Lucene search
+L

27 matches found

Japan Vulnerability Notes
Japan Vulnerability Notes
added 2014/03/17 12:00 a.m.34 views

JVN#38227002: Unzipper vulnerable to directory traversal

Unzipper provided by R-Company contains an issue in processing file names, which may result in a directory traversal CWE-22 vulnerability. Impact A remote, unauthenticated attacker may create an arbitrary file or overwrite an existing file in a directory that the application has privileges to...

5.8CVSS6.5AI score0.01496EPSS
SaveExploits1
Japan Vulnerability Notes
Japan Vulnerability Notes
added 2014/01/24 12:00 a.m.36 views

JVN#49384502: SimZip (Simple Zip Viewer) vulnerable to directory traversal

SimZip Simple Zip Viewer provided by Gapless Player contains an issue in processing file names, which may result in a directory traversal CWE-22 vulnerability. Impact A remote, unauthenticated attacker may create an arbitrary file or overwrite an existing file in a directory that the application...

4.3CVSS6.5AI score0.01505EPSS
SaveExploits0
RedHat Linux
RedHat Linux
added 2009/01/05 7:08 a.m.18 views

Issue with core dump owner

The docoredump function in fs/exec.c in Linux kernel 2.4.x and 2.6.x up to 2.6.24-rc3, and possibly other versions, does not change the UID of a core dump file if it exists before a root process creates a core dump in the same location, which might allow local users to obtain sensitive informatio...

2.1CVSS5.7AI score0.00425EPSS
SaveExploits2References4
RedHat Linux
RedHat Linux
added 2008/01/31 6:23 p.m.17 views

Issue with core dump owner

The docoredump function in fs/exec.c in Linux kernel 2.4.x and 2.6.x up to 2.6.24-rc3, and possibly other versions, does not change the UID of a core dump file if it exists before a root process creates a core dump in the same location, which might allow local users to obtain sensitive informatio...

2.1CVSS5.7AI score0.00425EPSS
SaveExploits2References4
NVD
NVD
added 2006/07/18 3:46 p.m.20 views

CVE-2006-3616

Multiple cross-site scripting XSS vulnerabilities in Carbonize Lazarus Guestbook 1.6 and earlier allow remote attackers to inject arbitrary web script or HTML via 1 the show parameter in codes-english.php and 2 the img parameter in picture.php, after the name of an existing file...

4.3CVSS5.8AI score0.02479EPSS
SaveExploits3References9
Cvelist
Cvelist
added 2006/07/14 9:00 p.m.22 views

CVE-2006-3616

Multiple cross-site scripting XSS vulnerabilities in Carbonize Lazarus Guestbook 1.6 and earlier allow remote attackers to inject arbitrary web script or HTML via 1 the show parameter in codes-english.php and 2 the img parameter in picture.php, after the name of an existing file...

5.8AI score0.02479EPSS
SaveExploits3References9
myhack58
myhack58
added 2005/10/29 12:00 a.m.39 views

Super dove gray vip2005 detector detection principle of a simple analysis-vulnerability warning-the black bar safety net

The Preface of the new gray pigeons always give people everywhere the feeling, own it worked in the friend of the host met several times,each time can only be manually determined and clear. Looking at this detector for a little test. The effect is very good, it creates a want to know how she...

0.2AI score
SaveExploits0
Rows per page
Query Builder