories, possibly due to uninitialized variables...

5CVSS7AI score0.02807EPSS
SaveExploits0References1
OSV
OSV
added 2006/07/06 8:5 p.m.8 views

CVE-2006-3390

WordPress 2.0.3 allows remote attackers to obtain the installation path via a direct request to various files, such as those in the 1 wp-admin, 2 wp-content, and 3 wp-includes directories, possibly due to uninitialized variables...

6.3AI score
SaveExploits0References8
Debian CVE
Debian CVE
added 2006/07/06 8:0 p.m.53 views

CVE-2006-3390

WordPress 2.0.3 allows remote attackers to obtain the installation path via a direct request to various files, such as those in the 1 wp-admin, 2 wp-content, and 3 wp-includes directories, possibly due to uninitialized variables...

5CVSS5.9AI score0.02807EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2006/01/15 12:0 a.m.30 views

Mandrake Linux Security Advisory : netpbm (MDKSA-2005:199)

Pnmtopng in netpbm 10.2X, when using the -trans option, uses uninitialized size and index variables when converting Portable Anymap PNM images to Portable Network Graphics PNG, which might allow attackers to execute arbitrary code by modifying the stack. Netpbm 9.2X is not affected by this...

7.5CVSS6AI score0.04873EPSS
SaveExploits1References1
UbuntuCve
UbuntuCve
added 2005/11/01 9:2 p.m.33 views

CVE-2005-3418

Multiple cross-site scripting XSS vulnerabilities in phpBB 2.0.17 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 errormsg parameter to usercpregister.php, 2 forwardpage parameter to login.php, and 3 listcat parameter to search.php, which are not initialized as...

4.3CVSS6AI score0.01837EPSS
SaveExploits0References1
Debian CVE
Debian CVE
added 2005/10/25 4:0 a.m.36 views

CVE-2004-2486

The DSS verification code in Dropbear SSH Server before 0.43 frees uninitialized variables, which might allow remote attackers to gain access...

7.5CVSS6.8AI score0.03028EPSS
SaveExploits0
UbuntuCve
UbuntuCve
added 2005/10/18 10:2 p.m.16 views

CVE-2005-2978

pnmtopng in netpbm before 10.25, when using the -trans option, uses uninitialized size and index variables when converting Portable Anymap PNM images to Portable Network Graphics PNG, which might allow attackers to execute arbitrary code by modifying the stack...

7.5CVSS6.3AI score0.04873EPSS
SaveExploits1References2
OSV
OSV
added 2005/10/18 10:2 p.m.7 views

CVE-2005-2978

pnmtopng in netpbm before 10.25, when using the -trans option, uses uninitialized size and index variables when converting Portable Anymap PNM images to Portable Network Graphics PNG, which might allow attackers to execute arbitrary code by modifying the stack...

7.3AI score
SaveExploits0References17
OSV
OSV
added 2005/10/18 10:2 p.m.4 views

DEBIAN-CVE-2005-2978

pnmtopng in netpbm before 10.25, when using the -trans option, uses uninitialized size and index variables when converting Portable Anymap PNM images to Portable Network Graphics PNG, which might allow attackers to execute arbitrary code by modifying the stack...

7.5CVSS7.6AI score0.04873EPSS
SaveExploits1References1
RedHat Linux
RedHat Linux
added 2005/10/18 3:43 p.m.3 views

security flaw

pnmtopng in netpbm before 10.25, when using the -trans option, uses uninitialized size and index variables when converting Portable Anymap PNM images to Portable Network Graphics PNG, which might allow attackers to execute arbitrary code by modifying the stack...

7.5CVSS6.2AI score0.04873EPSS
SaveExploits1References4
securityvulns
securityvulns
added 2005/10/09 12:0 a.m.49 views

Cyphor 0.19 SQL Injection / Board takeover / cross site scripting

Cyphor 0.19 SQL Injection / Board takeover / cross site scripting 1if magic quotes off - SQL Injection: by "Forgot your password?" feature you can send yourself a new admin password and reset it, poc: email: youremail nick: 'or'X'='X soon, you will receive an email like this: You have registered...

8.4AI score
SaveExploits0
NVD
NVD
added 2004/12/31 5:0 a.m.27 views

CVE-2004-2486

The DSS verification code in Dropbear SSH Server before 0.43 frees uninitialized variables, which might allow remote attackers to gain access...

7.5CVSS6.9AI score0.03028EPSS
SaveExploits0References9
OSV
OSV
added 2004/12/31 5:0 a.m.5 views

DEBIAN-CVE-2004-2486

The DSS verification code in Dropbear SSH Server before 0.43 frees uninitialized variables, which might allow remote attackers to gain access...

7.5CVSS7.5AI score0.03028EPSS
SaveExploits0References1
Rows per page
Query Builder