Lucene search
+L
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Settings
Sign in
🔥 Daily Hot!
💪🏽 CPE Enhanced Advisories
🕶 Shadow Exploits
🕵🏼 Vulners CPE
🔐 Security news
💻 Exploit updates
📑 Blogs review
🐧 Linux vulnerabilities
🐞 Bugbounty
🤖 AI High Score
📰 CVE Feed
show all

1083 matches found

Metasploit
Metasploit•added 2010/11/09 5:07 a.m.•25 views

CitectSCADA/CitectFacilities ODBC Buffer Overflow

This module exploits a stack buffer overflow in CitectSCADA's ODBC daemon. This has only been tested against Citect v5, v6 and v7. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule...

7.6CVSS7.4AI score0.77717EPSS
SaveExploits12
Tenable Nessus
Tenable Nessus•added 2010/10/29 12:00 a.m.•32 views

Fedora 13 : apr-util-1.3.10-1.fc13 (2010-15953)

This update includes the latest stable release of the APR-util library. A memory leak in the aprbrigadesplitline function allowed a denial of service attack network services using this function, such as the Apache HTTP Server. CVE-2010-1623 Bug fixes to the 'thread pool' interfaces and ODBC suppo...

5CVSS6.3AI score0.20167EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus•added 2010/10/29 12:00 a.m.•42 views

Fedora 12 : apr-util-1.3.10-1.fc12 (2010-15916)

This update includes the latest stable release of the APR-util library. A memory leak in the aprbrigadesplitline function allowed a denial of service attack network services using this function, such as the Apache HTTP Server. CVE-2010-1623 Bug fixes to the 'thread pool' interfaces and ODBC suppo...

5CVSS6.3AI score0.20167EPSS
SaveExploits0References3
Prion
Prion•added 2010/10/28 9:00 p.m.•19 views

Authentication flaw

The TCP-to-ODBC gateway in IBM Tivoli Provisioning Manager for OS Deployment 7.1.1.3 does not require authentication for SQL statements, which allows remote attackers to modify, create, or read database records via a session on TCP port 2020. NOTE: the vendor disputes this issue, stating that the...

7.5CVSS7.9AI score0.03222EPSS
SaveExploits0References3Affected Software1
CVE
CVE•added 2010/10/28 8:00 p.m.•66 views

CVE-2010-4121

The CVE-2010-4121 issue affects IBM Tivoli Provisioning Manager for OS Deployment 7.1.1.3: the TCP-to-ODBC gateway allows unauthenticated SQL statements, enabling remote modification, creation, or reading of database records via a session on TCP port 2020. The vulnerability is corroborated by mul...

7.5CVSS7.4AI score0.03222EPSS
SaveExploits0References3Affected Software1
Packet Storm
Packet Storm•added 2010/10/19 12:00 a.m.•24 views

CopyProtected.com SQL Injection

Author: dolomedes E-mail: [email protected] Title: CopyProtected.com SQL injection vulnerability Description: Navigating to the URL http://copyprotected.com/language/english/index.asp?country=' would produce the following error: Microsoft OLE DB Provider for ODBC Drivers error '80040e14'...

SaveExploits0
Zero Day Initiative
Zero Day Initiative•added 2010/10/08 12:00 a.m.•28 views

IBM Tivoli Provisioning Manager for OS Deployment TCP to ODBC Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary SQL queries on vulnerable installations of Tivoli Provisioning Manager. Authentication is not required to exploit this vulnerability. The specific flaw exists within the TCP to ODBC gateway component which listens by default on TCP...

10CVSS7.9AI score
SaveExploits0References1
Tenable Nessus
Tenable Nessus•added 2010/07/01 12:00 a.m.•54 views

Fedora 11 : openoffice.org-3.1.1-19.12.fc11 (2010-1941)

Fri Feb 12 2010 Caolan McNamara - 1:3.1.1-19.12 - CVE-2009-2950 GIF file parsing heap overflow caolanm - CVE-2009-2949 integer overflow in XPM processing caolanm - CVE-2009-3301 .doc Table Parsing vulernability caolanm - CVE-2009-3302 .doc Table Parsing vulernability caolanm - Resolves:...

9.3CVSS5.5AI score0.14244EPSS
SaveExploits0References9
Prion
Prion•added 2010/04/22 2:30 p.m.•22 views

Sql injection

Multiple SQL injection vulnerabilities in Xlight FTP Server before 3.2.1, when ODBC authentication is enabled, allow remote attackers to execute arbitrary SQL commands via the 1 USER aka username or 2 PASS aka password command...

6.8CVSS9.4AI score0.02027EPSS
SaveExploits2References5Affected Software1
NVD
NVD•added 2010/04/22 2:30 p.m.•18 views

CVE-2009-4795

Multiple SQL injection vulnerabilities in Xlight FTP Server before 3.2.1, when ODBC authentication is enabled, allow remote attackers to execute arbitrary SQL commands via the 1 USER aka username or 2 PASS aka password command...

6.8CVSS8.7AI score0.02027EPSS
SaveExploits2References5
Cvelist
Cvelist•added 2010/04/22 2:00 p.m.•26 views

CVE-2009-4795

Multiple SQL injection vulnerabilities in Xlight FTP Server before 3.2.1, when ODBC authentication is enabled, allow remote attackers to execute arbitrary SQL commands via the 1 USER aka username or 2 PASS aka password command...

8.7AI score0.02027EPSS
SaveExploits2References5
CVE
CVE•added 2010/04/22 2:00 p.m.•57 views

CVE-2009-4795

CVE-2009-4795 : In Xlight FTP Server prior to 3.2.1, when ODBC authentication is enabled, remote attackers can trigger SQL injection through the USER (username) or PASS (password) commands. The underlying issue is the server processing user-supplied credentials in SQL without proper validation, a...

6.8CVSS8.9AI score0.02027EPSS
SaveExploits2References5Affected Software1
seebug.org
seebug.org•added 2010/03/10 12:00 a.m.•37 views

Microsoft Excel DbOrParamQry对象解析内存破坏漏洞（MS10-017）

BUGTRAQ ID: 38555 CVE ID: CVE-2010-0264 Excel是微软Office套件中的电子表格工具。 Excel在解析包含有畸形DbOrParamQry记录的.XLS文件时存在内存破坏漏洞，用户受骗打开了恶意的.XLS文件就可能导致执行任意代码。 DbOrParamQry记录指定了DbQuery或ParamQry记录，具体取决于之前的记录。记录查询参数（ParamQry）偏移DCh包含有有关ODBC参数化查询的记录，格式如下： /----- Offset Name Size Contents 4 wTypeSql 2 Used for ODBC querie...

9.3CVSS7.4AI score0.21221EPSS
SaveExploits5
OpenVAS
OpenVAS•added 2010/01/14 12:00 a.m.•18 views

IT-Grundschutz M5.101: Entfernen nicht benötigter ODBC-Treiber beim IIS-Einsatz (Windows)

IT-Grundschutz M5.101: Entfernen nicht benötigter ODBC-Treiber beim IIS-Einsatz Windows. ACHTUNG: Dieser Test wird nicht mehr unterstützt. Er wurde zudem in neueren EL gestrichen. Diese Prüfung bezieht sich auf die 10. Ergänzungslieferung 10. EL des IT- Grundschutz. Die detaillierte Beschreibung ...

7.3AI score
SaveExploits0References1
OpenVAS
OpenVAS•added 2010/01/14 12:00 a.m.•22 views

IT-Grundschutz M5.101: Entfernen nicht benötigter ODBC-Treiber beim IIS-Einsatz (Windows)

IT-Grundschutz M5.101: Entfernen nicht benötigter ODBC-Treiber beim IIS-Einsatz Windows. ACHTUNG: Dieser Test wird nicht mehr unterstützt. Er wurde zudem in neueren EL gestrichen. Diese Prüfung bezieht sich auf die 10. Ergänzungslieferung 10. EL des IT- Grundschutz. Die detaillierte Beschreibung ...

7.3AI score
SaveExploits0References1
OpenVAS
OpenVAS•added 2010/01/14 12:00 a.m.•13 views

IT-Grundschutz M5.101: Entfernen nicht benötigter ODBC-Treiber beim IIS-Einsatz (Windows)

IT-Grundschutz M5.101: Entfernen nicht benötigter ODBC-Treiber beim IIS-Einsatz Windows. ACHTUNG: Dieser Test wird nicht mehr unterstützt. Er wurde zudem in neueren EL gestrichen. Diese Prüfung bezieht sich auf die 11. Ergänzungslieferung 11. EL des IT- Grundschutz. Die detaillierte Beschreibung ...

7.3AI score
SaveExploits0References1
OpenVAS
OpenVAS•added 2010/01/14 12:00 a.m.•14 views

IT-Grundschutz M5.101: Entfernen nicht benötigter ODBC-Treiber beim IIS-Einsatz (Windows)

IT-Grundschutz M5.101: Entfernen nicht benötigter ODBC-Treiber beim IIS-Einsatz Windows. ACHTUNG: Dieser Test wird nicht mehr unterstützt. Er wurde zudem in neueren EL gestrichen. Diese Prüfung bezieht sich auf die 11. Ergänzungslieferung 11. EL des IT- Grundschutz. Die detaillierte Beschreibung ...

7.3AI score
SaveExploits0References1
Packet Storm
Packet Storm•added 2009/12/03 12:00 a.m.•31 views

TEKUVA Authentication Bypass

!/usr/bin/perl Exploit: TEKUVA Password Reminder Authentication Bypass Date: 11/19/2009 Author: iqlusion [email protected] Software Link: http://download.cnet.com/Password-Reminder/3000-20644-10966598.html Version: 1.0.0.1 Info: TEKUVA Password Reminder is a password vault that allows you to...

0.5AI score
SaveExploits0
OpenVAS
OpenVAS•added 2009/10/27 12:00 a.m.•48 views

SLES10: Security update for PHP5

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: apache2-modphp5 php5 php5-bcmath php5-bz2 php5-calendar php5-ctype php5-curl php5-dba php5-dbase php5-devel php5-dom php5-exif php5-fastcgi php5-ftp php5-gd...

7.5CVSS0.2AI score0.04378EPSS
SaveExploits2
OpenVAS
OpenVAS•added 2009/10/27 12:00 a.m.•45 views

SLES10: Security update for PHP5

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: apache2-modphp5 php5 php5-bcmath php5-bz2 php5-calendar php5-ctype php5-curl php5-dba php5-dbase php5-devel php5-dom php5-exif php5-fastcgi php5-ftp php5-gd...

7.5CVSS7.7AI score0.04378EPSS
SaveExploits2References1
Rows per page
Query Builder