2209 matches found
Oracle Reports Server 6.0.8/9.0.x - Unauthorized Report Execution
source: https://www.securityfocus.com/bid/14316/info Oracle Reports Server is susceptible to an unauthorized report execution vulnerability. By placing a report file in a globally accessible location, users can trigger the execution of the report by issuing an HTTP GET request to the affected...
Oracle Reports Server 6.0.89.0.x - Unauthorized Report Execution
Oracle Reports Server 6.0.89.0.x - Unauthorized Report Execution source: https://www.securityfocus.com/bid/14316/info Oracle Reports Server is susceptible to an unauthorized report execution vulnerability. By placing a report file in a globally accessible location, users can trigger the execution...
Oracle Reports Server 6.0.89.0.x - Arbitrary File Disclosure
Oracle Reports Server 6.0.89.0.x - Arbitrary File Disclosure source: https://www.securityfocus.com/bid/14312/info Oracle Reports Server may allow remote attackers to disclose parts of arbitrary files. Reportedly, the server fails to restrict users from accessing parts of arbitrary files when...
CVE-2004-2271: Undefined Security Weakness
Buffer overflow in MiniShare 1.4.1 and earlier allows remote attackers to execute arbitrary code via a long HTTP GET request...
CVE-2004-2221
CVE-2004-2221 describes a buffer overflow in the SoftCart.exe CGI of Mercantec SoftCart 4.00b. The vulnerability allows remote attackers to execute arbitrary code by sending a long parameter in an HTTP GET request. Public references show Metasploit and Exploit-DB demonstrations of an exploit for ...
CVE-2004-2224
Appfoundry Message Foundry 2.75 .0003 allows remote attackers to cause a denial of service crash via an HTTP GET request that contains MS-DOS device names such as com1...
CVE-2004-2221: Undefined Security Weakness
Buffer overflow in SoftCart.exe in Mercantec SoftCart 4.00b allows remote attackers to execute arbitrary code via a long parameter in an HTTP GET request...
CVE-2004-2224: Undefined Security Weakness
Appfoundry Message Foundry 2.75 .0003 allows remote attackers to cause a denial of service crash via an HTTP GET request that contains MS-DOS device names such as com1...
CVE-2001-1544: Undefined Security Weakness
Directory traversal vulnerability in Macromedia JRun Web Server JWS 2.3.3, 3.0 and 3.1 allows remote attackers to read arbitrary files via a .. dot dot in the HTTP GET request...
CVE-2002-1895
The vulnerability CVE-2002-1895 affects the Tomcat servlet engine in versions 3.3 and 4.0.4 when used with IIS and the ajp1.3 connector. Affected component: servlet engine; issue: remote attackers can trigger a denial of service (crash) by issuing a large sequence of HTTP GET requests for MS-DOS ...
CVE-2002-1907
TelCondex SimpleWebServer 2.06.20817 is reported affected. A remote attacker can cause a denial-of-service (crash) by sending a long HTTP GET request, per CVE-2002-1907. The CVSS data indicates network access, low attack complexity, no authentication, and a partial availability impact (base score...
CVE-2002-1816
Off-by-one buffer overflow in the sockgets function in sockhelp.c for ATPhttpd 0.4b and earlier allows remote attackers to execute arbitrary code via a long HTTP GET request...
CVE-2002-1951
CVE-2002-1951 describes a buffer overflow in GoAhead WebServer 2.1 . An attacker can trigger the overflow by sending a long HTTP GET request with a large number of subdirectories, potentially enabling remote code execution. The available documents do not provide specific details on the vulnerable...
EUVD-2002-1883
Buffer overflow in the Log function in util.c in GazTek ghttpd 1.4 through 1.4.3 allows remote attackers to execute arbitrary code via a long HTTP GET request...
CVE-2002-1905
CVE-2002-1905 describes a buffer overflow in the Polycom ViaVideo web server (versions 2.2 and 3.0) that can be triggered by a long HTTP GET request, leading to remote denial of service (crash). Affected software: Polycom ViaVideo web server (2.2, 3.0). Root cause: improper handling of long HTTP ...
CVE-2002-1951
Buffer overflow in GoAhead WebServer 2.1 allows remote attackers to execute arbitrary code via a long HTTP GET request with a large number of subdirectories...
CVE-2002-1816
Off-by-one buffer overflow in the sockgets function in sockhelp.c for ATPhttpd 0.4b and earlier allows remote attackers to execute arbitrary code via a long HTTP GET request...
CVE-2002-1828
Savant Webserver 3.1 allows remote attackers to cause a denial of service crash via an HTTP GET request with a negative Content-Length value...
CVE-2002-1965
Cross-site scripting XSS vulnerability in Errors.gsl in Imatix Xitami 2.5b4 and 2.5b5 allows remote attackers to inject arbitrary web script or HTML via the 1 Javascript events, as demonstrated via an onerror event in an IMG SRC tag or 2 User-Agent field in an HTTP GET request...