Lucene search
+L

563 matches found

OpenVAS
OpenVAS
added 2005/11/03 12:0 a.m.62 views

Brio Unix Directory Traversal

The Brio web application interface has a directory traversal in the component SPDX-FileCopyrightText: 2003 Chris Foster Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only v. 1.00 last upda...

7.3AI score
SaveExploits0
OpenVAS
OpenVAS
added 2005/11/03 12:0 a.m.16 views

AWStats < 6.3 'configdir' Parameter Arbitrary Command Execution Vulnerability - Active Check

AWStats is prone to a command execution vulnerability. SPDX-FileCopyrightText: 2005 David Maciejak Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:awstats:awstats";...

7.5CVSS6.8AI score0.74941EPSS
SaveExploits13References2
OpenVAS
OpenVAS
added 2005/11/03 12:0 a.m.23 views

BasiliX SQL Injection Vulnerability

The remote web server contains PHP scripts that are prone to SQL injection attacks. Description : The remote host appears to be running a BasiliX version 1.1.0 or lower. Such versions are potentially vulnerable to SQL injection attacks depending on the version of PHP installed...

6.4CVSS7.8AI score0.01153EPSS
SaveExploits0References2
OpenVAS
OpenVAS
added 2005/11/03 12:0 a.m.26 views

CWmail.exe Information Disclosure / Privilege Escalation Vulnerability

The CWMail.exe exists on this webserver. Some versions of this file are vulnerable to remote exploit. SPDX-FileCopyrightText: 2003 John Lampe Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

4.6CVSS6.8AI score0.00999EPSS
SaveExploits0References2
OpenVAS
OpenVAS
added 2005/11/03 12:0 a.m.32 views

PHP-Nuke security vulnerability (bb_smilies.php)

The remote host seems to be vulnerable to a security problem in PHP-Nuke bbsmilies.php. The vulnerability is caused by inadequate processing of queries by PHP-Nuke SPDX-FileCopyrightText: 2001 SecuriTeam Some text descriptions might be excerpted from a referenced sources, and are Copyright C by t...

10CVSS6.7AI score0.02557EPSS
SaveExploits1References1
OpenVAS
OpenVAS
added 2005/11/03 12:0 a.m.14 views

Horde Chora < 1.2.2 RCE Vulnerability - Active Check

Horde Chora is prone to a remote code execution RCE vulnerability. SPDX-FileCopyrightText: 2004 George A. Theall Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later CPE =...

8.2AI score
SaveExploits0References4
OpenVAS
OpenVAS
added 2005/11/03 12:0 a.m.76 views

PHP3 Physical Path Disclosure Vulnerability

PHP3 will reveal the physical path of the webroot when asked for a non-existent PHP3 file if it is incorrectly configured. Although printing errors to the output is useful for debugging applications, this feature should not be enabled on production servers. OpenVAS Vulnerability Test $Id:...

7.1AI score
SaveExploits0
OpenVAS
OpenVAS
added 2005/11/03 12:0 a.m.37 views

Apache HTTP Server /server-info Accessible (HTTP)

Requesting the URI /server-info provides a comprehensive overview of the server configuration. SPDX-FileCopyrightText: 2005 StrongHoldNet SPDX-FileCopyrightText: New NASL / detection code since 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyrigh...

7AI score
SaveExploits0References1
OpenVAS
OpenVAS
added 2005/11/03 12:0 a.m.43 views

SilverStream directory listing

SilverStream directory listings are enabled. An attacker may use this problem to gain more knowledge on this server and possibly to get files you would want to hide. Reference : http://online.securityfocus.com/archive/101/144786 OpenVAS Vulnerability Test $Id: silverstreamdirlisting.nasl 8023...

7.5AI score
SaveExploits0
OpenVAS
OpenVAS
added 2005/11/03 12:0 a.m.123 views

Oracle XSQLServlet XSQLConfig.xml File

It is possible to read the contents of the XSQLConfig.xml file which contains sensitive information. OpenVAS Vulnerability Test $Id: oracle9iXSQLServletXSQLConfig.nasl 8023 2017-12-07 08:36:26Z teissa $ Description: Oracle XSQLServlet XSQLConfig.xml File Authors: Matt Moore Copyright: Copyright C...

2.1CVSS9.3AI score0.75176EPSS
SaveExploits0References2
OpenVAS
OpenVAS
added 2005/11/03 12:0 a.m.30 views

PGPMail.pl detection

The 'PGPMail.pl' CGI is installed. Some versions up to v1.31 a least of this CGI do not properly filter user input before using it inside commands. This would allow a cracker to run any command on your server. Note: OpenVAS just checked the presence of this CGI but did not try to exploit the flaw...

7.5CVSS6.6AI score0.01875EPSS
SaveExploits0
OpenVAS
OpenVAS
added 2005/11/03 12:0 a.m.31 views

cgi.rb

The 'cgi.rb' CGI is installed. Some versions is vulnerable to remote denial of service. By sending a specially crafted HTTP POST request, a malicious user can force the remote host to consume a large amount of CPU ressources. Warning : OpenVAS solely relied on the presence of this CGI, it did not...

5CVSS6.3AI score0.01898EPSS
SaveExploits0
OpenVAS
OpenVAS
added 2005/11/03 12:0 a.m.25 views

WebAPP Apage.CGI remote command execution flaw

Due to a lack of user input validation, an attacker can exploit the OpenVAS Vulnerability Test $Id: webappapagecmdexe.nasl 6053 2017-05-01 09:02:51Z teissa $ Description: WebAPP Apage.CGI remote command execution flaw Authors: David Maciejak Copyright: Copyright C 2005 David Maciejak This program...

7.5CVSS0.3AI score0.10642EPSS
SaveExploits3
OpenVAS
OpenVAS
added 2005/11/03 12:0 a.m.20 views

CuteNews index.php XSS

The remote web server contains a PHP script that is prone to cross-site scripting attacks. Description : The version of CuteNews installed on the remote host is vulnerable to a cross-site-scripting XSS attack. An attacker, exploiting this flaw, would need to be able to coerce a user to browse to ...

4.3CVSS6.1AI score0.03589EPSS
SaveExploits2References1
OpenVAS
OpenVAS
added 2005/11/03 12:0 a.m.19 views

DB4Web directory traversal

It is possible to read any file on your system through the DB4Web software. OpenVAS Vulnerability Test $Id: db4webdirtrav.nasl 8023 2017-12-07 08:36:26Z teissa $ Description: DB4Web directory traversal Authors: Michel Arboi Copyright: Copyright C 2002 Michel Arboi This program is free software; y...

5CVSS0.08451EPSS
SaveExploits1
OpenVAS
OpenVAS
added 2005/11/03 12:0 a.m.27 views

SunSolve CD CGI user input validation

Sunsolve CD CGI scripts does not validate user input. Crackers may use them to execute some commands on your system. Note: OpenVAS did not try to perform the attack. OpenVAS Vulnerability Test $Id: sscdinput.nasl 8023 2017-12-07 08:36:26Z teissa $ Description: SunSolve CD CGI user input validatio...

10CVSS1.2AI score0.1187EPSS
SaveExploits1
OpenVAS
OpenVAS
added 2005/11/03 12:0 a.m.36 views

Bugzilla remote arbitrary command execution

The remote Bugzilla bug tracking system, according to its version number, is vulnerable to arbitrary commands execution flaws due to a lack of sanitization of user-supplied data in processbug.cgi OpenVAS Vulnerability Test $Id: bugzillaremoteexec.nasl 8023 2017-12-07 08:36:26Z teissa $ Descriptio...

7.5CVSS0.6AI score0.03132EPSS
SaveExploits1
OpenVAS
OpenVAS
added 2005/11/03 12:0 a.m.49 views

vpasswd.cgi

The 'vpasswd.cgi' CGI is installed. Some versions do not properly check for special characters and allow a cracker to execute any command on your system. Warning : OpenVAS solely relied on the presence of this CGI, it did not determine if you specific version is vulnerable to that problem OpenVAS...

0.9AI score
SaveExploits0
OpenVAS
OpenVAS
added 2005/11/03 12:0 a.m.17 views

Synchrologic User account information disclosure

The remote host seems to be running Synchrologic Email Accelerator Synchrologic is a product which allows remote PDA users to synch with email, calendar, etc. If this server is on an Internet segment as opposed to internal, you may wish to tighten the access to the aggregate.asp page. The server...

7.3AI score
SaveExploits0
OpenVAS
OpenVAS
added 2005/11/03 12:0 a.m.16 views

Remote Code Execution in Knowledge Builder

KnowledgeBuilder is a feature-packed knowledge base solution CGI suite. A vulnerability in this product may allow a remote attacker to execute arbitrary commands on this host. SPDX-FileCopyrightText: 2003 Noam Rathaus Some text descriptions might be excerpted from a referenced sources, and are...

7.6AI score
SaveExploits0
Rows per page
Query Builder