Lucene search
+L

563 matches found

OpenVAS
OpenVAS
added 2008/10/24 12:0 a.m.30 views

Ipswitch WhatsUp Professional Authentication bypass detection

The remote web server is affected by an authentication bypass flaw. SPDX-FileCopyrightText: 2008 David Maciejak Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS7.1AI score0.0736EPSS
SaveExploits1References4
OpenVAS
OpenVAS
added 2008/10/24 12:0 a.m.33 views

Ipswitch WhatsUp Professional Multiple Vulnerabilities

Deprecated since it didn SPDX-FileCopyrightText: 2008 David Maciejak Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.80068";...

5CVSS6.4AI score0.0555EPSS
SaveExploits7References7
OpenVAS
OpenVAS
added 2006/03/26 12:0 a.m.22 views

PHPSurveyor sid SQL Injection Flaw

The remote web server contains a PHP script that is affected by a SQL injection flaw. Description: The remote host is running PHPSurveyor, a set of PHP scripts that interact with MySQL to develop surveys, publish surveys and collect responses to surveys. The remote version of this software is pro...

7.5CVSS7.5AI score0.01377EPSS
SaveExploits0References3
OpenVAS
OpenVAS
added 2006/03/26 12:0 a.m.73 views

CMSimple < 2.4 Beta 5 'index.php?guestbook' XSS Vulnerability - Active Check

CMSimple installed is prone to cross-site scripting XSS attacks due to its failure to sanitize user-supplied input to both the search and guestbook modules. SPDX-FileCopyrightText: 2006 Josh Zlatin-Amishav Some text descriptions might be excerpted from a referenced sources, and are Copyright C by...

6.7AI score
SaveExploits0References3
OpenVAS
OpenVAS
added 2006/03/26 12:0 a.m.395 views

Community Link Pro webeditor login.cgi remote command execution

The remote host is running Community Link Pro, a web-based application written in Perl. The remote version of this software contains a flaw in the script 'login.cgi' which may allow an attacker to execute arbitrary commands on the remote host. OpenVAS Vulnerability Test $Id:...

7.5CVSS0.5AI score0.02299EPSS
SaveExploits1
OpenVAS
OpenVAS
added 2006/03/26 12:0 a.m.41 views

phpDocumentor <= 1.3.0 RC4 LFI/RFI Vulnerability - Active Check

phpDocumentor is prone to local and remote file inclusion LFI/RFI vulnerabilities. SPDX-FileCopyrightText: 2006 Ferdy Riphagen Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

7.5CVSS6.7AI score0.14137EPSS
SaveExploits2References5
OpenVAS
OpenVAS
added 2006/03/26 12:0 a.m.22 views

SugarCRM <= 4.0 beta Remote File Inclusion Vulnerability

The version of SugarCRM installed on the remote host does not properly sanitize user input in the SPDX-FileCopyrightText: 2005 Ferdy Riphagen Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

7.5CVSS6.5AI score0.07328EPSS
SaveExploits4References3
OpenVAS
OpenVAS
added 2006/03/26 12:0 a.m.22 views

The Includer RCE Vulnerability

The Includer is prone to a remote code execution RCE vulnerability. SPDX-FileCopyrightText: 2005 David Maciejak Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS7.5AI score0.09906EPSS
SaveExploits4References3
OpenVAS
OpenVAS
added 2005/11/03 12:0 a.m.227 views

http TRACE XSS attack

Debugging functions are enabled on the remote HTTP server. The remote webserver supports the TRACE and/or TRACK methods. TRACE and TRACK are HTTP methods which are used to debug web server connections. It has been shown that servers supporting this method are subject to cross-site-scripting...

5.8CVSS0.6AI score0.25249EPSS
SaveExploits1References1
OpenVAS
OpenVAS
added 2005/11/03 12:0 a.m.37 views

Oracle 9iAS Dynamic Monitoring Services

In a default installation of Oracle 9iAS, it is possible to access the Dynamic Monitoring Services pages anonymously. Access to these pages should be restricted. OpenVAS Vulnerability Test $Id: oracle9iapachedms.nasl 8023 2017-12-07 08:36:26Z teissa $ Description: Oracle 9iAS Dynamic Monitoring...

5CVSS0.3AI score0.51129EPSS
SaveExploits0
OpenVAS
OpenVAS
added 2005/11/03 12:0 a.m.19 views

CVSTrac history.c history_update function overflow

The remote host seems to be running cvstrac, a web-based bug and patch-set tracking system for CVS. This version contains a flaw related to the historyupdate function in history.c that may allow an attacker to cause a buffer overflow and execute arbitrary code on the remote system. OpenVAS has...

0.7AI score
SaveExploits0References1
OpenVAS
OpenVAS
added 2005/11/03 12:0 a.m.27 views

cgi.rb

The SPDX-FileCopyrightText: 2004 David Maciejak Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.15710";...

5CVSS6.3AI score0.01898EPSS
SaveExploits0References1
OpenVAS
OpenVAS
added 2005/11/03 12:0 a.m.11 views

Horde IMP HTML MIME Viewer XSS Vulnerabilities

The target is running at least one instance of Horde IMP whose version number is between 3.0 and 3.2.5 inclusive. SPDX-FileCopyrightText: 2003-2004 George A. Theall Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

7AI score
SaveExploits0References1
OpenVAS
OpenVAS
added 2005/11/03 12:0 a.m.176 views

/doc directory browsable

The /doc directory is browsable. /doc shows the content of the /usr/doc directory and therefore it shows which programs and - important! - the version of the installed programs. SPDX-FileCopyrightText: 2000 Hendrik Scholz Some text descriptions might be excerpted from a referenced sources, and ar...

5CVSS6.8AI score0.31408EPSS
SaveExploits1References1
OpenVAS
OpenVAS
added 2005/11/03 12:0 a.m.25 views

myBloggie Multiple Vulnerabilities

myBloggie is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2005 Noam Rathaus Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS6.6AI score0.03596EPSS
SaveExploits6References3
OpenVAS
OpenVAS
added 2005/11/03 12:0 a.m.44 views

Nuked-klan <= 1.3b Multiple Vulnerabilities - Active Check

Nuked-klan is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2003 k-otik.com Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.7AI score
SaveExploits0References2
OpenVAS
OpenVAS
added 2005/11/03 12:0 a.m.57 views

Anti-Scanner Defenses (HTTP)

It seems that the remote web server rejects HTTP requests from the Scanner. It is probably protected by a reverse proxy, WAF or IDS/IPS. SPDX-FileCopyrightText: 2005 Michel Arboi SPDX-FileCopyrightText: New / improved detection code since 2018 Greenbone AG Some text descriptions might be excerpte...

7.1AI score
SaveExploits0
OpenVAS
OpenVAS
added 2005/11/03 12:0 a.m.222 views

Basit CMS 1.0 XSS and SQLi Vulnerabilities - Active Check

Basit CMS is prone to a cross-site scripting XSS and a SQL injection SQLi vulnerability SPDX-FileCopyrightText: 2003 k-otik.com Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if...

6.5AI score
SaveExploits0References1
OpenVAS
OpenVAS
added 2005/11/03 12:0 a.m.18 views

Horde Information Disclosure Vulnerability (Nov 2005) - Active Check

Horde is prone to an information disclosure vulnerability. SPDX-FileCopyrightText: 2004 Sverre H. Huseby Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

6.9AI score
SaveExploits0
OpenVAS
OpenVAS
added 2005/11/03 12:0 a.m.29 views

Roxen counter module

The Roxen Challenger webserver is running and the counter module is installed. Requesting large counter GIFs eats up CPU-time on the server. If the server does not support threads this will prevent the server from serving other clients. SPDX-FileCopyrightText: 2000 Hendrik Scholz Some text...

7.3AI score
SaveExploits0
Rows per page
Query Builder