Lucene search
+L

104 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2006/04/26 12:00 a.m.•7 views

CVE-2006-2057: Improper Neutralization of Argument Delimiters in a Command

Argument injection vulnerability in Mozilla Firefox 1.0.6 allows user-assisted remote attackers to modify command line arguments to an invoked mail client via " double quote characters in a mailto: scheme handler, as demonstrated by launching Microsoft Outlook with an arbitrary filename as an...

5CVSS6.1AI score0.0165EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2006/04/26 12:00 a.m.•6 views

CVE-2006-2056: Improper Neutralization of Argument Delimiters in a Command

Argument injection vulnerability in Internet Explorer 6 for Windows XP SP2 allows user-assisted remote attackers to modify command line arguments to an invoked mail client via " double quote characters in a mailto: scheme handler, as demonstrated by launching Microsoft Outlook with an arbitrary...

5CVSS6.1AI score0.12903EPSS
SaveExploits0References2
Debian CVE
Debian CVE
•added 2005/10/13 4:00 a.m.•45 views

CVE-2005-2933

Buffer overflow in the mailvalidnetparsework function in mail.c for Washington's IMAP Server UW-IMAP before imap-2004g allows remote attackers to execute arbitrary code via a mailbox name containing a single double-quote " character without a closing quote, which causes bytes after the double-quo...

7.5CVSS7.7AI score0.08464EPSS
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2004/01/14 12:00 a.m.•5 views

CVE-2004-0046: Undefined Security Weakness

Cross-site scripting XSS vulnerability in SnapStream PVS LITE allows remote attackers to inject arbitrary web script or HTML via a GET request containing a terminating '"' double quote character...

4.3CVSS5.9AI score0.01929EPSS
SaveExploits2References1
Rows per page
Query Builder