9641 matches found
Apache Httpd < 1.3.29 : Local configuration regular expression overflow
By using a regular expression with more than 9 captures a buffer overflow can occur in modalias or modrewrite. To exploit this an attacker would need to be able to create a carefully crafted configuration file .htaccess or httpd.conf...
Apache Httpd < 2.0.48 : Local configuration regular expression overflow
By using a regular expression with more than 9 captures a buffer overflow can occur in modalias or modrewrite. To exploit this an attacker would need to be able to create a carefully crafted configuration file .htaccess or httpd.conf...
CVE-2002-2175
phpSquidPass before 0.2 uses an incomplete regular expression to find a matching username in its database, which allows remote authenticated attackers to effectively delete other usernames via a short username that matches the end of the targeted username...
CVE-1999-0455
The Expression Evaluator sample application in ColdFusion allows remote attackers to read or delete files on the server via exprcalc.cfm, which does not restrict access to the server properly...
CVE-1999-0477
The CVE-1999-0477 issue affects the ColdFusion Application Server’s Expression Evaluator. A remote attacker can upload files via openfile.cfm due to insufficient access restriction, enabling arbitrary file upload on the server. This is documented across multiple sources (e.g., Red Hat, NVD) with ...
CVE-1999-0477
The Expression Evaluator in the ColdFusion Application Server allows a remote attacker to upload files to the server via openfile.cfm, which does not restrict access to the server properly...
CVE-1999-0477
The Expression Evaluator in the ColdFusion Application Server allows a remote attacker to upload files to the server via openfile.cfm, which does not restrict access to the server properly...
CVE-2020-15146: Remote Code Execution in OptionsParser while using request parameters inside expression language
Impact Request parameters injected inside an expression evaluated by symfony/expression-language package haven't been sanitized properly. This allows the attacker to access any public service by manipulating that request parameter, allowing for Remote Code Execution. The vulnerable versions...
Expression Design 3
Category for checking whether Expression Design 3 is installed...
Expression Design 4
Category for checking whether Expression Design V4 is installed...
Expression Design V2 zh-Hans
Detectoid checking whether Expression Design V2 zh-Hans is installed...
Expression Design V3 zh-Hans
Detectoid checking whether Expression Design V3 zh-Hans is installed...
Expression Design V1 RTM
Detectoid checking whether Expression Design V1 RTM is installed...
Expression Design V3 FR
Detectoid checking whether Expression Design V3 FR is installed...
Expression Design V4 FR
Detectoid checking whether Expression Design V4 FR is installed...
Expression Design V4 EN
Detectoid checking whether Expression Design V4 EN is installed...
Expression Web V4 zh-Hans
Detectoid checking whether Expression Web V4 zh-Hans is installed...
Expression Web 4 Service Pack 1 (KB2519900)
Microsoft Expression Web 4 Service Pack 1 contains significant fixes and improvements. It includes HTML 5 and CSS 3 support for Web and authentication forms support for SuperPreview in addition to bug fixes and other enhancements...
Expression Web 3 Service Pack 1 (KB976594)
Microsoft Expression Web 3 Service Pack 1 KB976594 contains significant fixes and improvements in publishing, SuperPreview, file management, extensibility, and other areas of the program...
Expression Media 2 SP2
Expression Media SP2 provides the latest updates to Microsoft Expression Media. Some fixes that are included with this service pack may have been previously released as separate updates. This service pack combines them into one update...