Lucene search
+L

5878 matches found

Packet Storm
Packet Storm
•added 2009/10/17 12:00 a.m.•43 views

Sun VirtualBox 3.0.6 Local Root

!/bin/sh CVE-2009-3692 Sun VirtualBox runme.c include include include include include int mainint argc, char argv FILE from, to; int fd; char ch; setuid0; setgid0; from = fopen"/bin/sh","rb"; to = fopen"./sh","wb"; while!feoffrom ch = fgetcfrom; if!feoffrom fputcch, to; fclosefrom; fcloseto; fd =...

7.2CVSS5.9AI score0.00729EPSS
SaveExploits6
Prion
Prion
•added 2009/10/16 4:30 p.m.•26 views

Stack overflow

Stack-based buffer overflow in the Meta Content Optimizer in Konae Technologies Alleycode HTML Editor 2.21 allows user-assisted remote attackers to execute arbitrary code via a long value in a 1 description or 2 keyword META tag. NOTE: the provenance of this information is unknown; the details ar...

9.3CVSS8.3AI score0.04487EPSS
SaveExploits2References2Affected Software1
NVD
NVD
•added 2009/10/16 4:30 p.m.•36 views

CVE-2009-3708

Stack-based buffer overflow in the Meta Content Optimizer in Konae Technologies Alleycode HTML Editor 2.21 allows user-assisted remote attackers to execute arbitrary code via a long value in a 1 description or 2 keyword META tag. NOTE: the provenance of this information is unknown; the details ar...

9.3CVSS7.7AI score0.04487EPSS
SaveExploits2References2
NVD
NVD
•added 2009/10/16 4:30 p.m.•33 views

CVE-2009-3709

Stack-based buffer overflow in the Meta Content Optimizer in Konae Technologies Alleycode HTML Editor 2.21 allows user-assisted remote attackers to execute arbitrary code via a long value in a TITLE tag...

9.3CVSS7.8AI score0.05902EPSS
SaveExploits3References4
Prion
Prion
•added 2009/10/16 4:30 p.m.•28 views

Stack overflow

Stack-based buffer overflow in the Meta Content Optimizer in Konae Technologies Alleycode HTML Editor 2.21 allows user-assisted remote attackers to execute arbitrary code via a long value in a TITLE tag...

9.3CVSS8.5AI score0.05902EPSS
SaveExploits3References4Affected Software1
Cvelist
Cvelist
•added 2009/10/16 4:00 p.m.•50 views

CVE-2009-3708

Stack-based buffer overflow in the Meta Content Optimizer in Konae Technologies Alleycode HTML Editor 2.21 allows user-assisted remote attackers to execute arbitrary code via a long value in a 1 description or 2 keyword META tag. NOTE: the provenance of this information is unknown; the details ar...

7.7AI score0.04487EPSS
SaveExploits2References2
CVE
CVE
•added 2009/10/16 4:00 p.m.•72 views

CVE-2009-3709

The CVE-2009-3709 entry concerns Alleycode HTML Editor 2.21 from Konae Technologies. A stack-based buffer overflow in the Meta Content Optimizer allows user-assisted remote attackers to execute arbitrary code via a long value in a TITLE tag. Public records (NVD/OpenVAS entries) confirm remote cod...

9.3CVSS7.8AI score0.05902EPSS
SaveExploits3References4Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2009/10/16 12:00 a.m.•6 views

CVE-2009-3708: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow in the Meta Content Optimizer in Konae Technologies Alleycode HTML Editor 2.21 allows user-assisted remote attackers to execute arbitrary code via a long value in a 1 description or 2 keyword META tag. NOTE: the provenance of this information is unknown; the details ar...

9.3CVSS6.8AI score0.04487EPSS
SaveExploits2References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2009/10/16 12:00 a.m.•4 views

CVE-2009-3709: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow in the Meta Content Optimizer in Konae Technologies Alleycode HTML Editor 2.21 allows user-assisted remote attackers to execute arbitrary code via a long value in a TITLE tag...

9.3CVSS6.8AI score0.05902EPSS
SaveExploits3References2
OpenVAS
OpenVAS
•added 2009/10/13 12:00 a.m.•32 views

SLES10: Security update for OpenLDAP 2

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: openldap2 openldap2-back-meta openldap2-back-perl openldap2-client openldap2-devel More details may also be found by searching for the SuSE Enterprise Server...

5CVSS9.6AI score0.13173EPSS
SaveExploits1
OpenVAS
OpenVAS
•added 2009/10/11 12:00 a.m.•36 views

SLES11: Security update for OpenLDAP2

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: libldap-24-2 openldap2 openldap2-back-meta openldap2-client More details may also be found by searching for the SuSE Enterprise Server 11 patch database...

6.8CVSS6.6AI score0.04959EPSS
SaveExploits4References1
OpenVAS
OpenVAS
•added 2009/10/10 12:00 a.m.•50 views

SLES9: Security update for OpenLDAP 2

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: openldap2-back-meta openldap2-back-monitor openldap2-back-ldap openldap2 openldap2-devel openldap2-back-perl openldap2-client For more information, please...

4CVSS7.5AI score0.03053EPSS
SaveExploits2References1
Tenable Nessus
Tenable Nessus
•added 2009/10/06 12:00 a.m.•30 views

openSUSE 10 Security Update : libldap-2_4-2 (libldap-2_4-2-6488)

This update of openldap2 makes SSL certificate verification more robust against uses of the special character \0 in the subjects name. CVE-2009-2408 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security...

6.8CVSS6.7AI score0.04959EPSS
SaveExploits4References1
Prion
Prion
•added 2009/09/28 10:30 p.m.•21 views

Information disclosure

The Meta tags aka Nodewords module before 6.x-1.1 for Drupal does not properly follow permissions during assignment of node meta tags, which allows remote attackers to obtain sensitive information via unspecified vectors...

5CVSS6.8AI score0.01442EPSS
SaveExploits0References6Affected Software1
NVD
NVD
•added 2009/09/28 10:30 p.m.•23 views

CVE-2009-3442

The Meta tags aka Nodewords module before 6.x-1.1 for Drupal does not properly follow permissions during assignment of node meta tags, which allows remote attackers to obtain sensitive information via unspecified vectors...

5CVSS6.3AI score0.01442EPSS
SaveExploits0References6
Cvelist
Cvelist
•added 2009/09/28 10:00 p.m.•36 views

CVE-2009-3442

The Meta tags aka Nodewords module before 6.x-1.1 for Drupal does not properly follow permissions during assignment of node meta tags, which allows remote attackers to obtain sensitive information via unspecified vectors...

6.3AI score0.01442EPSS
SaveExploits0References6
CVE
CVE
•added 2009/09/28 10:00 p.m.•56 views

CVE-2009-3442

The vulnerability CVE-2009-3442 affects the Drupal Meta tags (Nodewords) module prior to 6.x-1.1. The flaw is in how permissions are enforced during assignment of node meta tags, which can allow remote attackers to obtain sensitive information via unspecified vectors. The NVD reports a partial co...

5CVSS6.3AI score0.01442EPSS
SaveExploits0References6Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2009/09/28 12:00 a.m.•5 views

CVE-2009-3442: Undefined Security Weakness

The Meta tags aka Nodewords module before 6.x-1.1 for Drupal does not properly follow permissions during assignment of node meta tags, which allows remote attackers to obtain sensitive information via unspecified vectors...

5CVSS5.8AI score0.01442EPSS
SaveExploits0References2
NVD
NVD
•added 2009/09/24 4:30 p.m.•35 views

CVE-2009-3337

SQL injection vulnerability in the Freetag serendipityeventfreetag plugin before 3.09 for Serendipity S9Y allows remote attackers to execute arbitrary SQL commands via an unspecified parameter associated with Meta keywords in a blog entry...

7.5CVSS8.4AI score0.01404EPSS
SaveExploits0References3
Prion
Prion
•added 2009/09/24 4:30 p.m.•22 views

Sql injection

SQL injection vulnerability in the Freetag serendipityeventfreetag plugin before 3.09 for Serendipity S9Y allows remote attackers to execute arbitrary SQL commands via an unspecified parameter associated with Meta keywords in a blog entry...

7.5CVSS9.1AI score0.01404EPSS
SaveExploits0References3Affected Software1
Rows per page
Query Builder