Lucene search
+L

2454 matches found

seebug.org
seebug.org
added 2009/11/18 12:0 a.m.14 views

Xerver 4.31 4.32 HTTP Response Splitting

No description provided by source. Xerver 4.31, 4.32 HTTP Response Splitting Discovered: 04-10-08 By: SecureState R&D Team - sasquatch Vendor Notified: 04-11-08 Vendor Response: 04-13-08 New version also vulnerable: 10-07-09 Tested Win32 v4.32 Vendor Notified: 10-07-09 Vendor Response: NONE...

6.7AI score
SaveExploits0
zdt
zdt
added 2009/11/18 12:0 a.m.18 views

Xerver 4.31, 4.32 HTTP Response Splitting

Exploit for unknown platform in category web applications ========================================= Xerver 4.31, 4.32 HTTP Response Splitting ========================================= Xerver 4.31, 4.32 HTTP Response Splitting Discovered: 04-10-08 By: SecureState R&D Team - sasquatch Vendor...

6.7AI score
SaveExploits0
Exploit DB
Exploit DB
added 2009/11/18 12:0 a.m.35 views

Xerver 4.31/4.32 - HTTP Response Splitting

Xerver 4.31, 4.32 HTTP Response Splitting Discovered: 04-10-08 By: SecureState R&D Team - sasquatch Vendor Notified: 04-11-08 Vendor Response: 04-13-08 New version also vulnerable: 10-07-09 Tested Win32 v4.32 Vendor Notified: 10-07-09 Vendor Response: NONE Published: 11-18-09 Proof of Concept:...

5CVSS5.8AI score0.04765EPSS
SaveExploits2
exploitpack
exploitpack
added 2009/11/18 12:0 a.m.9 views

Xerver 4.314.32 - HTTP Response Splitting

Xerver 4.314.32 - HTTP Response Splitting Xerver 4.31, 4.32 HTTP Response Splitting Discovered: 04-10-08 By: SecureState R&D Team - sasquatch Vendor Notified: 04-11-08 Vendor Response: 04-13-08 New version also vulnerable: 10-07-09 Tested Win32 v4.32 Vendor Notified: 10-07-09 Vendor Response: NON...

7.4AI score
SaveExploits0
NVD
NVD
added 2009/11/10 7:30 p.m.30 views

CVE-2009-2820

The web interface in CUPS before 1.4.2, as used on Apple Mac OS X before 10.6.2 and other platforms, does not properly handle 1 HTTP headers and 2 HTML templates, which allows remote attackers to conduct cross-site scripting XSS attacks and HTTP response splitting attacks via vectors related to a...

4.3CVSS6.7AI score0.0578EPSS
SaveExploits6References15
OSV
OSV
added 2009/11/10 7:30 p.m.5 views

CVE-2009-2820

The web interface in CUPS before 1.4.2, as used on Apple Mac OS X before 10.6.2 and other platforms, does not properly handle 1 HTTP headers and 2 HTML templates, which allows remote attackers to conduct cross-site scripting XSS attacks and HTTP response splitting attacks via vectors related to a...

6.6AI score
SaveExploits0References16
Prion
Prion
added 2009/11/10 7:30 p.m.22 views

Cross site scripting

The web interface in CUPS before 1.4.2, as used on Apple Mac OS X before 10.6.2 and other platforms, does not properly handle 1 HTTP headers and 2 HTML templates, which allows remote attackers to conduct cross-site scripting XSS attacks and HTTP response splitting attacks via vectors related to a...

4.3CVSS5.2AI score0.0578EPSS
SaveExploits6References15Affected Software2
CVE
CVE
added 2009/11/10 7:0 p.m.99 views

CVE-2009-2820

CVE-2009-2820 affects CUPS (web interface) prior to 1.4.2 on macOS X

4.3CVSS6.8AI score0.0578EPSS
SaveExploits6References15Affected Software1
Cvelist
Cvelist
added 2009/11/10 7:0 p.m.25 views

CVE-2009-2820

The web interface in CUPS before 1.4.2, as used on Apple Mac OS X before 10.6.2 and other platforms, does not properly handle 1 HTTP headers and 2 HTML templates, which allows remote attackers to conduct cross-site scripting XSS attacks and HTTP response splitting attacks via vectors related to a...

6.8AI score0.0578EPSS
SaveExploits6References15
Debian CVE
Debian CVE
added 2009/11/10 7:0 p.m.41 views

CVE-2009-2820

The web interface in CUPS before 1.4.2, as used on Apple Mac OS X before 10.6.2 and other platforms, does not properly handle 1 HTTP headers and 2 HTML templates, which allows remote attackers to conduct cross-site scripting XSS attacks and HTTP response splitting attacks via vectors related to a...

4.3CVSS6.9AI score0.0578EPSS
SaveExploits6
ThreatPost
ThreatPost
added 2009/11/09 10:22 p.m.8 views

Apple Plugs 58 Holes in Monster Mac OS X Update

Apple has dropped another mega-patch to cover a total of 58 documented vulnerabilities affecting the Mac OS X ecosystem. The majority of the flaws could allow a remote attacker to gain complete control of an unpatched system, meaning that this update carries an “extremely critical rating.” It...

0.8AI score
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2009/08/24 12:0 a.m.38 views

RHEL 3 / 4 / 5 : flash-plugin (RHSA-2007:1126)

An updated Adobe Flash Player package that fixes a security issue is now available for Red Hat Enterprise Linux 3 Extras, 4 Extras, and 5 Supplementary. This update has been rated as having critical security impact by the Red Hat Security Response Team. The flash-plugin package contains a...

9.3CVSS5.8AI score0.30065EPSS
SaveExploits6References18
exploitpack
exploitpack
added 2009/06/15 12:0 a.m.24 views

formmail 1.92 - Multiple Vulnerabilities

formmail 1.92 - Multiple Vulnerabilities FormMail 1.92 Multiple Vulnerabilities Name Multiple Vulnerabilities in FormMail Systems Affected FormMail 1.92 and possibly earlier versions Severity Medium Impact CVSSv2 Medium 4.3/10, vector: AV:N/AC:M/Au:N/C:P/I:N/A:N Vendor...

0.2AI score
SaveExploits0
zdt
zdt
added 2009/06/15 12:0 a.m.26 views

FormMail 1.92 Multiple Remote Vulnerabilities

Exploit for unknown platform in category web applications ============================================= FormMail 1.92 Multiple Remote Vulnerabilities ============================================= FormMail 1.92 Multiple Vulnerabilities Name Multiple Vulnerabilities in FormMail Systems Affected...

7.1AI score
SaveExploits0
OpenVAS
OpenVAS
added 2009/05/28 12:0 a.m.32 views

Cacti Multiple Input Validation Vulnerabilities

Cacti is prone to multiple unspecified input-validation vulnerabilities, including: - Multiple cross-site scripting vulnerabilities - Multiple SQL-injection vulnerabilities - An HTTP response-splitting vulnerability. Attackers may exploit these vulnerabilities to influence or misrepresent how web...

7.5CVSS0.4AI score0.05246EPSS
SaveExploits9References1
OpenVAS
OpenVAS
added 2009/05/28 12:0 a.m.21 views

Cacti < 0.8.7b Multiple Input Validation Vulnerabilities

Cacti is prone to multiple unspecified input-validation vulnerabilities. Copyright C 2009 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is fre...

6.4AI score
SaveExploits0References1
Prion
Prion
added 2009/05/22 8:30 p.m.15 views

Crlf injection

CRLF injection vulnerability in FormMail.pl in Matt Wright FormMail 1.92, and possibly earlier, allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via the redirect parameter...

5CVSS7.5AI score0.01972EPSS
SaveExploits2References4Affected Software1
NVD
NVD
added 2009/05/22 8:30 p.m.15 views

CVE-2009-1777

CRLF injection vulnerability in FormMail.pl in Matt Wright FormMail 1.92, and possibly earlier, allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via the redirect parameter...

5CVSS7AI score0.01972EPSS
SaveExploits2References4
Cvelist
Cvelist
added 2009/05/22 8:0 p.m.21 views

CVE-2009-1777

CRLF injection vulnerability in FormMail.pl in Matt Wright FormMail 1.92, and possibly earlier, allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via the redirect parameter...

7AI score0.01972EPSS
SaveExploits2References4
CVE
CVE
added 2009/05/22 8:0 p.m.51 views

CVE-2009-1777

CVE-2009-1777 : CRLF injection vulnerability in Matt Wright FormMail 1.92 (and possibly earlier) allows remote attackers to inject arbitrary HTTP headers and perform HTTP response splitting via the redirect parameter. The vulnerability arises from insufficient input sanitization in FormMail.pl, e...

5CVSS7.3AI score0.01972EPSS
SaveExploits2References4Affected Software1
Rows per page
Query Builder