Lucene search
+L

8245 matches found

NVD
NVD
•added 2006/06/08 4:06 p.m.•20 views

CVE-2006-2905

Partial Links 1.2.2 allows remote attackers to obtain sensitive information via a direct request to 1 pagefooter.php and 2 pageheader.php, which displays the path in an error message...

5CVSS6.1AI score0.01392EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2006/06/08 4:00 p.m.•34 views

CVE-2006-2904

SQL injection vulnerability in index.php in Partial Links 1.2.2 allows remote attackers to execute arbitrary SQL commands via the topic parameter...

8.3AI score0.01214EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2006/06/08 4:00 p.m.•34 views

CVE-2006-2905

Partial Links 1.2.2 allows remote attackers to obtain sensitive information via a direct request to 1 pagefooter.php and 2 pageheader.php, which displays the path in an error message...

6.1AI score0.01392EPSS
SaveExploits0References4
CVE
CVE
•added 2006/06/08 4:00 p.m.•59 views

CVE-2006-2904

The CVE-2006-2904 entry describes an SQL injection vulnerability in Partial Links 1.2.2, specifically in index.php and exploitable via the topic parameter. The underlying issue is improper input handling that allows an attacker to inject and execute arbitrary SQL commands on the backend database....

7.5CVSS8.3AI score0.01214EPSS
SaveExploits0References4Affected Software1
CVE
CVE
•added 2006/06/08 4:00 p.m.•50 views

CVE-2006-2905

Partial Links 1.2.2 is affected. Remote attackers can disclose sensitive information by requesting page_footer.php or page_header.php, which reveals the path in an error message. The provided documents do not specify a fix or workaround.

5CVSS6.1AI score0.01392EPSS
SaveExploits0References4Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2006/06/08 12:00 a.m.•5 views

CVE-2006-2905: Undefined Security Weakness

Partial Links 1.2.2 allows remote attackers to obtain sensitive information via a direct request to 1 pagefooter.php and 2 pageheader.php, which displays the path in an error message...

5CVSS5.8AI score0.01392EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2006/06/08 12:00 a.m.•6 views

CVE-2006-2904: Undefined Security Weakness

SQL injection vulnerability in index.php in Partial Links 1.2.2 allows remote attackers to execute arbitrary SQL commands via the topic parameter...

7.5CVSS6.4AI score0.01214EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2006/02/28 12:00 a.m.•5 views

CVE-2006-0916: Undefined Security Weakness

Bugzilla 2.19.3 through 2.20 does not properly handle "//" sequences in URLs when redirecting a user from the login form, which could cause it to generate a partial URL in a form action that causes the user's browser to send the form data to another domain...

7.5CVSS5.8AI score0.01203EPSS
SaveExploits0References1
securityvulns
securityvulns
•added 2006/02/06 12:00 a.m.•64 views

The Bat! mail agent headers spoofing

message/partial format alows to spoof message headers completely, making it impossible to track sender by Received or Message-ID headers...

3.1AI score
SaveExploits0References1
NVD
NVD
•added 2006/01/09 11:03 a.m.•40 views

CVE-2006-0133

Multiple directory traversal vulnerabilities in AIX 5.3 ML03 allow local users to determine the existence of files and read partial contents of certain files via a .. dot dot in the argument to 1 getCommand.new aka getCommand and 2 getShell, a different vulnerability than CVE-2005-4273...

3.6CVSS6.1AI score0.00987EPSS
SaveExploits3References4
RedHat Linux
RedHat Linux
•added 2005/10/05 11:55 a.m.•42 views

Low: Red Hat Security Advisory: gdb security update

An updated gdb package that fixes several bugs and minor security issues is now available. This update has been rated as having low security impact by the Red Hat Security Response Team. GDB, the GNU debugger, allows debugging of programs written in C, C++, and other languages by executing them i...

7.2CVSS7.6AI score0.006EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2005/05/24 12:00 a.m.•5 views

CVE-2005-1703: Undefined Security Weakness

Warrior Kings: Battles 1.23 and earlier allows remote attackers to cause a denial of service server crash via a partial join packet that triggers a NULL pointer dereference...

5CVSS5.6AI score0.07749EPSS
SaveExploits2References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2005/03/02 12:00 a.m.•4 views

CVE-2005-0621: Undefined Security Weakness

Scrapland 1.0 and earlier allows remote attackers to cause a denial of service server termination by triggering an error, which is treated as a fatal error by the server, as demonstrated using 1 signed integers for size values, 2 an invalid model, 3 a "newpos" value that is less than or equal to ...

5CVSS5.9AI score0.03158EPSS
SaveExploits1References1
OSV
OSV
•added 2005/01/10 5:00 a.m.•9 views

DEBIAN-CVE-2004-1012

The argument parser of the PARTIAL command in Cyrus IMAP Server 2.2.6 and earlier allows remote authenticated users to execute arbitrary code via a certain command "bodyp" that is treated as a different command "body.peek" and causes an index increment error that leads to an out-of-bounds memory...

10CVSS7.5AI score0.05951EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2004/12/01 12:00 a.m.•6 views

CVE-2004-1012: Undefined Security Weakness

The argument parser of the PARTIAL command in Cyrus IMAP Server 2.2.6 and earlier allows remote authenticated users to execute arbitrary code via a certain command "bodyp" that is treated as a different command "body.peek" and causes an index increment error that leads to an out-of-bounds memory...

10CVSS6.5AI score0.05951EPSS
SaveExploits0References1
FreeBSD
FreeBSD
•added 2004/11/06 12:00 a.m.•41 views

Cyrus IMAPd -- PARTIAL command out of bounds memory corruption

Due to a bug within the argument parser of the partial command an argument like "bodyp" will be wrongly detected as "body.peek". Because of this the bufferposition gets increased by 10 instead of 5 and could therefore point outside the allocated memory buffer for the rest of the parsing process. ...

10CVSS6.7AI score0.05951EPSS
SaveExploits0References1
OSV
OSV
•added 2003/06/16 4:00 a.m.•12 views

DEBIAN-CVE-2003-0195

CUPS before 1.1.19 allows remote attackers to cause a denial of service via a partial printing request to the IPP port 631, which does not time out...

5CVSS6.2AI score0.10613EPSS
SaveExploits2References1
Debian CVE
Debian CVE
•added 2003/06/05 4:00 a.m.•38 views

CVE-2003-0195

CUPS before 1.1.19 allows remote attackers to cause a denial of service via a partial printing request to the IPP port 631, which does not time out...

5CVSS6AI score0.10613EPSS
SaveExploits2
exploitpack
exploitpack
•added 2002/05/10 12:00 a.m.•21 views

WU-IMAPd 20002001 - Partial Mailbox Attribute Remote Buffer Overflow (1)

WU-IMAPd 20002001 - Partial Mailbox Attribute Remote Buffer Overflow 1 // source: https://www.securityfocus.com/bid/4713/info Wu-imapd is vulnerable to a buffer overflow condition. This has been reported to occur when a valid user requests partial mailbox attributes. Exploitation may result in th...

0.7AI score
SaveExploits0
Exploit DB
Exploit DB
•added 2002/05/10 12:00 a.m.•47 views

WU-IMAPd 2000/2001 - Partial Mailbox Attribute Remote Buffer Overflow (1)

// source: https://www.securityfocus.com/bid/4713/info Wu-imapd is vulnerable to a buffer overflow condition. This has been reported to occur when a valid user requests partial mailbox attributes. Exploitation may result in the execution of arbitrary code as the server process. An attacker may al...

7.5CVSS5.8AI score0.19354EPSS
SaveExploits2
Rows per page
Query Builder