Lucene search
+L

6473 matches found

securityvulns
securityvulns
added 2007/06/13 12:00 a.m.35 views

Apple Safari for Windows commands execution

Shell characters problem on protocol handlers invocation. Format string vulnerability...

4.6AI score
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2007/06/12 11:00 p.m.33 views

CVE-2007-3201

Visual truncation vulnerability in Windows Privacy Tray WinPT 1.2.0 allows user-assisted remote attackers to install a key listed under the wrong user ID, and possibly cause the user to encrypt a victim's correspondence with this attacker-supplied key, via a key ID composed of the attacker's user...

6.7AI score0.02712EPSS
SaveExploits2References6
NVD
NVD
added 2007/06/11 10:30 p.m.14 views

CVE-2007-3173

Almnzm allows remote attackers to obtain sensitive information via an activateorder request to index.php with an invalid orderid parameter, probably related to '' and '' characters...

5CVSS6.2AI score0.01205EPSS
SaveExploits0References3
Prion
Prion
added 2007/06/11 10:30 p.m.18 views

Information disclosure

Almnzm allows remote attackers to obtain sensitive information via an activateorder request to index.php with an invalid orderid parameter, probably related to '' and '' characters...

5CVSS6.8AI score0.01205EPSS
SaveExploits0References3
Prion
Prion
added 2007/06/11 10:30 p.m.24 views

Authentication flaw

Microsoft Internet Explorer 7, when prompting for HTTP Basic Authentication for an IDN web site, uses ACE labels for the domain name in the status bar, but uses internationalized labels for this name in the authentication dialog, which might allow remote attackers to perform phishing attacks if t...

5.8CVSS7.4AI score0.09851EPSS
SaveExploits0References6Affected Software1
securityvulns
securityvulns
added 2007/06/04 12:00 a.m.35 views

F5 Firepass SSL VPN unfiltered shell characters security vulnerabilities

Shell characters problem via username parameter of my.activation.php3 script...

3.7AI score
SaveExploits0References1Affected Software1
UbuntuCve
UbuntuCve
added 2007/06/01 12:30 a.m.31 views

CVE-2007-2869

The form autocomplete feature in Mozilla Firefox 1.5.x before 1.5.0.12, 2.x before 2.0.0.4, and possibly earlier versions, allows remote attackers to cause a denial of service persistent temporary CPU consumption via a large number of characters in a submitted form...

4.3CVSS6AI score0.01798EPSS
SaveExploits0References2
myhack58
myhack58
added 2007/05/17 12:00 a.m.18 views

Experts dissect hacker how to pass the Google attacks-vulnerability warning-the black bar safety net

Google is a powerful search engine, through a predefined command or some special character search, you can query to the incredible results. Use Google to search the Smart Search, you can even enter the part of the remote server to obtain the secret, and search sensitive information, cause...

1.3AI score
SaveExploits0
securityvulns
securityvulns
added 2007/05/16 12:00 a.m.62 views

Samba file server multiple security vulnerabilities

Multiple heap based buffer overflows, invalid SID to uid translation privilege escalation, shell characters problem...

10CVSS3.5AI score0.77305EPSS
SaveExploits40References9Affected Software1
NVD
NVD
added 2007/05/09 12:19 a.m.21 views

CVE-2007-2510

Buffer overflow in the makehttpsoaprequest function in PHP before 5.2.2 has unknown impact and remote attack vectors, possibly related to "/" slash characters...

5.1CVSS7.8AI score0.02303EPSS
SaveExploits0References22
UbuntuCve
UbuntuCve
added 2007/05/09 12:19 a.m.34 views

CVE-2007-2510

Buffer overflow in the makehttpsoaprequest function in PHP before 5.2.2 has unknown impact and remote attack vectors, possibly related to "/" slash characters...

5.1CVSS5.9AI score0.02303EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2007/05/09 12:00 a.m.37 views

CVE-2007-2510

Buffer overflow in the makehttpsoaprequest function in PHP before 5.2.2 has unknown impact and remote attack vectors, possibly related to "/" slash characters...

7.7AI score0.02303EPSS
SaveExploits0References22
RedHat Linux
RedHat Linux
added 2007/05/08 3:45 p.m.14 views

php make_http_soap_request flaw

Buffer overflow in the makehttpsoaprequest function in PHP before 5.2.2 has unknown impact and remote attack vectors, possibly related to "/" slash characters...

5.1CVSS5.9AI score0.02303EPSS
SaveExploits0References4
Cvelist
Cvelist
added 2007/05/03 12:00 a.m.31 views

CVE-2007-2479

Cerulean Studios Trillian Pro before 3.1.5.1 allows remote attackers to obtain potentially sensitive information via long CTCP PING messages that contain UTF-8 characters, which generates a malformed response that is not truncated by a newline, which can cause portions of a server message to be...

5.6AI score0.02536EPSS
SaveExploits0References8
securityvulns
securityvulns
added 2007/04/28 12:00 a.m.78 views

AFFLIB library multiple security vulnerabilities

Shell characters injections, buffer overflows, format string vulnerabilities, race conditions, etc...

10CVSS4.2AI score0.06711EPSS
SaveExploits0References4Affected Software1
securityvulns
securityvulns
added 2007/04/23 12:00 a.m.32 views

Courier-IMAP shell characters problem

Invalid usage of XMAILDIR environment variable controlled by attacker thorugh logon request in the scripts courier-imapd.indirect and courier-pop3d.indirect...

3.4AI score
SaveExploits0References1Affected Software1
NVD
NVD
added 2007/04/19 10:19 a.m.29 views

CVE-2007-2152

Buffer overflow in the On-Access Scanner in McAfee VirusScan Enterprise before 8.0i Patch 12 allows user-assisted remote attackers to execute arbitrary code via a long filename containing multi-byte Unicode characters...

7.9CVSS7.8AI score0.02605EPSS
SaveExploits0References8
Prion
Prion
added 2007/04/19 10:19 a.m.24 views

Buffer overflow

Buffer overflow in the On-Access Scanner in McAfee VirusScan Enterprise before 8.0i Patch 12 allows user-assisted remote attackers to execute arbitrary code via a long filename containing multi-byte Unicode characters...

7.9CVSS8.5AI score0.02605EPSS
SaveExploits0References8Affected Software1
Cvelist
Cvelist
added 2007/04/19 10:00 a.m.35 views

CVE-2007-2152

Buffer overflow in the On-Access Scanner in McAfee VirusScan Enterprise before 8.0i Patch 12 allows user-assisted remote attackers to execute arbitrary code via a long filename containing multi-byte Unicode characters...

7.8AI score0.02605EPSS
SaveExploits0References8
Tenable Nessus
Tenable Nessus
added 2007/04/19 12:00 a.m.24 views

GLSA-200704-08 : DokuWiki: XSS vulnerability

The remote host is affected by the vulnerability described in GLSA-200704-08 DokuWiki: XSS vulnerability DokuWiki does not sanitize user input to the GET variable 'media' in the fetch.php file. Impact : An attacker could entice a user to click a specially crafted link and inject CRLF characters...

4.3CVSS5.9AI score0.01363EPSS
SaveExploits0References2
Rows per page
Query Builder