Lucene search
K

20 matches found

Tenable Nessus
Tenable Nessus
added 2025/08/24 12:0 a.m.2 views

Linux Distros Unpatched Vulnerability : CVE-2007-0510

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Multiple buffer overflows in 1 graphs.c, 2 output.c, and 3 preserve.c in AWFFull 3.7.1 and earlier have unknown impact and attack vectors. NOTE: some of these...

10CVSS6AI score0.01302EPSS
Exploits0References2
OSSF Malicious Packages
OSSF Malicious Packages
added 2024/12/08 10:40 p.m.2 views

Malicious code in awf-styles (npm)

--- -= Per source details. Do not edit below this line.=-...

7AI score
Exploits0
OSV
OSV
added 2024/12/08 10:40 p.m.3 views

MAL-2024-11308 Malicious code in awf-styles (npm)

--- -= Per source details. Do not edit below this line.=-...

7.1AI score
Exploits0
OSSF Malicious Packages
OSSF Malicious Packages
added 2024/12/08 9:58 p.m.2 views

Malicious code in @agilent/awf-wc (npm)

--- -= Per source details. Do not edit below this line.=-...

7AI score
Exploits0
OSSF Malicious Packages
OSSF Malicious Packages
added 2024/12/08 9:58 p.m.2 views

Malicious code in @agilent/awf-styles (npm)

--- -= Per source details. Do not edit below this line.=-...

7AI score
Exploits0
NVD
NVD
added 2023/12/12 8:15 a.m.10 views

CVE-2023-48641

Archer Platform 6.x before 6.14 P1 HF2 6.14.0.1.2 contains an insecure direct object reference vulnerability. An authenticated malicious user in a multi-instance installation could potentially exploit this vulnerability by manipulating application resource references in user requests to bypass...

8.8CVSS0.00009EPSS
Exploits0References1
OSV
OSV
added 2023/12/12 8:15 a.m.1 views

CVE-2023-48641

Archer Platform 6.x before 6.14 P1 HF2 6.14.0.1.2 contains an insecure direct object reference vulnerability. An authenticated malicious user in a multi-instance installation could potentially exploit this vulnerability by manipulating application resource references in user requests to bypass...

8.8CVSS5.8AI score
Exploits0References1
Vulnrichment
Vulnrichment
added 2023/12/12 12:0 a.m.10 views

CVE-2023-48641

Archer Platform 6.x before 6.14 P1 HF2 6.14.0.1.2 contains an insecure direct object reference vulnerability. An authenticated malicious user in a multi-instance installation could potentially exploit this vulnerability by manipulating application resource references in user requests to bypass...

7.5CVSS7.1AI score0.00009EPSS
Exploits0References1
Cvelist
Cvelist
added 2023/12/12 12:0 a.m.13 views

CVE-2023-48641

Archer Platform 6.x before 6.14 P1 HF2 6.14.0.1.2 contains an insecure direct object reference vulnerability. An authenticated malicious user in a multi-instance installation could potentially exploit this vulnerability by manipulating application resource references in user requests to bypass...

7.5CVSS9AI score0.00009EPSS
Exploits0References1
Openbugbounty
Openbugbounty
added 2023/04/04 8:52 a.m.9 views

estudia.awf.poznan.pl Cross Site Scripting vulnerability OBB-3246718

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

5.9AI score
Exploits0
securityvulns
securityvulns
added 2006/06/12 12:0 a.m.39 views

AWF CMS 1.11, Remote command execution

----------------------------------------------------- Advisory id: FSA:011 Author: Federico Fazzi Date: 11/06/2006, 22:30 Sinthesis: AWF CMS 1.11, Remote command execution Type: high Product: http://www.awf-cms.org/ Patch: unavailable ----------------------------------------------------- 1...

0.6AI score
Exploits0
Packet Storm
Packet Storm
added 2006/06/12 12:0 a.m.28 views

f_ac-1.11.txt

----------------------------------------------------- Advisory id: FSA:011 Author: Federico Fazzi Date: 11/06/2006, 22:30 Sinthesis: AWF CMS 1.11, Remote command execution Type: high Product: http://www.awf-cms.org/ Patch: unavailable ----------------------------------------------------- 1...

7.4AI score
Exploits0
exploitpack
exploitpack
added 2006/06/11 12:0 a.m.11 views

AWF CMS 1.11 - spaw_root Remote File Inclusion

AWF CMS 1.11 - spawroot Remote File Inclusion ----------------------------------------------------- Advisory id: FSA:011 Author: Federico Fazzi Date: 11/06/2006, 22:30 Sinthesis: AWF CMS 1.11, Remote command execution Type: high Product: http://www.awf-cms.org/ Patch: unavailable...

7.5AI score
Exploits0
seebug.org
seebug.org
added 2006/06/11 12:0 a.m.24 views

AWF CMS 1.11 (spaw_root) Remote File Include Vulnerability

No description provided by source. ----------------------------------------------------- Advisory id: FSA:011 Author: Federico Fazzi Date: 11/06/2006, 22:30 Sinthesis: AWF CMS 1.11, Remote command execution Type: high Product: http://www.awf-cms.org/ Patch: unavailable...

7.1AI score
Exploits0
0day.today
0day.today
added 2006/06/11 12:0 a.m.46 views

AWF CMS 1.11 (spaw_root) Remote File Include Vulnerability

Exploit for unknown platform in category web applications ========================================================== AWF CMS 1.11 spawroot Remote File Include Vulnerability ========================================================== ----------------------------------------------------- Advisory id...

7.1AI score
Exploits0
Exploit DB
Exploit DB
added 2006/06/11 12:0 a.m.31 views

AWF CMS 1.11 - 'spaw_root' Remote File Inclusion

----------------------------------------------------- Advisory id: FSA:011 Author: Federico Fazzi Date: 11/06/2006, 22:30 Sinthesis: AWF CMS 1.11, Remote command execution Type: high Product: http://www.awf-cms.org/ Patch: unavailable ----------------------------------------------------- 1...

7.4AI score
Exploits0
Cvelist
Cvelist
added 2005/12/20 2:0 a.m.14 views

CVE-2005-4372

Cross-site scripting XSS vulnerability in account.html in Adaptive Website Framework AWF 2.10 and earlier allows remote attackers to inject arbitrary web script or HTML via the page parameter...

5.7AI score0.00427EPSS
Exploits0References5
Cvelist
Cvelist
added 2005/12/20 2:0 a.m.11 views

CVE-2005-4373

Adaptive Website Framework AWF 2.10 and earlier allows remote attackers to obtain the full path of the application via an invalid mode parameter to community.html, which leaks the path in an error message...

6.6AI score0.00346EPSS
Exploits0References3
CVE
CVE
added 2005/12/20 2:0 a.m.32 views

CVE-2005-4373

The CVE concerns Adaptive Website Framework (AWF) ≤ 2.10. The vulnerability arises from an invalid mode parameter to community.html, which causes an error message that leaks the full path of the application. This is a path disclosure affecting confidentiality (partial). The available sources (NVD...

5CVSS7AI score0.00346EPSS
Exploits0References3
CVE
CVE
added 2005/12/20 2:0 a.m.40 views

CVE-2005-4372

The CVE-2005-4372 entry describes a Cross-site scripting (XSS) vulnerability in Adaptive Website Framework (AWF) prior to or including version 2.10, exploitable via the page parameter in account.html. The underlying issue is improper handling of the page value, allowing remote attackers to inject...

4.3CVSS6AI score0.00427EPSS
Exploits0References5Affected Software1
Rows per page
Query Builder