Lucene search
+L

1233 matches found

NVD
NVD
added 2006/11/07 8:7 p.m.25 views

CVE-2006-5651

list.php in DigiOz Guestbook before 1.7.1 allows remote attackers to obtain sensitive information via a non-numeric page parameter, which displays the installation path in the resulting error message...

5CVSS6.1AI score0.01661EPSS
SaveExploits1References6
RedHat Linux
RedHat Linux
added 2006/09/29 12:23 a.m.12 views

security flaw

OpenSSH 3.6.1 and earlier, when restricting host access by numeric IP addresses and with VerifyReverseMapping disabled, allows remote attackers to bypass "from=" and "user@host" address restrictions by connecting to a host from a system whose reverse DNS hostname contains the numeric IP address...

7.5CVSS7.3AI score0.05766EPSS
SaveExploits1References4
Cvelist
Cvelist
added 2006/09/12 4:0 p.m.27 views

CVE-2006-4706

Cross-site scripting XSS vulnerability in inc/functionspost.php in MyBB aka MyBulletinBoard 1.1.7 allows remote attackers to inject arbitrary web script or HTML via a url BBCode tag that contains a javascript URI with an SGML numeric character reference and an embedded space, as demonstrated usin...

5.6AI score0.0241EPSS
SaveExploits1References6
NVD
NVD
added 2006/07/21 2:3 p.m.18 views

CVE-2006-3761

Cross-site scripting XSS vulnerability in inc/functionspost.php in MyBB aka MyBulletinBoard 1.0 RC2 through 1.1.4 allows remote attackers to inject arbitrary web script or HTML via a javascript URI with an SGML numeric character reference in the url BBCode tag, as demonstrated using "javacript"...

4.3CVSS5.6AI score0.02526EPSS
SaveExploits1References9
Cvelist
Cvelist
added 2006/07/21 12:0 a.m.29 views

CVE-2006-3761

Cross-site scripting XSS vulnerability in inc/functionspost.php in MyBB aka MyBulletinBoard 1.0 RC2 through 1.1.4 allows remote attackers to inject arbitrary web script or HTML via a javascript URI with an SGML numeric character reference in the url BBCode tag, as demonstrated using "javacript"...

5.6AI score0.02526EPSS
SaveExploits1References9
RedHat Linux
RedHat Linux
added 2006/07/20 1:1 p.m.7 views

security flaw

OpenSSH 3.6.1 and earlier, when restricting host access by numeric IP addresses and with VerifyReverseMapping disabled, allows remote attackers to bypass "from=" and "user@host" address restrictions by connecting to a host from a system whose reverse DNS hostname contains the numeric IP address...

7.5CVSS7.3AI score0.05766EPSS
SaveExploits1References4
RedHat Linux
RedHat Linux
added 2006/02/14 4:12 p.m.7 views

security flaw

Format string vulnerability in the SetImageInfo function in image.c for ImageMagick 6.2.3 and other versions, and GraphicsMagick, allows user-assisted attackers to cause a denial of service crash and possibly execute arbitrary code via a numeric format string specifier such as %d in the file name...

5.1CVSS7.7AI score0.04344EPSS
SaveExploits1References4
Cvelist
Cvelist
added 2006/01/22 8:0 p.m.29 views

CVE-2006-0364

Cross-site scripting XSS vulnerability in MyBulletinBoard MyBB allows remote attackers to inject arbitrary web script or HTML via a signature containing a JavaScript URI in the SRC attribute of an IMG element, in which the URI uses SGML numeric character references without trailing semicolons, as...

5.6AI score0.01398EPSS
SaveExploits1References6
UbuntuCve
UbuntuCve
added 2006/01/04 11:3 p.m.77 views

CVE-2006-0082

Format string vulnerability in the SetImageInfo function in image.c for ImageMagick 6.2.3 and other versions, and GraphicsMagick, allows user-assisted attackers to cause a denial of service crash and possibly execute arbitrary code via a numeric format string specifier such as %d in the file name...

5.1CVSS7.5AI score0.04344EPSS
SaveExploits1References2
Cvelist
Cvelist
added 2006/01/04 11:0 p.m.35 views

CVE-2006-0082

Format string vulnerability in the SetImageInfo function in image.c for ImageMagick 6.2.3 and other versions, and GraphicsMagick, allows user-assisted attackers to cause a denial of service crash and possibly execute arbitrary code via a numeric format string specifier such as %d in the file name...

7.1AI score0.04344EPSS
SaveExploits1References28
CVE
CVE
added 2005/12/03 12:0 a.m.75 views

CVE-2004-2607

CVE-2004-2607 is a local-read vulnerability in the Linux kernel (sdla_xfer) caused by casting a large len argument received as int to a short, preventing a read loop from filling a buffer. The description applies to Linux kernel 2.6.x (up to 2.6.5) and 2.4 (up to 2.4.29-rc1). Public documents con...

2.1CVSS5.7AI score0.0046EPSS
SaveExploits1References8Affected Software1
Cvelist
Cvelist
added 2005/12/03 12:0 a.m.47 views

CVE-2004-2607

A numeric casting discrepancy in sdlaxfer in Linux kernel 2.6.x up to 2.6.5 and 2.4 up to 2.4.29-rc1 allows local users to read portions of kernel memory via a large len argument, which is received as an int but cast to a short, which prevents a read loop from filling a buffer...

5.7AI score0.0046EPSS
SaveExploits1References8
zdt
zdt
added 2005/06/07 12:0 a.m.43 views

IPSwitch IMAP Server LOGON Remote Stack Overflow

Exploit for unknown platform in category remote exploits ================================================ IPSwitch IMAP Server LOGON Remote Stack Overflow ================================================ / IpSwitch IMAP Server LOGON stack overflow. Software Hole discovered by iDEFENSE POC written...

7.1AI score
SaveExploits0
seebug.org
seebug.org
added 2005/06/07 12:0 a.m.39 views

IPSwitch IMAP Server LOGON Remote Stack Overflow

No description provided by source. / IpSwitch IMAP Server LOGON stack overflow. Software Hole discovered by iDEFENSE POC written by nolimit and BuzzDee First, some information for the few of you that know how this stuff works. The reason you see no SP2 or 2003 offsets is because of Windows SEH...

7.1AI score
SaveExploits0
Exploit DB
Exploit DB
added 2005/06/07 12:0 a.m.51 views

IPSwitch IMAP Server - LOGON Remote Stack Overflow

/ IpSwitch IMAP Server LOGON stack overflow. Software Hole discovered by iDEFENSE POC written by nolimit and BuzzDee First, some information for the few of you that know how this stuff works. The reason you see no SP2 or 2003 offsets is because of Windows SEH checks. Thats right, in this one...

10CVSS5.8AI score0.42813EPSS
SaveExploits9
Cvelist
Cvelist
added 2005/06/01 4:0 a.m.40 views

CVE-2005-1791

Microsoft Internet Explorer 6 SP2 6.0.2900.2180 crashes when the user attempts to add a URI to the restricted zone, in which the full domain name of the URI begins with numeric sequences similar to an IP address. NOTE: if there is not an exploit scenario in which an attacker can trigger this...

6.3AI score0.03801EPSS
SaveExploits1References2
NVD
NVD
added 2005/05/28 4:0 a.m.24 views

CVE-2005-1791

Microsoft Internet Explorer 6 SP2 6.0.2900.2180 crashes when the user attempts to add a URI to the restricted zone, in which the full domain name of the URI begins with numeric sequences similar to an IP address. NOTE: if there is not an exploit scenario in which an attacker can trigger this...

2.6CVSS6.3AI score0.03801EPSS
SaveExploits1References2
NVD
NVD
added 2004/12/31 5:0 a.m.23 views

CVE-2004-2607

A numeric casting discrepancy in sdlaxfer in Linux kernel 2.6.x up to 2.6.5 and 2.4 up to 2.4.29-rc1 allows local users to read portions of kernel memory via a large len argument, which is received as an int but cast to a short, which prevents a read loop from filling a buffer...

2.1CVSS5.7AI score0.0046EPSS
SaveExploits1References8
seebug.org
seebug.org
added 2004/12/22 12:0 a.m.45 views

linux/x86 alpha-numeric shellcode 64 bytes

No description provided by source. /--------------------------------------/ / 64 byte alpha-numeric shellcode / / by XORt@dallas2600 64bytes / /--------------------------------------/ "\x6a\x30" / pushb $0x30 / "\x58" / pop %eax / "\x34\x30" / xorb $0x30, %al / "\x50" / push %eax / "\x5a" / pop...

7.1AI score
SaveExploits0
Exploit DB
Exploit DB
added 2004/12/22 12:0 a.m.63 views

linux/x86 alpha-numeric shellcode 64 bytes

linux/x86 alpha-numeric shellcode 64 bytes. Shellcode exploit for linx86 platform /--------------------------------------/ / 64 byte alpha-numeric shellcode / / by XORt@dallas2600 64bytes / /--------------------------------------/ "\x6a\x30" / pushb $0x30 / "\x58" / pop %eax / "\x34\x30" / xorb...

0.1AI score
SaveExploits0
Rows per page
Query Builder