Lucene search
+L

3478 matches found

Cvelist
Cvelist
added 2005/05/10 4:0 a.m.17 views

CVE-2004-1784

Buffer overflow in the web server of Webcam Watchdog 3.63 allows remote attackers to execute arbitrary code via a long HTTP GET request...

7.9AI score0.06548EPSS
SaveExploits2References7
CVE
CVE
added 2005/05/10 4:0 a.m.43 views

CVE-2003-1137

CVE-2003-1137 affects sh-httpd versions 0.3 and 0.4. The issue allows remote attackers to read files or execute arbitrary CGI scripts via a GET request containing an asterisk (*) wildcard character, indicating improper handling of wildcards in input. The provided documents do not specify a fix or...

5CVSS7.6AI score0.06757EPSS
SaveExploits2References4Affected Software1
Cvelist
Cvelist
added 2005/05/10 4:0 a.m.28 views

CVE-2004-1991

Directory traversal vulnerability in Aldo's Web Server aweb 1.5 allows remote attackers to view arbitrary files via a .. dot dot in an HTTP GET request...

6.7AI score0.02934EPSS
SaveExploits1References6
exploitpack
exploitpack
added 2005/05/04 12:0 a.m.14 views

Ashleys Web Server - Denial of Service

Ashleys Web Server - Denial of Service include include include pragma commentlib, "ws232.lib" char doscore = "GET HTTP/1.0 " "\x3f\x3f\x3f\x3f\x3f\x2e\x48\x54\x4d\x4c\x3f\x74\x65\x73\x74\x76" "\x61\x72\x69\x61\x62\x6c\x65\x3d\x26\x6e\x65\x78\x74\x74\x65\x73"...

0.2AI score
SaveExploits0
Exploit DB
Exploit DB
added 2005/05/04 12:0 a.m.28 views

Ashley's Web Server - Denial of Service

include include include pragma commentlib, "ws232.lib" char doscore = "GET HTTP/1.0 " "\x3f\x3f\x3f\x3f\x3f\x2e\x48\x54\x4d\x4c\x3f\x74\x65\x73\x74\x76" "\x61\x72\x69\x61\x62\x6c\x65\x3d\x26\x6e\x65\x78\x74\x74\x65\x73" "\x74\x76\x61\x72\x69\x61\x62\x6c\x65\x3d\x67\x69\x66\x20\x48\x54"...

5.8AI score
SaveExploits0
NVD
NVD
added 2005/05/02 4:0 a.m.17 views

CVE-2005-1173

Buffer overflow in PMSoftware Simple Web Server 1.0 allows remote attackers to execute arbitrary code via a long GET request...

7.5CVSS7.9AI score0.09651EPSS
SaveExploits2References1
NVD
NVD
added 2005/05/02 4:0 a.m.17 views

CVE-2005-1230

Directory traversal vulnerability in Yawcam 0.2.5 allows remote attackers to read arbitrary files via ".." dot dot backslash sequences in a GET request...

5CVSS6.7AI score0.01769EPSS
SaveExploits1References4
NVD
NVD
added 2005/05/02 4:0 a.m.16 views

CVE-2005-1243

Directory traversal vulnerability in the third party tool from SafeStone, as used to secure the iSeries AS/400 FTP server, allows remote attackers to access arbitrary files, including those from qsys.lib, via ".." sequences in a GET request...

5CVSS6.8AI score0.01815EPSS
SaveExploits1References3
NVD
NVD
added 2005/05/02 4:0 a.m.24 views

CVE-2005-0275

TFTP in 3Com 3CDaemon 2.0 revision 10 allows remote attackers to cause a denial of service application crash via a GET request containing an MS-DOS device name...

5CVSS6.6AI score0.01227EPSS
SaveExploits0References2
CVE
CVE
added 2005/04/26 4:0 a.m.75 views

CVE-2005-0684

CVE-2005-0684 affects the MySQL MaxDB Webtool/WebTools in MaxDB before version 7.5.00.26. The vulnerability is a stack buffer overflow caused by improper handling of long HTTP GET requests containing a percent sign or long Lock-Token strings in WebDAV handling (WDVHandler_CommonUtils.c), allowing...

10CVSS7.6AI score0.68504EPSS
SaveExploits7References4Affected Software1
Cvelist
Cvelist
added 2005/04/24 4:0 a.m.28 views

CVE-2005-1238

By design, the built-in FTP server for iSeries AS/400 systems does not support a restricted document root, which allows attackers to read or write arbitrary files, including sensitive QSYS databases, via a full pathname in a GET or PUT request...

6.5AI score0.01764EPSS
SaveExploits0References3
CVE
CVE
added 2005/04/24 4:0 a.m.44 views

CVE-2005-1240

The CVE-2005-1240 entry describes a directory traversal vulnerability in Castlehill’s third-party tool used to secure the iSeries AS/400 FTP server. Attackers could access arbitrary files (including from qsys.lib) by crafting GET requests containing ".." sequences. The provided description does n...

7.5CVSS7.2AI score0.01853EPSS
SaveExploits1References3Affected Software1
CVE
CVE
added 2005/04/24 4:0 a.m.48 views

CVE-2005-1244

NetIQ Security Manager / iSeries Security Solutions (NetIQ) are affected by a directory traversal vulnerability in a third‑party tool used to secure the iSeries AS/400 FTP server. The issue allows access to arbitrary files (including qsys.lib) via ".." sequences in GET requests to the /api/ftp en...

7.5CVSS7.2AI score0.01806EPSS
SaveExploits1References5Affected Software1
Cvelist
Cvelist
added 2005/04/24 4:0 a.m.22 views

CVE-2005-1240

Directory traversal vulnerability in the third party tool from Castlehill, as used to secure the iSeries AS/400 FTP server, allows remote attackers to access arbitrary files, including those from qsys.lib, via ".." sequences in a GET request...

6.8AI score0.01853EPSS
SaveExploits1References3
Cvelist
Cvelist
added 2005/04/24 4:0 a.m.20 views

CVE-2005-1243

Directory traversal vulnerability in the third party tool from SafeStone, as used to secure the iSeries AS/400 FTP server, allows remote attackers to access arbitrary files, including those from qsys.lib, via ".." sequences in a GET request...

6.8AI score0.01815EPSS
SaveExploits1References3
zdt
zdt
added 2005/04/24 12:0 a.m.26 views

PMSoftware Simple Web Server (GET Request) Remote BoF Exploit

Exploit for unknown platform in category remote exploits ============================================================= PMSoftware Simple Web Server GET Request Remote BoF Exploit ============================================================= / PMSoftware Simple Web Server Buffer Overflow Exploit 3...

7.1AI score
SaveExploits0
seebug.org
seebug.org
added 2005/04/24 12:0 a.m.20 views

PMSoftware Simple Web Server (GET Request) Remote BoF Exploit

No description provided by source. / PMSoftware Simple Web Server Buffer Overflow Exploit 3 targets cybertronicatgmxdotnet 04/25/2005 / / / / / / / / / / / / / / / / / / / // // / // / / / / // / / // / / / / / / /, /./// // // //// // -- exploit by : cybertronic - cybertronicatgmxdotnet...

7.1AI score
SaveExploits0
CVE
CVE
added 2005/04/22 4:0 a.m.54 views

CVE-2005-1230

Yawcam 0.2.5 is vulnerable to a directory traversal flaw in the web server, allowing remote attackers to read files outside the web root via ..\ sequences in a GET request. Affected: Yawcam web server; root cause: improper handling of path traversal. Impact: potential disclosure of arbitrary file...

5CVSS6.7AI score0.01769EPSS
SaveExploits1References4Affected Software1
CVE
CVE
added 2005/04/21 4:0 a.m.58 views

CVE-2001-1465

CVE-2001-1465 affects SurfControl SuperScout. The issue is in the packet-filtering logic that only filters packets containing both an HTTP GET request and a Host header; an attacker can bypass filtering by fragmenting traffic so that no single packet contains both elements. This is a local-access...

4.6CVSS6.7AI score0.0035EPSS
SaveExploits0References2Affected Software1
CVE
CVE
added 2005/04/21 4:0 a.m.57 views

CVE-2000-1223

CVE-2000-1223 affects Quikstore Shopping Cart: quikstore.cgi is vulnerable to remote command execution via shell metacharacters in the URL portion of an HTTP GET request. The issue enables arbitrary commands to be executed on the server. Connected sources (Red Hat advisory, CVE records, and NVD) ...

7.5CVSS8.1AI score0.02211EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder