21039 matches found
CVE-2005-2144
Prevx Pro 2005 1.0 allows local users to bypass file protection and modify files by using MapViewOfFile to perform memory mapping on the file...
CVE-2005-4657
Ocean12 Calendar Manager Pro 1.01 allows remote attackers to bypass authentication and obtain sensitive information via a direct request to /admin/view.asp. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...
CVE-2002-2413
WebSite Pro 3.1.11.0 on Windows allows remote attackers to read script source code for files with extensions greater than 3 characters via a URL request that uses the equivalent 8.3 file name...
CVE-2002-2375
Directory traversal vulnerability in CommuniGate Pro 4.0b4 and possibly earlier versions allows remote attackers to list the contents of the WebUser directory and its parent directory via a 1 .. dot dot or 2 . dot in a URL. NOTE: it is not clear whether this issue reveals any more information...
CVE-2002-2078
Heap-based buffer overflow in Floositek 1 FTGate Pro 1.05 and 2 FTGate Office 1.05 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long POP3 APOP USER command...
CVE-2002-1911
ZoneAlarm Pro 3.0 and 3.1, when configured to block all traffic, allows remote attackers to cause a denial of service CPU and memory consumption via a large number of SYN packets SYN flood. NOTE: the vendor was not able to reproduce the issue...
CVE-2002-1851
Buffer overflow in WSFTP Pro 7.5 allows remote attackers to execute code on a client system via unknown attack vectors...
CVE-2008-0334
Cross-site scripting XSS vulnerability in pm/language/spanish/preferences.php in PMachine Pro 2.4.1 allows remote attackers to inject arbitrary web script or HTML via the LPREFNAME855 parameter...
CVE-2009-3540
Cross-site scripting XSS vulnerability in listads.php in YourFreeWorld Ultra Classifieds Pro allows remote attackers to inject arbitrary web script or HTML via the cn parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...
CVE-2009-3539
Multiple cross-site scripting XSS vulnerabilities in YourFreeWorld Ultra Classifieds Pro allow remote attackers to inject arbitrary web script or HTML via the 1 cname parameter to subclass.php and the 2 sn parameter to listads.php...
CVE-2009-2448
Cross-site scripting XSS vulnerability in ogpshow.php in Online Guestbook Pro 5.1 allows remote attackers to inject arbitrary web script or HTML via the searchchoice parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...
CVE-2009-2447
Multiple cross-site scripting XSS vulnerabilities in ogpshow.php in Online Guestbook Pro 5.1 allow remote attackers to inject arbitrary web script or HTML via the 1 search or 2 display parameter...
CVE-2005-2840
Multiple unknown vulnerabilities in MAXdev MD-Pro 1.0.72 and earlier have unknown impact and unspecified attack vectors, in one or more of the 1 Download, 2 Search, 3 Web links, 4 Blocks, 5 Messages, 6 News, 7 Comments, 8 Settings, 9 Stats or 10 subjects modules...
CVE-2005-2839
Multiple cross-site scripting XSS vulnerabilities in MAXdev MD-Pro 1.0.72 allow remote attackers to inject arbitrary web script or HTML via 1 dl-search.php or 2 wl-search.php...
CVE-2024-57529
Cross Site Scripting vulnerability in Jeppesen JetPlanner Pro v.1.6.2.20 allows a remote attacker to execute arbitrary code...
CVE-2024-57529
Cross Site Scripting vulnerability in Jeppesen JetPlanner Pro v.1.6.2.20 allows a remote attacker to execute arbitrary code...
CVE-2009-0752
Unspecified vulnerability in Movable Type Pro and Community Solution 4.x before 4.24 has unknown impact and attack vectors, possibly related to the password recovery mechanism...
CVE-2002-2080
Floositek FTGate PRO 1.05 allows remote attackers to cause a denial of service memory and CPU consumption via a large number of RCPT TO: messages during an SMTP session...
CVE-2025-47582
Deserialization of Untrusted Data vulnerability in QuantumCloud WPBot Pro Wordpress Chatbot allows Object Injection.This issue affects WPBot Pro Wordpress Chatbot: from n/a through 12.7.0...
CVE-2025-4415
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Drupal Piwik PRO allows Cross-Site Scripting XSS.This issue affects Piwik PRO: from 0.0.0 before 1.3.2...