Lucene search
+L

790 matches found

Tenable Nessus
Tenable Nessus
added 2007/05/25 12:00 a.m.15 views

avast! Management Server Detection

The remote service appears to be a broadcast listener for avast! Management Server AMS, which is used by avast! Distributed Network Manager ADNM as well as avast! Managed Clients for remote deployment and management of avast! antivirus within an enterprise. C Tenable Network Security, Inc...

5.5AI score
SaveExploits0References2
CERT
CERT
added 2007/04/17 12:00 a.m.26 views

Microsoft Content Management Server fails to properly process crafted HTTP requests

Overview A vulnerability in the way Microsoft Content Managment Server handles HTTP requests may lead to execution of arbitrary code. Description Microsoft Content Managment Server CMS contains a vulnerability that could be exploited when it attempts to process specially crafted HTTP requests...

10CVSS7.6AI score0.45633EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2007/04/11 12:00 a.m.33 views

MS07-018: Vulnerabilities in Microsoft Content Management Server Could Allow Remote Code Execution (925939)

The remote host contains a version of the Microsoft Content Management Server that is vulnerable to a security flaw that could allow a remote user to execute arbitrary code by sending a specially malformed HTTP request. C Tenable Network Security, Inc. include"compat.inc"; if description...

10CVSS6.1AI score0.45633EPSS
SaveExploits0References3
Prion
Prion
added 2007/04/10 9:19 p.m.19 views

Memory corruption

Microsoft Content Management Server MCMS 2001 SP1 and 2002 SP2 does not properly handle certain characters in a crafted HTTP GET request, which allows remote attackers to execute arbitrary code, aka the "CMS Memory Corruption Vulnerability."...

10CVSS7.5AI score0.45633EPSS
SaveExploits0References10Affected Software1
NVD
NVD
added 2007/04/10 9:19 p.m.20 views

CVE-2007-0938

Microsoft Content Management Server MCMS 2001 SP1 and 2002 SP2 does not properly handle certain characters in a crafted HTTP GET request, which allows remote attackers to execute arbitrary code, aka the "CMS Memory Corruption Vulnerability."...

10CVSS7.2AI score0.45633EPSS
SaveExploits0References10
Prion
Prion
added 2007/04/10 9:19 p.m.17 views

Cross site scripting

Cross-site scripting XSS vulnerability in Microsoft Content Management Server MCMS 2001 SP1 and 2002 SP2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors involving HTML redirection queries, aka "Cross-site Scripting and Spoofing Vulnerability."...

4.3CVSS5.6AI score0.16186EPSS
SaveExploits0References8Affected Software1
CVE
CVE
added 2007/04/10 9:00 p.m.69 views

CVE-2007-0938

CVE-2007-0938 describes a remote code execution vulnerability in Microsoft Content Management Server (MCMS) 2001 SP1 and 2002 SP2, caused by improper handling of certain characters in crafted HTTP requests. The CMS Memory Corruption vulnerability could allow an attacker to take control of an affe...

10CVSS7.1AI score0.45633EPSS
SaveExploits0References10Affected Software1
Cvelist
Cvelist
added 2007/04/10 9:00 p.m.28 views

CVE-2007-0939

Cross-site scripting XSS vulnerability in Microsoft Content Management Server MCMS 2001 SP1 and 2002 SP2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors involving HTML redirection queries, aka "Cross-site Scripting and Spoofing Vulnerability."...

5.4AI score0.16186EPSS
SaveExploits0References8
Cvelist
Cvelist
added 2007/04/10 9:00 p.m.28 views

CVE-2007-0938

Microsoft Content Management Server MCMS 2001 SP1 and 2002 SP2 does not properly handle certain characters in a crafted HTTP GET request, which allows remote attackers to execute arbitrary code, aka the "CMS Memory Corruption Vulnerability."...

7.2AI score0.45633EPSS
SaveExploits0References10
CVE
CVE
added 2007/04/10 9:00 p.m.70 views

CVE-2007-0939

CVE-2007-0939 is an XSS vulnerability in Microsoft Content Management Server (MCMS) 2001 SP1 and 2002 SP2. The issue arises from MCMS not fully validating input in HTML redirect queries, allowing remote attackers to inject script or HTML that runs in a user’s browser. Exploitation requires user i...

4.3CVSS5.4AI score0.16186EPSS
SaveExploits0References8Affected Software1
securityvulns
securityvulns
added 2007/04/10 12:00 a.m.55 views

Microsoft Security Bulletin MS07-018 Vulnerabilities in Microsoft Content Management Server Could Allow Remote Code Execution (925939)

Microsoft Security Bulletin MS07-018 Vulnerabilities in Microsoft Content Management Server Could Allow Remote Code Execution 925939 Published: April 10, 2007 Version: 1.0 Summary Who Should Read this Document: Customers who use Microsoft Content Management Server Impact of Vulnerability: Remote...

10CVSS0.45633EPSS
SaveExploits0
securityvulns
securityvulns
added 2007/04/10 12:00 a.m.35 views

Microsoft Content Management Server multiple security vulnerabilities

Crossite scripting, memory corruption...

10CVSS1.9AI score0.45633EPSS
SaveExploits0References1Affected Software1
Symantec
Symantec
added 2007/04/10 12:00 a.m.20 views

Microsoft Content Management Server Cross-Site Scripting Vulnerability

Description Microsoft Content Management Server MCMS is prone to an unspecified cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in...

7.2AI score
SaveExploits0Affected Software2
Symantec
Symantec
added 2007/04/10 12:00 a.m.20 views

Microsoft Content Management Server Remote Code Execution Vulnerability

Description Microsoft Content Management Server MCMS is prone to an arbitrary code-execution vulnerability because the software fails to properly validate user-supplied input. Exploiting this issue allows remote attackers to execute arbitrary machine code on affected computers with the privileges...

1.4AI score
SaveExploits0Affected Software2
Prion
Prion
added 2007/03/21 1:19 a.m.26 views

Format string

Format string vulnerability in F-Secure Anti-Virus Client Security 6.02 allows local users to cause a denial of service and possibly gain privileges via format string specifiers in the Management Server name field on the Communication settings page...

7.2CVSS7AI score0.00333EPSS
SaveExploits0References6Affected Software1
Cvelist
Cvelist
added 2007/03/21 1:00 a.m.32 views

CVE-2007-1557

Format string vulnerability in F-Secure Anti-Virus Client Security 6.02 allows local users to cause a denial of service and possibly gain privileges via format string specifiers in the Management Server name field on the Communication settings page...

6.5AI score0.00333EPSS
SaveExploits0References6
seebug.org
seebug.org
added 2007/03/21 12:00 a.m.33 views

F-Secure Anti-Virus Client Security本地格式串处理漏洞

F-Secure Anti-Virus Client Security是PC平台上的实时病毒监测和防护系统,支持所有WINDOWS系统。 F-Secure Anti-Virus Client Security在处理Management Server名称字段时存在格式串处理漏洞,如果攻击者在Communication设置的Management Server名称字段中提供了特制格式串的话,就可以读写任意内存,并可以导致拒绝服务。 F-Secure Anti-Virus Client Security 6.03 F-Secure Anti-Virus Client Security 6.02...

7.1AI score
SaveExploits0
securityvulns
securityvulns
added 2007/03/19 12:00 a.m.54 views

F-Secure anti-virus format string vulnerability

Format string vulnerability in management server name allows local privilege escalation...

7.2CVSS3.2AI score0.00333EPSS
SaveExploits0References1Affected Software1
Tenable Nessus
Tenable Nessus
added 2007/03/05 12:00 a.m.267 views

Eudora WorldMail Mail Management Server (MAILMA.exe) Remote Overflow

The remote host is running Eudora WorldMail, a commercial mail server for Windows. According to its banner, the version of Eudora Worldmail installed on the remote host contains a heap-based buffer overflow flaw in its Mail Management Agent. Using a specially crafted request, an unauthenticated,...

10CVSS6.5AI score0.07116EPSS
SaveExploits0References3
Prion
Prion
added 2007/01/31 11:28 a.m.22 views

Design/Logic Flaw

Unspecified vulnerability in Hitachi JP1/HIBUN Advanced Edition Management Server and Log Server before 20070124 allows remote attackers to cause a denial of service application stop via unexpected data...

7.8CVSS7.1AI score0.01977EPSS
SaveExploits0References6Affected Software2
Rows per page
Query Builder