Lucene search
+L

168 matches found

CNVD
CNVD
added 2018/03/14 12:00 a.m.27 views

Adobe Dreamweaver Arbitrary Code Execution Vulnerability

Adobe Dreamweaver, or "DW" for short, is a WYSIWYG web code editor that combines web authoring and web site management, using a WYSIWYG interface with HTML an application of the Standard Generalized Markup Language editing. Adobe Dreamweaver makes it easy to create, code, and manage dynamic Web...

10CVSS7.8AI score0.12863EPSS
SaveExploits0References1
CNVD
CNVD
added 2016/08/31 12:00 a.m.4 views

OwnCloud WebDAV 'COPY' Security Bypass Vulnerability

OwnCloud is a free and open source personal cloud storage solution from German company OwnCloud. The solution offers file management, music storage, calendars and more. A security bypass vulnerability exists in OwnCloud WebDAV 'COPY', which allows attackers to bypass security restrictions and...

6.8AI score
SaveExploits0References1
Prion
Prion
added 2016/08/05 3:59 p.m.32 views

Sql injection

SQL injection vulnerability in the getStringParameterSQL method in main/java/org/dashbuilder/dataprovider/sql/dialect/DefaultDialect.java in Dashbuilder before 0.6.0.Beta1 allows remote attackers to execute arbitrary SQL commands via a data set lookup filter in the 1 Data Set Authoring or 2...

7.5CVSS8.9AI score0.03653EPSS
SaveExploits0References6Affected Software3
RedhatCVE
RedhatCVE
added 2016/07/14 8:59 p.m.30 views

CVE-2016-4999

A security flaw was found in the way Dashbuilder performed SQL datasets lookup requests in the Data Set Authoring UI or the Displayer editor UI. A remote attacker could use this flaw to conduct SQL injection attacks via specially-crafted string filter parameter...

9.8CVSS2.7AI score0.03653EPSS
SaveExploits0References1
RedHat Linux
RedHat Linux
added 2016/07/14 5:54 p.m.13 views

Dashbuilder: SQL Injection on data set lookup filters

A security flaw was found in the way Dashbuilder performed SQL datasets lookup requests in the Data Set Authoring UI or the Displayer editor UI. A remote attacker could use this flaw to conduct SQL injection attacks via specially-crafted string filter parameter...

9.8CVSS5.8AI score0.03653EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
added 2016/07/14 5:54 p.m.9 views

Dashbuilder: SQL Injection on data set lookup filters

A security flaw was found in the way Dashbuilder performed SQL datasets lookup requests in the Data Set Authoring UI or the Displayer editor UI. A remote attacker could use this flaw to conduct SQL injection attacks via specially-crafted string filter parameter...

9.8CVSS5.8AI score0.03653EPSS
SaveExploits0References4
NVD
NVD
added 2016/02/29 11:59 a.m.32 views

CVE-2015-7455

IBM WebSphere Portal 7.x through 7.0.0.2 CF29, 8.0.x before 8.0.0.1 CF20, and 8.5.x before 8.5.0.0 CF09 uses weak permissions for content items, which allows remote authenticated users to make modifications via the authoring UI...

4CVSS4.7AI score0.00859EPSS
SaveExploits0References2
Prion
Prion
added 2016/02/29 11:59 a.m.24 views

Code injection

IBM WebSphere Portal 7.x through 7.0.0.2 CF29, 8.0.x before 8.0.0.1 CF20, and 8.5.x before 8.5.0.0 CF09 uses weak permissions for content items, which allows remote authenticated users to make modifications via the authoring UI...

4CVSS6.6AI score0.00859EPSS
SaveExploits0References2Affected Software1
CVE
CVE
added 2016/02/29 11:00 a.m.60 views

CVE-2015-7455

CVE-2015-7455 affects IBM WebSphere Portal versions 7.x through 7.0.0.2 CF29, 8.0.x before 8.0.0.1 CF20, and 8.5.x before 8.5.0.0 CF09. The vulnerability is described as weak permissions on content items, enabling remote authenticated users to modify content via the authoring UI. Connected source...

4CVSS3.8AI score0.00859EPSS
SaveExploits0References2Affected Software1
OpenVAS
OpenVAS
added 2016/02/10 12:00 a.m.59 views

Microsoft Windows WebDAV Elevation Of Privilege Vulnerability (3136041)

This host is missing an important security update according to Microsoft Bulletin MS16-016 SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

7.8CVSS7.4AI score0.2425EPSS
SaveExploits12References3
Check Point Advisories
Check Point Advisories
added 2014/12/28 12:00 a.m.19 views

Microsoft Windows WebDav Mini-Redirector Heap Buffer Overflow (MS08-007) - Ver2 (CVE-2008-0080)

Web Distributed Authoring and Versioning WebDAV is a set of extensions for HTTP that allows allow clients to publish, lock, and manage resources on the Web. . The vulnerability is due to an error in the Microsoft Windows WebDAV Mini-Redirector that fails to properly handle malformed WebDAV...

10CVSS6.2AI score0.40569EPSS
SaveExploits1
seebug.org
seebug.org
added 2014/07/01 12:00 a.m.28 views

Portable AVS DVD Authoring 1.3.3.51 - Local Crash PoC

No description provided by source. C:\perl\bin Exploit Title: Portable AVS DVD Authoring Date: 2010/4pr/05 Author: R3d-D3v!L Version: v1.3.3.51 Tested on: windows XP sp3 Coded by x coder : my $file= crash.mp3; my $boom=...

7.1AI score
SaveExploits0
OSV
OSV
added 2014/03/18 5:18 a.m.7 views

DEBIAN-CVE-2013-6438

The davxmlgetcdata function in main/util.c in the moddav module in the Apache HTTP Server before 2.4.8 does not properly remove whitespace characters from CDATA sections, which allows remote attackers to cause a denial of service daemon crash via a crafted DAV WRITE request...

5CVSS8.8AI score0.26831EPSS
SaveExploits2References1
Tenable Nessus
Tenable Nessus
added 2013/05/04 12:00 a.m.16 views

Adobe RoboHelp Installed

Adobe RoboHelp, used to author and publish HTML content, is installed on the remote host. C Tenable Network Security, Inc. include'compat.inc'; if description scriptid66316; scriptversion"1.12"; scriptsetattributeattribute:"pluginmodificationdate", value:"2023/02/06"; scriptxrefname:"IAVT",...

5.5AI score
SaveExploits0References1
OSV
OSV
added 2013/03/11 4:00 a.m.9 views

UBUNTU-CVE-2013-1832

repository/webdav/lib.php in Moodle 2.x through 2.1.10, 2.2.x before 2.2.8, 2.3.x before 2.3.5, and 2.4.x before 2.4.2 includes the WebDAV password in the configuration form, which allows remote authenticated administrators to obtain sensitive information by configuring an instance...

4CVSS5.8AI score0.01119EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2012/05/17 12:00 a.m.26 views

Adobe Flash Professional for Mac Installed

Adobe Flash Professional for Mac, a multimedia authoring application, is installed on the remote Mac OS X host. TRUSTED...

5.8AI score
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2012/05/17 12:00 a.m.14 views

Adobe Flash Professional Detection

Adobe Flash Professional, a multimedia authoring application, is installed on the remote Windows host. C Tenable Network Security, Inc. include'compat.inc'; if description scriptid59175; scriptversion"1.8"; scriptsetattributeattribute:"pluginmodificationdate", value:"2023/02/01";...

5.5AI score
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2011/11/16 12:00 a.m.58 views

Oracle Database Multiple Vulnerabilities (July 2006 CPU)

The remote Oracle database server is missing the July 2006 Critical Patch Update CPU and therefore is potentially affected by security issues in the following components : - Change Data Capture CDC - Core RDBMS - Data Pump Metadata API - Dictionary - Export - InterMedia - OCI - Oracle ODBC Driver...

10CVSS5.4AI score0.06983EPSS
SaveExploits3References9
OSV
OSV
added 2011/06/06 7:55 p.m.5 views

DEBIAN-CVE-2011-1752

The moddavsvn module for the Apache HTTP Server, as distributed in Apache Subversion before 1.6.17, allows remote attackers to cause a denial of service NULL pointer dereference and daemon crash via a request for a baselined WebDAV resource, as exploited in the wild in May 2011...

5CVSS6.8AI score0.08483EPSS
SaveExploits2References1
exploitpack
exploitpack
added 2010/04/29 12:00 a.m.28 views

Articles Directory - Authentication Bypass

Articles Directory - Authentication Bypass Exploit Title:Authenication Bypass Vulnerability in Articles Directory Version: Web Application vendor :http://www.yourarticlesdirectory.com/ Date: 29 apr,2010 Dork:Powered by Article Directory Author:Sid3^effects Code :...

0.7AI score
SaveExploits0
Rows per page
Query Builder