Lucene search
K

566 matches found

Prion
Prion
added 2012/08/25 9:55 p.m.10 views

Race condition

Race condition in Webroot Internet Security Essentials 6.1.0.145 on Windows XP allows local users to bypass kernel-mode hook handlers, and execute dangerous code that would otherwise be blocked by a handler but not blocked by signature-based malware detection, via certain user-space memory change...

6.2CVSS7.2AI score0.00041EPSS
Exploits0References9Affected Software1
CVE
CVE
added 2012/08/25 9:0 p.m.42 views

CVE-2010-5183

CVE-2010-5183 affects Webroot Internet Security Essentials 6.1.0.145 on Windows XP. The root cause is a race condition that lets local users bypass kernel-mode hook handlers and run code that could evade signature-based detection via certain user-space memory changes during hook-handler execution...

6.2CVSS6.9AI score0.00041EPSS
Exploits0References9Affected Software1
Cvelist
Cvelist
added 2012/08/25 9:0 p.m.14 views

CVE-2010-5183

Race condition in Webroot Internet Security Essentials 6.1.0.145 on Windows XP allows local users to bypass kernel-mode hook handlers, and execute dangerous code that would otherwise be blocked by a handler but not blocked by signature-based malware detection, via certain user-space memory change...

6.7AI score0.00041EPSS
Exploits0References9
Positive Technologies
Positive Technologies
added 2012/08/25 12:0 a.m.2 views

PT-2012-1395 · Webroot · Webroot Internet Security Essentials

Name of the Vulnerable Software and Affected Versions: Webroot Internet Security Essentials version 6.1.0.145 Description: A race condition exists that allows local users to bypass kernel-mode hook handlers and execute dangerous code. This is achieved through certain user-space memory changes...

6.2CVSS6.8AI score0.00041EPSS
Exploits0References10
myhack58
myhack58
added 2012/06/22 12:0 a.m.15 views

WordPress Sitemile Auctions plugin arbitrary file upload vulnerability-vulnerability warning-the black bar safety net

Affected system: WordPress Sitemile Auctions Plugin 2. x Description: -------------------------------------------------------------------------------- WordPress is a PHP language and MySQL database development Blog(blog, blogengine, users can support PHP and MySQL database server on build your ow...

0.3AI score
Exploits0
OpenVAS
OpenVAS
added 2012/06/11 12:0 a.m.23 views

WordPress Foxypress Plugin 'uploadify.php' Arbitrary File Upload Vulnerability

WordPress Foxypress Plugin is prone to file upload vulnerability. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

7.3AI score
Exploits0References5
Prion
Prion
added 2012/01/04 7:55 p.m.7 views

Unrestricted file upload

Multiple unrestricted file upload vulnerabilities in the WP Symposium plugin before 11.12.24 for WordPress allow remote attackers to execute arbitrary code by uploading a file with an executable extension using 1 uploadify/uploadadminavatar.php or 2 uploadify/uploadprofileavatar.php, then accessi...

7.5CVSS8.5AI score0.04263EPSS
Exploits0References6Affected Software1
OpenVAS
OpenVAS
added 2011/12/06 12:0 a.m.32 views

Codesys CmpWebServer Multiple Vulnerabilities

Codesys is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

10CVSS6.4AI score0.81882EPSS
Exploits9References4
0day.today
0day.today
added 2011/01/12 12:0 a.m.17 views

Energine 2.3.8 Multiple Vulnerabilities

Exploit for php platform in category web applications Product: Energine Vulnerable Version: 2.3.8 and probably prior versions Vendor Notification: 28 December 2010 Vulnerability Type: SQL Injection Status: Not Fixed, Vendor Alerted, Awaiting Vendor Response Risk level: Medium Credit: High-Tech...

7.1AI score
Exploits0
exploitpack
exploitpack
added 2011/01/11 12:0 a.m.11 views

energine 2.3.8 - Multiple Vulnerabilities

energine 2.3.8 - Multiple Vulnerabilities Vulnerability ID: HTB22783 Reference: http://www.htbridge.ch/advisory/sqlinjectionvulnerabilityinenergine.html Product: Energine Vulnerable Version: 2.3.8 and probably prior versions Vendor Notification: 28 December 2010 Vulnerability Type: SQL Injection...

0.1AI score
Exploits0
Packet Storm
Packet Storm
added 2011/01/05 12:0 a.m.25 views

BlogEngine.NET Unauthorized Access / Directory Traversal

Product: BlogEngine.NET Vendor informed: 24 Sep 2010 Fixed Version Released: 01 Jan 2011 Affected Versions: 1.6.x and prior versions Severtiy: Critical Impact: Information Discloure and System Compromise Description: BlogEngine.NET is an open source .NET blogging project that was born out of desi...

0.5AI score
Exploits0
Packet Storm
Packet Storm
added 2010/12/28 12:0 a.m.28 views

httpdASM 0.92 Directory Traversal

------------------------------------------------------------------------ Software................httpdASM 0.92 Vulnerability...........Directory Traversal Download................http://www.japheth.de/httpdASM.html Release Date............12/27/2010 Tested On...............Windows XP...

Exploits0
Exploit DB
Exploit DB
added 2010/12/21 12:0 a.m.28 views

WordPress Plugin Mediatricks Viva Thumbs - Multiple Information Disclosure Vulnerabilities

source: https://www.securityfocus.com/bid/45539/info The Mediatricks Viva Thumbs plugin for WordPress is prone to multiple information-disclosure vulnerabilities because it fails to properly sanitize user-supplied input. Attackers can exploit these issues using directory-traversal strings to...

7.4AI score
Exploits0
Packet Storm
Packet Storm
added 2010/11/02 12:0 a.m.17 views

Project Jug Directory Traversal

------------------------------------------------------------------------ Software................Project Jug Vulnerability...........Directory Traversal Download................http://sourceforge.net/p/projectjug/home/ Release Date............10/31/2010 Tested On...............Windows Vista...

0.3AI score
Exploits0
Exploit DB
Exploit DB
added 2010/11/01 12:0 a.m.17 views

Project Jug 1.0.0 - Directory Traversal

source: https://www.securityfocus.com/bid/44569/info Project Jug is prone to a directory-traversal vulnerability because it fails to sufficiently sanitize user-supplied input. Exploiting this issue will allow an attacker to read files outside the webroot directory. Information harvested may aid i...

7.4AI score
Exploits0
exploitpack
exploitpack
added 2010/11/01 12:0 a.m.15 views

Project Jug 1.0.0 - Directory Traversal

Project Jug 1.0.0 - Directory Traversal source: https://www.securityfocus.com/bid/44569/info Project Jug is prone to a directory-traversal vulnerability because it fails to sufficiently sanitize user-supplied input. Exploiting this issue will allow an attacker to read files outside the webroot...

Exploits0
0day.today
0day.today
added 2010/10/28 12:0 a.m.21 views

MinaliC Webserver v1.0 Directory Traversal Vulnerability

Exploit for windows platform in category remote exploits ======================================================== MinaliC Webserver v1.0 Directory Traversal Vulnerability ========================================================...

7.1AI score
Exploits0
exploitpack
exploitpack
added 2010/10/27 12:0 a.m.9 views

MinaliC WebServer 1.0 - Directory Traversal

MinaliC WebServer 1.0 - Directory Traversal ------------------------------------------------------------------------ Software................MinaliC Webserver 1.0 Vulnerability...........Directory Traversal Download................http://sourceforge.net/projects/minalic/ Release...

0.3AI score
Exploits0
OpenVAS
OpenVAS
added 2010/09/22 12:0 a.m.45 views

QuickShare <= 1.0 Directory Traversal Vulnerability - Active Check

QuickShare is prone to a directory traversal vulnerability because it fails to sufficiently sanitize user-supplied input. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

5CVSS6.6AI score0.00764EPSS
Exploits1References1
Packet Storm
Packet Storm
added 2010/09/16 12:0 a.m.16 views

QuickShare 1.0 Directory Traversal

------------------------------------------------------------------------ Software................QuickShare 1.0 Vulnerability...........Directory Traversal Download................http://houbysoft.com/ Release Date............9/15/2010 Tested On...............Windows XP...

0.1AI score
Exploits0
Rows per page
Query Builder