CVE-2015-3203: Undefined Security Weakness

Unrestricted file upload vulnerability in h5ai before 0.25.0 allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in the directory specified by the href parameter...

PT-2015-6094

Name of the Vulnerable Software and Affected Versions h5ai versions prior to 0.25.0 Description The issue allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in the directory specified by the href...

DEBIAN-CVE-2012-0908

Cross-site scripting XSS vulnerability in logout.php in SimpleSAMLphp 1.8.1 and possibly other versions before 1.8.2 allows remote attackers to inject arbitrary web script or HTML via the linkhref parameter...

KDE Konqueror DoS

Memory exhaustion on oversized SRC and HREF parameters...

CVE-2005-4567

Multiple cross-site scripting XSS vulnerabilities in FTGate Technology formerly known as Floosietek FTGate 4.4 Build 4.4.000 Oct 26 2005 allow remote attackers to inject arbitrary web script or HTML by sending 1 the href parameter to index.fts, or the param1 parameter to 2 /domains/index.fts, 3...

CVE-2001-0198

Buffer overflow in QuickTime Player plugin 4.1.2 Japanese allows remote attackers to execute arbitrary commands via a long HREF parameter in an EMBED tag...

CVE-2001-0198

The CVE-2001-0198 issue affects the QuickTime Player plugin 4.1.2 (Japanese). The root cause is a buffer overflow caused by a long HREF parameter in an EMBED tag, allowing remote attackers to execute arbitrary commands. Public references describe a remote buffer overflow exploit via a crafted HTM...

CVE-2001-0198: Undefined Security Weakness

Buffer overflow in QuickTime Player plugin 4.1.2 Japanese allows remote attackers to execute arbitrary commands via a long HREF parameter in an EMBED tag...