Lucene search
+L

5215 matches found

NVD
NVD
•added 2002/10/11 4:00 a.m.•30 views

CVE-2002-1151

The cross-site scripting protection for Konqueror in KDE 2.2.2 and 3.0 through 3.0.3 does not properly initialize the domains on sub-frames and sub-iframes, which can allow remote attackers to execute script and steal cookies from subframes that are in other domains...

7.5CVSS6.2AI score0.03586EPSS
SaveExploits0References11
CERT
CERT
•added 2002/09/16 12:00 a.m.•53 views

Microsoft Internet Explorer contains cross-site scripting vulnerabilities in local HTML resources

Overview Microsoft Internet Explorer IE includes several local HTML resources that contain cross-site scripting vulnerabilities. These resources use the dialogArguments property of dialog frames insecurely, allowing an attacker to execute arbitrary script in the Local Machine Zone. Description...

7.6AI score
SaveExploits0References26
securityvulns
securityvulns
•added 2002/09/11 12:00 a.m.•62 views

Internet explorer and Konquerror frames crossite scripting

For sites with frame it's possible to execute script by spoofing location of one of frames...

2.2AI score
SaveExploits0References2Affected Software2
Exploit DB
Exploit DB
•added 2002/05/12 12:00 a.m.•24 views

Clicky Web Pseudo-frames 1.0 - Remote File Inclusion

source: https://www.securityfocus.com/bid/4756/info Pseudo-frames is an application written in PHP and is maintained by Clicky Web. Pseudo-frames permit remote file including. As a result, a remote attacker may include an arbitrary file located on a remote host. If this file is a PHP script, it...

5.8AI score
SaveExploits0
CVE
CVE
•added 2002/03/09 5:00 a.m.•63 views

CVE-1999-0801

CVE-1999-0801 affects BMC Patrol. The issue allows remote attackers to gain access to a Patrol agent by spoofing frames, as described in multiple contributor records. The connected documents confirm the vulnerability’s existence and describe the impact as unauthorized agent access via frame spoof...

10CVSS7.3AI score0.0216EPSS
SaveExploits0References2Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2002/03/09 12:00 a.m.•4 views

CVE-1999-0801: Undefined Security Weakness

BMC Patrol allows remote attackers to gain access to an agent by spoofing frames...

10CVSS5.8AI score0.0216EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2001/09/12 12:00 a.m.•4 views

CVE-1999-1129: Undefined Security Weakness

Cisco Catalyst 2900 Virtual LAN VLAN switches allow remote attackers to inject 802.1q frames into another VLAN by forging the VLAN identifier in the trunking tag...

7.5CVSS5.9AI score0.01588EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2000/02/04 12:00 a.m.•7 views

CVE-1999-0827: Undefined Security Weakness

By default, Internet Explorer 5.0 and other versions enables the "Navigate sub-frames across different domains" option, which allows frame spoofing...

2.6CVSS5.7AI score0.04775EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 1999/11/01 12:00 a.m.•14 views

PT-1999-1381 · Microsoft · Internet Explorer

Name of the Vulnerable Software and Affected Versions: Internet Explorer versions 5.0 Description: The issue allows frame spoofing due to the enabled "Navigate sub-frames across different domains" option by default. Recommendations: For Internet Explorer version 5.0, disable the "Navigate...

2.6CVSS6.5AI score0.04775EPSS
SaveExploits0References2
CVE
CVE
•added 1999/09/29 4:00 a.m.•79 views

CVE-1999-0288

The CVE-1999-0288 issue affects the WINS server in Microsoft Windows NT 4.0 prior to SP4, where remote attackers can terminate the WINS process by sending invalid UDP frames to NETBIOS Name Service port 137. Exploitation is described as a flood of random UDP packets causing a denial of service. T...

5CVSS6.8AI score0.21326EPSS
SaveExploits1References2Affected Software1
Cvelist
Cvelist
•added 1999/09/29 4:00 a.m.•33 views

CVE-1999-0288

The WINS server in Microsoft Windows NT 4.0 before SP4 allows remote attackers to cause a denial of service process termination via invalid UDP frames to port 137 NETBIOS Name Service, as demonstrated via a flood of random packets...

6.5AI score0.21326EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 1999/09/29 12:00 a.m.•4 views

CVE-1999-0288: Undefined Security Weakness

The WINS server in Microsoft Windows NT 4.0 before SP4 allows remote attackers to cause a denial of service process termination via invalid UDP frames to port 137 NETBIOS Name Service, as demonstrated via a flood of random packets...

5CVSS5.8AI score0.21326EPSS
SaveExploits1References1
NVD
NVD
•added 1998/08/01 4:00 a.m.•28 views

CVE-1999-0288

The WINS server in Microsoft Windows NT 4.0 before SP4 allows remote attackers to cause a denial of service process termination via invalid UDP frames to port 137 NETBIOS Name Service, as demonstrated via a flood of random packets...

5CVSS0.21326EPSS
SaveExploits1References2
Friends Of PHP
Friends Of PHP
•added 1970/01/01 12:00 a.m.•44 views

Denial of Service via HTTP/2 CONTINUATION Frames

amphp/http will collect HTTP/2 CONTINUATION frames in an unbounded buffer and will not check the header size limit until it has received the ENDHEADERS flag, resulting in an OOM crash. amphp/http-client and amphp/http-server are indirectly affected if they're used with an unpatched version of...

8.2CVSS7.8AI score0.83366EPSS
SaveExploits1Affected Software1
Positive Technologies
Positive Technologies
•added 1970/01/01 12:00 a.m.•17 views

PT-2007-7486 · Debian +3 · Debian +3

Name of the Vulnerable Software and Affected Versions: Tcl/Tk versions 8.4.13 through 8.4.15 Description: The issue is related to a buffer overflow in the ReadImage function, which can be exploited by remote attackers using multi-frame interlaced GIF files where later frames are smaller than the...

7.8CVSS8AI score0.04855EPSS
SaveExploits3References55
Rows per page
Query Builder