Lucene search
+L

4487 matches found

Exploit DB
Exploit DB
added 2013/01/01 12:0 a.m.31 views

Linux/x86 - Reverse TCP Shellcode (67 bytes)

Linux/x86 - Reverse TCP Shellcode 67 bytes. Shellcode exploit for Linx86 platform / Tiny Shell Reverse TCP Shellcode - C Language Linux/x86 Written in 2013 by Geyslan G. Bem, Hacking bits http://hackingbits.com [email protected] This source is licensed under the Creative Commons...

7.4AI score
Exploits0
Tenable Nessus
Tenable Nessus
added 2012/12/20 12:0 a.m.49 views

Fedora 16 : tomcat-7.0.33-1.fc16 (2012-20151)

Updated to 7.0.33 - Resolves: rhbz 873620 need chkconfig for update-alternatives - Resolves: rhbz 883676,883691,883704,873707 fix several security issues - Resolves: rhbz 883806 refix logdir ownership - Resolves: rhbz 820119 Remove bundled apache-commons-dbcp Note that Tenable Network Security...

5CVSS6AI score0.12098EPSS
Exploits5References13
RedHat Linux
RedHat Linux
added 2012/12/04 7:24 p.m.4 views

Moderate: Red Hat Security Advisory: CloudForms Commons 1.1 security update

Updated CloudForms Commons packages that fix several security issues are now available. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, are available for each...

7.5CVSS7AI score0.04923EPSS
Exploits14References16
NVD
NVD
added 2012/11/04 10:55 p.m.23 views

CVE-2012-5783

Apache Commons HttpClient 3.x, as used in Amazon Flexible Payments Service FPS merchant Java SDK and other products, does not verify that the server hostname matches a domain name in the subject's Common Name CN or subjectAltName field of the X.509 certificate, which allows man-in-the-middle...

5.8CVSS6.3AI score0.09254EPSS
Exploits0References18
OSV
OSV
added 2012/11/04 10:55 p.m.6 views

DEBIAN-CVE-2012-5783

Apache Commons HttpClient 3.x, as used in Amazon Flexible Payments Service FPS merchant Java SDK and other products, does not verify that the server hostname matches a domain name in the subject's Common Name CN or subjectAltName field of the X.509 certificate, which allows man-in-the-middle...

5.8CVSS9.1AI score0.09254EPSS
Exploits0References1
Prion
Prion
added 2012/11/04 10:55 p.m.26 views

Code injection

Apache Commons HttpClient 3.x, as used in Amazon Flexible Payments Service FPS merchant Java SDK and other products, does not verify that the server hostname matches a domain name in the subject's Common Name CN or subjectAltName field of the X.509 certificate, which allows man-in-the-middle...

5.8CVSS6.6AI score0.09254EPSS
Exploits0References18Affected Software2
CVE
CVE
added 2012/11/04 10:0 p.m.535 views

CVE-2012-5783

Apache Commons HttpClient 3.x (as used in Amazon FPS Java SDK and related products) is affected by CVE-2012-5783: the code does not verify that the server hostname matches the CN/subjectAltName in the X.509 certificate, enabling potential MITM spoofing with arbitrary certificates. AIX advisories,...

5.8CVSS6.8AI score0.09254EPSS
Exploits0References18Affected Software1
Cvelist
Cvelist
added 2012/11/04 10:0 p.m.28 views

CVE-2012-5783

Apache Commons HttpClient 3.x, as used in Amazon Flexible Payments Service FPS merchant Java SDK and other products, does not verify that the server hostname matches a domain name in the subject's Common Name CN or subjectAltName field of the X.509 certificate, which allows man-in-the-middle...

6.7AI score0.09254EPSS
Exploits0References18
Debian CVE
Debian CVE
added 2012/11/04 10:0 p.m.46 views

CVE-2012-5783

Apache Commons HttpClient 3.x, as used in Amazon Flexible Payments Service FPS merchant Java SDK and other products, does not verify that the server hostname matches a domain name in the subject's Common Name CN or subjectAltName field of the X.509 certificate, which allows man-in-the-middle...

5.8CVSS7.3AI score0.09254EPSS
Exploits0
UbuntuCve
UbuntuCve
added 2012/11/04 12:0 a.m.46 views

CVE-2012-5783

Apache Commons HttpClient 3.x, as used in Amazon Flexible Payments Service FPS merchant Java SDK and other products, does not verify that the server hostname matches a domain name in the subject's Common Name CN or subjectAltName field of the X.509 certificate, which allows man-in-the-middle...

5.8CVSS6.9AI score0.09254EPSS
Exploits0References3
NVD
NVD
added 2012/10/31 4:55 p.m.23 views

CVE-2012-4483

The commonsdiscussionviewsdefaultviews function in modules/features/commonsdiscussion/commonsdiscussion.viewsdefault.inc in the Drupal Commons module 6.x-2.x before 6.x-2.8 for Drupal does not properly enforce intended node access restrictions, which might allow remote attackers to obtain sensiti...

5CVSS6.2AI score0.01369EPSS
Exploits0References5
Prion
Prion
added 2012/10/31 4:55 p.m.18 views

Design/Logic Flaw

The commonsdiscussionviewsdefaultviews function in modules/features/commonsdiscussion/commonsdiscussion.viewsdefault.inc in the Drupal Commons module 6.x-2.x before 6.x-2.8 for Drupal does not properly enforce intended node access restrictions, which might allow remote attackers to obtain sensiti...

5CVSS6.8AI score0.01369EPSS
Exploits0References5Affected Software1
CVE
CVE
added 2012/10/31 4:0 p.m.49 views

CVE-2012-4483

CVE-2012-4483 affects the Drupal Commons module (6.x-2.x) before 6.x-2.8. The underling root cause is that the function commons_discussion_views_default_views does not properly enforce node access restrictions, potentially allowing remote attackers to view sensitive information via the recent com...

5CVSS6.4AI score0.01369EPSS
Exploits0References5Affected Software1
Cvelist
Cvelist
added 2012/10/31 4:0 p.m.24 views

CVE-2012-4483

The commonsdiscussionviewsdefaultviews function in modules/features/commonsdiscussion/commonsdiscussion.viewsdefault.inc in the Drupal Commons module 6.x-2.x before 6.x-2.8 for Drupal does not properly enforce intended node access restrictions, which might allow remote attackers to obtain sensiti...

6.2AI score0.01369EPSS
Exploits0References5
OpenVAS
OpenVAS
added 2012/08/30 12:0 a.m.29 views

Fedora Update for apache-commons-compress FEDORA-2012-8428

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

5CVSS6.6AI score0.12608EPSS
Exploits1References2
OpenVAS
OpenVAS
added 2012/08/30 12:0 a.m.20 views

Fedora Update for apache-commons-compress FEDORA-2012-8428

Check for the Version of apache-commons-compress OpenVAS Vulnerability Test Fedora Update for apache-commons-compress FEDORA-2012-8428 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute ...

5CVSS6.6AI score0.12608EPSS
Exploits1References2
CVE
CVE
added 2012/08/26 9:0 p.m.48 views

CVE-2012-2297

The CVE-2012-2297 entry refers to the Creative Commons module for Drupal (6.x-1.x) with XSS vulnerabilities in the 6.x-1.0 to 6.x-1.1 range. The root cause is insufficient filtering of license description text, enabling remote authenticated users with the administer creative commons permission to...

2.1CVSS5.5AI score0.01089EPSS
Exploits0References8Affected Software1
Cvelist
Cvelist
added 2012/08/26 9:0 p.m.26 views

CVE-2012-2297

Multiple cross-site scripting XSS vulnerabilities in the Creative Commons module 6.x-1.x before 6.x-1.1 for Drupal allow remote authenticated users with the administer creative commons permission to inject arbitrary web script or HTML via the 1 creativecommonsusermessage or 2...

5.5AI score0.01089EPSS
Exploits0References8
Drupal
Drupal
added 2012/07/11 12:0 a.m.15 views

SA-CONTRIB-2012-113 - Drupal Commons - Access Bypass

Drupal Commons is a ready-to-use solution for building either internal or external communities. The Drupal Commons feature a central module in the distribution includes a listing of recent comments on discussions. This listing of comments is powered by a view that doesn't fully enforce node acces...

7AI score
Exploits0References9
NVD
NVD
added 2012/06/29 7:55 p.m.26 views

CVE-2012-2098

Algorithmic complexity vulnerability in the sorting algorithms in bzip2 compressing stream BZip2CompressorOutputStream in Apache Commons Compress before 1.4.1 allows remote attackers to cause a denial of service CPU consumption via a file with many repeating inputs...

5CVSS6AI score0.12608EPSS
Exploits1References18
Rows per page
Query Builder