481 matches found
SQL Injection Vulnerability in Rice CMS v5.99
DAMI CMS is a free open-source, fast, simple PC station and cell phone station integration integration system, is committed to providing users with simple, fast PC station and smartphone station building solutions. There is a SQL injection vulnerability in the back-end of DAMI CMS v5.99, which ca...
CVE-2017-10813
CG-WLR300NM Firmware version 1.90 and earlier allows an attacker to execute arbitrary OS commands via unspecified vectors...
Yaws Directory Traversal Vulnerability
Yaws Yetanotherwebserver is a web server based on Erlang and provides two execution modes, standalone and embedded. A security vulnerability exists in Yaws version 1.91. A remote attacker can exploit this vulnerability by performing an HTTP directory traversal attack to read the Yaws server SSL...
Compass sensor applications are not as accurate as expected in Windows 8.1
Compass sensor applications are not as accurate as expected in Windows 8.1 Symptoms Certain compass sensor applications are not as accurate as expected on a computer that is running Windows 8.1. For example, there is a 90 degree offset for the directional values in the applications. Resolution...
Malware Information Sharing Platform Cross-Site Scripting Vulnerability
The Malware Information Sharing Platform MISP is an open source software solution for collecting, storing, distributing and sharing cybersecurity metrics and analyzing cybersecurity events and malware. A cross-site scripting vulnerability exists in the template-creation function of the add.ctp,...
CVE-2016-3422
Unspecified vulnerability in Oracle Java SE 6u113, 7u99, and 8u77 allows remote attackers to affect availability via vectors related to 2D...
JDK: unspecified vulnerability fixed in 6u95, 7u79 and 8u45 (Deployment)
Unspecified vulnerability in in Oracle Java SE 6u91, 7u76, and 8u40 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment...
JDK: unspecified vulnerability fixed in 6u95, 7u79 and 8u45 (Deployment)
Unspecified vulnerability in in Oracle Java SE 6u91, 7u76, and 8u40 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment...
PT-2017-6668 · Nts +3 · Ntp +3
Name of the Vulnerable Software and Affected Versions: ntp versions 4.2.8px through 4.2.8p2-RC2 ntp versions 4.3.x through 4.3.12 Description: The issue is related to the generation of MD5 keys with insufficient entropy on big endian machines under specific conditions. This might allow remote...
CVE-2012-2906
creationtimestamp| type| source ---|---|--- 2012-05-17 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/37217...
CVE-2012-5099
creationtimestamp| type| source ---|---|--- 2011-01-01 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/36484...
CVE-2009-5020
Open redirect vulnerability in awredir.pl in AWStats before 6.95 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors...
CVE-2010-1994
creationtimestamp| type| source ---|---|--- 2010-05-12 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/33978...
CVE-2009-0225
Microsoft Office PowerPoint 2002 SP3 allows remote attackers to execute arbitrary code via crafted sound data in a file that uses a PowerPoint 95 native file format, leading to improper "array indexing" and memory corruption, aka "PP7 Memory Corruption Vulnerability."...
VulnCheck KEV: CVE-2008-4841
The WordPad Text Converter for Word 97 files in Microsoft Windows 2000 SP4, XP SP2, and Server 2003 SP1 and SP2 allows remote attackers to execute arbitrary code via a crafted 1 .doc, 2 .wri, or 3 .rtf Word 97 file that triggers memory corruption, as exploited in the wild in December 2008...
CVE-2006-6161
Multiple SQL injection vulnerabilities in Doug Luxem Liberum Help Desk 0.97.3 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 id and 2 uid parameter to a inout/status.asp, b inout/update.asp, and c forgotpass.asp. NOTE: The provenance of this information is unknown;...
ClamAV < 0.95.2 File Scan Evasion (deprecated)
Binary data 5073.prm...
New CesarFTP v 0.99g DoS
just thought that, since you seemed interseted in the topic earlier, I would e-mail you this exploit. I don't think that it's going to get patched anytime soon anyways, so it doesn't matter. I haven't tested remotely network trouble but I would like to get some info back on your results. I can on...
PT-1997-1137 · Microsoft · Windows Nt +1
Name of the Vulnerable Software and Affected Versions: Windows 95 and Windows NT systems affected versions not specified Description: The issue is related to a Jolt ICMP attack, which results in a denial of service. This affects Windows 95 and Windows NT systems. Recommendations: At the moment,...
