Lucene search
+L

12684 matches found

Zero Day Initiative
Zero Day Initiative
•added 2011/12/13 12:00 a.m.•43 views

HP OpenView NNM nnmRptConfig.exe nameParams Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of OpenView Network Node Manager. Authentication is not required to exploit this vulnerability. The specific flaw exists within nnmRotConfig.exe CGI program. When processing crafted nameParams...

10CVSS5.3AI score0.12003EPSS
SaveExploits0References1
securityvulns
securityvulns
•added 2011/12/12 12:00 a.m.•138 views

Web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc...

6.4CVSS1.6AI score0.02209EPSS
SaveExploits0References8Affected Software5
OpenVAS
OpenVAS
•added 2011/12/12 12:00 a.m.•43 views

CentOS Update for perl CESA-2011:1797 centos4 i386

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

7.5CVSS8AI score0.13054EPSS
SaveExploits1References2
osv_cve
osv_cve
•added 2011/12/10 5:55 p.m.•29 views

CVE-2011-4357

Format string vulnerability in the pcgierror function in python/neocgi.c in the Python CGI Kit neocgi module for Clearsilver 0.10.5 and earlier allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via format string specifiers that are not properly handled...

7.6AI score
SaveExploits0References7
osv_debian
osv_debian
•added 2011/12/10 5:55 p.m.•18 views

DEBIAN-CVE-2011-4357

Format string vulnerability in the pcgierror function in python/neocgi.c in the Python CGI Kit neocgi module for Clearsilver 0.10.5 and earlier allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via format string specifiers that are not properly handled...

7.5CVSS7.8AI score0.03017EPSS
SaveExploits0References1
Prion
Prion
•added 2011/12/10 5:55 p.m.•17 views

Format string

Format string vulnerability in the pcgierror function in python/neocgi.c in the Python CGI Kit neocgi module for Clearsilver 0.10.5 and earlier allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via format string specifiers that are not properly handled...

7.5CVSS8.2AI score0.03017EPSS
SaveExploits0References7Affected Software1
UbuntuCve
UbuntuCve
•added 2011/12/10 5:55 p.m.•33 views

CVE-2011-4357

Format string vulnerability in the pcgierror function in python/neocgi.c in the Python CGI Kit neocgi module for Clearsilver 0.10.5 and earlier allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via format string specifiers that are not properly handled...

7.5CVSS6.1AI score0.03017EPSS
SaveExploits0References1
Mend
Mend
•added 2011/12/10 5:00 p.m.•7 views

CVE-2011-4357

Format string vulnerability in the pcgierror function in python/neocgi.c in the Python CGI Kit neocgi module for Clearsilver 0.10.5 and earlier allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via format string specifiers that are not properly handled...

7.5CVSS0.03017EPSS
SaveExploits0References7
CVE
CVE
•added 2011/12/10 5:00 p.m.•85 views

CVE-2011-4357

CVE-2011-4357 describes a format string vulnerability in the p_cgi_error function of the Clearsilver neo_cgi module (Python CGI Kit) affecting Clearsilver 0.10.5 and earlier. This allows remote attackers to crash the process and potentially execute arbitrary code via unhandled CGI error message f...

7.5CVSS7.7AI score0.03017EPSS
SaveExploits0References7Affected Software1
Cvelist
Cvelist
•added 2011/12/10 5:00 p.m.•40 views

CVE-2011-4357

Format string vulnerability in the pcgierror function in python/neocgi.c in the Python CGI Kit neocgi module for Clearsilver 0.10.5 and earlier allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via format string specifiers that are not properly handled...

7.5AI score0.03017EPSS
SaveExploits0References7
Debian CVE
Debian CVE
•added 2011/12/10 5:00 p.m.•47 views

CVE-2011-4357

Format string vulnerability in the pcgierror function in python/neocgi.c in the Python CGI Kit neocgi module for Clearsilver 0.10.5 and earlier allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via format string specifiers that are not properly handled...

7.5CVSS7.6AI score0.03017EPSS
SaveExploits0
Positive Technologies
Positive Technologies
•added 2011/12/10 12:00 a.m.•7 views

PT-2011-4941

Name of the Vulnerable Software and Affected Versions Clearsilver versions 0.10.5 and earlier Description The issue is related to a format string vulnerability in the p cgi error function. This vulnerability can be exploited by remote attackers who send format string specifiers that are not...

7.5CVSS0.03017EPSS
SaveExploits0References11
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2011/12/10 12:00 a.m.•9 views

CVE-2011-4357: Use of Externally-Controlled Format String

Format string vulnerability in the pcgierror function in python/neocgi.c in the Python CGI Kit neocgi module for Clearsilver 0.10.5 and earlier allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via format string specifiers that are not properly handled...

7.5CVSS6.5AI score0.03017EPSS
SaveExploits0References2
Cent OS
Cent OS
•added 2011/12/09 8:14 a.m.•127 views

perl security update

CentOS Errata and Security Advisory CESA-2011:1797 Updated perl packages that fix multiple security issues are now available for Red Hat Enterprise Linux 4 and 5. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System CVSS...

7.5CVSS8.2AI score0.13054EPSS
SaveExploits1References7
Tenable Nessus
Tenable Nessus
•added 2011/12/09 12:00 a.m.•35 views

RHEL 4 / 5 : perl (RHSA-2011:1797)

The remote Redhat Enterprise Linux 4 / 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2011:1797 advisory. - perl-CGI, perl-CGI-Simple: CVE-2010-2761 - hardcoded MIME boundary value for multipart content, CVE-2010-4410 - CRLF injection allowin...

7.5CVSS7.9AI score0.13054EPSS
SaveExploits1References8
OpenVAS
OpenVAS
•added 2011/12/09 12:00 a.m.•66 views

RedHat Update for perl RHSA-2011:1797-01

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

7.5CVSS8AI score0.13054EPSS
SaveExploits1References2
NVD
NVD
•added 2011/12/08 7:55 p.m.•28 views

CVE-2011-4715

Directory traversal vulnerability in cgi-bin/koha/mainpage.pl in Koha 3.4 before 3.4.7 and 3.6 before 3.6.1, and LibLime Koha 4.2 and earlier allows remote attackers to read arbitrary files via a .. dot dot in the KohaOpacLanguage cookie to cgi-bin/opac/opac-main.pl, related to Output.pm...

5CVSS6.7AI score0.08622EPSS
SaveExploits2References9
Prion
Prion
•added 2011/12/08 7:55 p.m.•36 views

Directory traversal

Multiple directory traversal vulnerabilities in namazu.cgi in Namazu before 2.0.16 allow remote attackers to read arbitrary files via a .. dot dot in the 1 lang or 2 result parameter...

5CVSS7.3AI score0.01526EPSS
SaveExploits0References2Affected Software1
Mend
Mend
•added 2011/12/08 7:00 p.m.•8 views

CVE-2011-4715

Directory traversal vulnerability in cgi-bin/koha/mainpage.pl in Koha 3.4 before 3.4.7 and 3.6 before 3.6.1, and LibLime Koha 4.2 and earlier allows remote attackers to read arbitrary files via a .. dot dot in the KohaOpacLanguage cookie to cgi-bin/opac/opac-main.pl, related to Output.pm...

6.9CVSS0.08622EPSS
SaveExploits2References9
CVE
CVE
•added 2011/12/08 7:00 p.m.•77 views

CVE-2011-4715

CVE-2011-4715 affects Koha and LibLime Koha prior to updates: a directory traversal/ local file inclusion flaw in cgi-bin/koha/mainpage.pl related to the KohaOpacLanguage cookie can allow reading arbitrary files via the cookie to cgi-bin/opac/opac-main.pl (Output.pm). Affected versions: Koha 3.4 ...

5CVSS6.9AI score0.08622EPSS
SaveExploits2References9Affected Software1
Rows per page
Query Builder