Lucene search
K

8 matches found

Tenable Nessus
Tenable Nessus
added 2025/08/24 12:0 a.m.2 views

Linux Distros Unpatched Vulnerability : CVE-2016-4561

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Cross-site scripting XSS vulnerability in the cgierror function in CGI.pm in ikiwiki before 3.20160506 might allow remote attackers to inject arbitrary web scri...

6.1CVSS6.9AI score0.00296EPSS
Exploits0References2
OSV
OSV
added 2021/12/23 8:15 p.m.1 views

DEBIAN-CVE-2021-44543

An XSS vulnerability was found in Privoxy which was fixed in cgierrornotemplate by encode the template name when Privoxy is configured to servce the user-manual itself...

6.1CVSS5.9AI score0.00308EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2021/12/13 12:0 a.m.1 views

PT-2021-24130 · Privoxy +4 · Privoxy +4

Name of the Vulnerable Software and Affected Versions: Privoxy affected versions not specified Description: A cross-site scripting XSS issue was discovered in Privoxy. The problem was addressed by encoding the template name in the cgi error no template function when Privoxy is set to serve the us...

7.8CVSS7.1AI score0.02806EPSS
Exploits0References61
seebug.org
seebug.org
added 2014/07/01 12:0 a.m.16 views

Gossamer Threads DBMan 2.0.4 DBMan Information Leakage Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/1178/info Requesting an invalid database file from a web server implementing Gossamer Threads DBMan scripts will return a CGI error message containing environmental variables to a remote user without any authorization. Th...

7.1AI score
Exploits0
UbuntuCve
UbuntuCve
added 2011/12/10 5:55 p.m.21 views

CVE-2011-4357

Format string vulnerability in the pcgierror function in python/neocgi.c in the Python CGI Kit neocgi module for Clearsilver 0.10.5 and earlier allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via format string specifiers that are not properly handled...

7.5CVSS6.1AI score0.02176EPSS
Exploits0References1
Debian CVE
Debian CVE
added 2005/03/13 5:0 a.m.25 views

CVE-2002-1592

The aplogrerror function in Apache 2.0 through 2.035, when a CGI application encounters an error, sends error messages to the client that include the full path for the server, which allows remote attackers to obtain sensitive information...

5CVSS6.2AI score0.05522EPSS
Exploits0
Exploit DB
Exploit DB
added 2000/05/05 12:0 a.m.25 views

Gossamer Threads DBMan 2.0.4 - DBMan Information Leakage

source: https://www.securityfocus.com/bid/1178/info Requesting an invalid database file from a web server implementing Gossamer Threads DBMan scripts will return a CGI error message containing environmental variables to a remote user without any authorization. The parameters displayed include the...

7.4AI score
Exploits0
exploitpack
exploitpack
added 2000/05/05 12:0 a.m.11 views

Gossamer Threads DBMan 2.0.4 - DBMan Information Leakage

Gossamer Threads DBMan 2.0.4 - DBMan Information Leakage source: https://www.securityfocus.com/bid/1178/info Requesting an invalid database file from a web server implementing Gossamer Threads DBMan scripts will return a CGI error message containing environmental variables to a remote user withou...

7.3AI score
Exploits0
Rows per page
Query Builder