Lucene search
+L

3598 matches found

attackerkb
attackerkb
•added 2007/03/02 9:18 p.m.•16 views

CVE-2007-1161

Cross-site scripting XSS vulnerability in callentry.php in Call Center Software 0,93 allows remote attackers to inject arbitrary web script or HTML via the problemdesc parameter, as demonstrated by the ONLOAD attribute of a BODY element...

4.3CVSS5.7AI score0.01128EPSS
SaveExploits1References5
securityvulns
securityvulns
•added 2007/02/22 12:00 a.m.•31 views

Linux SCSI devices unauthorized access

pam module problem allows console users to access generic SCSI and pseudo-SCSI devices directly...

5.5AI score
SaveExploits0References1Affected Software1
Tenable Nessus
Tenable Nessus
•added 2007/02/18 12:00 a.m.•39 views

SUSE-SA:2006:032: sendmail

The remote host is missing the patch for the advisory SUSE-SA:2006:032 sendmail. The Mail Transfer Agent sendmail has a remote exploitable problem, where a specially crafted MIME messages can crash sendmail and block queue processing. This issue is tracked by the Mitre CVE ID CVE-2006-1173 and CE...

5CVSS5.4AI score0.05273EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
•added 2007/02/18 12:00 a.m.•52 views

SUSE-SA:2006:043: apache,apache2

The remote host is missing the patch for the advisory SUSE-SA:2006:043 apache,apache2. The following security problem was fixed in the Apache and Apache 2 web servers: modrewrite: Fix an off-by-one security problem in the ldap scheme handling. For some RewriteRules this could lead to a pointer...

7.6CVSS7AI score0.97131EPSS
SaveExploits21
Tenable Nessus
Tenable Nessus
•added 2007/02/18 12:00 a.m.•23 views

SUSE-SA:2007:005: w3m

The remote host is missing the patch for the advisory SUSE-SA:2007:005 w3m. A format string problem in w3m -dump / -backend mode could be used by a malicious server to crash w3m or execute code. In SUSE Linux 10.1, openSUSE 10.2 and SUSE Linux Enterprise Server and Desktop 10 this problem was not...

9.3CVSS7.6AI score0.04822EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
•added 2007/02/14 12:00 a.m.•24 views

Windows Live OneCare Antivirus Detection

Windows Live OneCare antivirus, a commercial antivirus software package for Windows, is installed on the remote host; however, there is a problem with the install in that either its services are not running, or its engine and/or virus definition are out of date. %NASLMINLEVEL 999999 C Tenable...

0.4AI score
SaveExploits0
securityvulns
securityvulns
•added 2007/02/04 12:00 a.m.•41 views

Microsoft Windows XMLHTTP proxy problem

Because of insufficient request validation Msxml2.XMLHTTP ActiveX object can be used to proxy HTTML request via client browser...

1.8AI score
SaveExploits0References1
securityvulns
securityvulns
•added 2007/02/01 12:00 a.m.•58 views

ZABBIX SNMP monitoring problem

No description provided...

10CVSS1.4AI score0.02055EPSS
SaveExploits0Affected Software1
securityvulns
securityvulns
•added 2007/02/01 12:00 a.m.•51 views

IBM AIX POP3 and IMAP daemons authentication problem

No description provided...

7.5CVSS2.4AI score0.02071EPSS
SaveExploits0Affected Software1
Prion
Prion
•added 2007/01/23 4:28 p.m.•42 views

Design/Logic Flaw

Unspecified vulnerability in IBM OS/400 R530 and R535 has unknown impact and remote attack vectors, related to an "Integrity Problem" involving LIC-TCPIP and TCP reset. NOTE: it is possible that this issue is related to CVE-2004-0230, but this is not certain...

5CVSS6.2AI score0.80286EPSS
SaveExploits10References4Affected Software1
Cvelist
Cvelist
•added 2007/01/23 4:00 p.m.•55 views

CVE-2007-0442

Unspecified vulnerability in IBM OS/400 R530 and R535 has unknown impact and remote attack vectors, related to an "Integrity Problem" involving LIC-TCPIP and TCP reset. NOTE: it is possible that this issue is related to CVE-2004-0230, but this is not certain...

9.2AI score0.01108EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2007/01/23 12:00 a.m.•9 views

CVE-2007-0442: Undefined Security Weakness

Unspecified vulnerability in IBM OS/400 R530 and R535 has unknown impact and remote attack vectors, related to an "Integrity Problem" involving LIC-TCPIP and TCP reset. NOTE: it is possible that this issue is related to CVE-2004-0230, but this is not certain...

5CVSS5.9AI score0.01108EPSS
SaveExploits0References1
securityvulns
securityvulns
•added 2007/01/20 12:00 a.m.•74 views

Cisco CS MARS and Cisco ADSM TLS, SSL, SSH certificates validation problem

On connecting to managed device, device certificate is not validated...

6.4CVSS3.1AI score0.02921EPSS
SaveExploits0References1Affected Software2
Tenable Nessus
Tenable Nessus
•added 2007/01/17 12:00 a.m.•37 views

Fedora Core 6 : mono-1.1.17.1-4.fc6 (2007-067)

A security problem was found and fixed in mono class libraries that affects the Mono web server implementation. By appending spaces to URLs attackers could download the source code of ASP.net scripts that would normally get executed by the web server. After upgrading the packages you need to...

5CVSS5.3AI score0.05248EPSS
SaveExploits2References2
seebug.org
seebug.org
•added 2006/12/22 12:00 a.m.•18 views

3editor CMS <= 0.42 (index.php) Local File Include Vulnerability

No description provided by source. script Name: 3editor CMS index.php Local File Include Exploit Download:http://www.matteolucarelli.net/3editor/index.htm Author : Dr Max Virus Contact :[email protected] Bug & Problem In file index.php Let's Take a look; if !isset$GET'page'...

7.1AI score
SaveExploits0
securityvulns
securityvulns
•added 2006/12/14 12:00 a.m.•71 views

enemies-of-carlotta mailing list processor shell characters

Shell characters problem on e-mail address parsing...

3.4AI score
SaveExploits0References1Affected Software1
Exploit DB
Exploit DB
•added 2006/12/11 12:00 a.m.•59 views

mxBB Module Activity Games 0.92 - Remote File Inclusion

mxact mxBB Games Module --Remote File Inclusion Exploit Bug Found & Exploit coded By Dr Max Virus Download:http://www.mx-system.com/index.php?page=4&action=file&fileid=71 Problem area: if !fileexists$mxrootpath . 'modules/mxact/language/lang' . $boardconfig'defaultlang' . '/langactivity.'.$phpEx...

7.5CVSS5.8AI score0.02594EPSS
SaveExploits1
Oracle linux
Oracle linux
•added 2006/11/30 12:00 a.m.•57 views

kdegraphics security update

7:3.3.1-3.9 - apply xpdf-splash-overflow-CVE-2006-0301-fix.diff to fix CVE-2006-0301 184307 7:3.3.1-3.8 - apply xpdf-splash-overflow-CVE-2006-0301-fix.diff to fix CVE-2006-0301 179055 7:3.3.1-3.7 - apply patch to fix buffer overflow issue in the xpdf codebase when handling splash images...

10CVSS7.5AI score0.09511EPSS
SaveExploits1
securityvulns
securityvulns
•added 2006/11/28 12:00 a.m.•84 views

[Full-disclosure] REMLAB Web Mech Designer 2.0.5 Path Disclosure Vulnerability

Description: REMLAB http://remlab.sourceforge.net/ is a fully fuctional cross-platform web-based Battlemech designer for the tactical board game Battletech http://www.classicbattletech.com/ . REMLAB is built entirely on HTML, PHP, and JavaScript with AJAX functionality. The vulnerability exists i...

5CVSS5.9AI score0.01634EPSS
SaveExploits1
Tenable Nessus
Tenable Nessus
•added 2006/11/06 12:00 a.m.•13 views

Solaris 2.6 (sparc) : 106646-03

The remote host is missing Sun Security Patch number 106646-03 SNC 3.2: rpc.pcnfsd has security problem, also hangs and dumps core. Date this patch was last updated by Sun : Wed Jan 08 03:39:58 MST 2003 You should install this patch for your system to be up-to-date. %NASLMINLEVEL 999999...

7.5AI score
SaveExploits0
Rows per page
Query Builder