Lucene search
+L

188 matches found

Cvelist
Cvelist
added 2008/03/28 11:00 p.m.41 views

CVE-2008-1544

The setRequestHeader method of the XMLHttpRequest object in Microsoft Internet Explorer 5.01, 6, and 7 does not block dangerous HTTP request headers when certain 8-bit character sequences are appended to a header name, which allows remote attackers to 1 conduct HTTP request splitting and HTTP...

6.2AI score0.26317EPSS
SaveExploits0References12
NVD
NVD
added 2008/02/22 9:44 p.m.18 views

CVE-2008-0895

BEA WebLogic Server and WebLogic Express 6.1 through 10.0 allows remote attackers to bypass authentication for application servlets via crafted request headers...

6.4CVSS7AI score0.02163EPSS
SaveExploits0References4
CVE
CVE
added 2007/04/25 4:00 p.m.126 views

CVE-2007-2242

CVE-2007-2242 corresponds to a flaw in the Linux kernel IPv6 handling where crafted IPv6 RTHDR_TYPE_0 headers can cause a denial of service by enabling network amplification between two routers. The OpenVAS/Nessus-derived data in connected documents confirms the issue and its relation to the Linu...

7.8CVSS6.1AI score0.05035EPSS
SaveExploits0References38Affected Software1
Prion
Prion
added 2007/03/03 8:19 p.m.23 views

Buffer overflow

Buffer overflow in Symantec Mail Security for SMTP 5.0 before Patch 175 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via crafted headers in an e-mail message. NOTE: some information was obtained from third party sources...

9.3CVSS8.4AI score0.06841EPSS
SaveExploits0References8Affected Software1
CVE
CVE
added 2007/03/03 8:00 p.m.84 views

CVE-2007-1252

Symantec Mail Security for SMTP (SMS for SMTP) vulnerable to a buffer overflow when processing malformed email headers in version 5.0 before Patch 175. The issue can crash the affected service and may allow arbitrary code execution. Exploitation, if achieved, would grant an attacker full control ...

9.3CVSS8AI score0.06841EPSS
SaveExploits0References8Affected Software1
OSV
OSV
added 2006/06/02 10:02 p.m.11 views

CVE-2006-2789

Evolution 2.2.x and 2.3.x in GNOME 2.7 and 2.8, when "load images if sender in addressbook" is enabled, allows remote attackers to cause a denial of service persistent crash via a crafted "From" header that triggers an assert error in camel-internet-address.c when a null pointer is used...

6.7AI score
SaveExploits0References4
exploitpack
exploitpack
added 2004/10/10 12:00 a.m.16 views

WordPress 1.2 - HTTP Splitting

WordPress 1.2 - HTTP Splitting This script is C Tenable Network Security ifdescription scriptid15443; scriptbugtraqid11348; scriptversion "$Revision: 1.1 $"; name"english" = "WordPress HTTP Splitting Vulnerability"; scriptnameenglish:name"english"; desc"english" = " The remote host is running...

7.4AI score
SaveExploits0
Positive Technologies
Positive Technologies
added 1970/01/01 12:00 a.m.10 views

PT-2011-5224 · Popt +3 · Popt +3

Name of the Vulnerable Software and Affected Versions: RPM versions 4.4.x through 4.9.x rpm package affected versions not specified rpm-devel affected versions not specified rpm-devel-32bit affected versions not specified rpm-devel-64bit affected versions not specified rpm-32bit affected versions...

10CVSS7.8AI score0.07611EPSS
SaveExploits4References69
Rows per page
Query Builder