CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

632 matches found

OSV•added 2002/12/31 5:0 a.m.•1 views

DEBIAN-CVE-2002-1755

tinc 1.0pre3 and 1.0pre4 VPN does not authenticate forwarded packets, which allows remote attackers to inject data into user sessions without detection, and possibly control the data contents via cut-and-paste attacks on CBC...

5CVSS7AI score0.00336EPSS

Exploits0References1

NVD•added 2002/12/31 5:0 a.m.•8 views

CVE-2002-1747

Vtun 2.5b1 does not authenticate forwarded packets, which allows remote attackers to inject data into user sessions without detection, and possibly control the data contents via cut-and-paste attacks on ECB...

5CVSS6.7AI score0.00336EPSS

Exploits0References2

CVE•added 2000/02/04 5:0 a.m.•70 views

CVE-1999-0489

CVE-1999-0489 affects MSHTML.DLL in Internet Explorer 5.0. It allows a remote attacker to paste a file name into the file upload intrinsic control (variant of “untrusted scripted paste” per MS:MS98-013).

10CVSS7AI score0.17107EPSS

Exploits0References1Affected Software1

Cvelist•added 2000/01/04 5:0 a.m.•13 views

CVE-1999-0870

Internet Explorer 4.01 allows remote attackers to read arbitrary files by pasting a file name into the file upload control, aka untrusted scripted paste...

6.8AI score0.07229EPSS

Exploits0References1

Packet Storm•added 1999/10/29 12:0 a.m.•20 views

ie50.cross-frame.txt

Subject: IE 5.0 cross-frame vulnerabilities back again from: Francis Favorini Folks, It seems that after applying the IFRAME ExecCommand patch from MS9-042, IE 5.0 is again vulnerable to Georgi Guninski's cross-frame bugs. You can visit his page at to test. I tested this on 2 NTW 4.0 SP5 machines...

7.4AI score

Exploits0

Packet Storm•added 1999/08/17 12:0 a.m.•22 views

cuartango-son.txt

The Son of Cuartango Hole http://pages.whowhere.com/computers/cuartangojc/son1.html Affected software Microsoft Internet Explorer 4.01 Fixes Microsoft has released a fix : Microsoft Security Site http://www.microsoft.com/security/bulletins/ms98-015.asp Microsoft names the vulnerability as...

Exploits0

Packet Storm•added 1999/08/17 12:0 a.m.•20 views

msie.5.0.paste.txt

Date: Wed, 24 Mar 1999 17:29:49 +0100 From: Juan Carlos Garcia Cuartango To: [email protected] Subject: Internet Explorer 5 Paste operations Greetings, I have further investigated the Clipboard Vulnerabillity in IE 5. In IE 4 scripted "paste" operations where only allowed if data...

7.4AI score

Exploits0

NVD•added 1999/05/17 4:0 a.m.•16 views

CVE-1999-0489

MSHTML.DLL in Internet Explorer 5.0 allows a remote attacker to paste a file name into the file upload intrinsic control, a variant of "untrusted scripted paste" as described in MS:MS98-013...

10CVSS6.6AI score0.17107EPSS

Exploits0References1