Lucene search
+L

171 matches found

Drupal
Drupal
added 2010/11/17 12:00 a.m.17 views

SA-CONTRIB-2010-104 - Relevant Content - Information Disclosure

The Relevant Content module provides a block and CCK field which contain links to other nodes on the site which are considered "relevant" to the current nodes based on number of shared taxonomy terms. The Relevant Content module does not implement node access logic properly, resulting in the...

6.8AI score
SaveExploits0References9
OpenVAS
OpenVAS
added 2008/01/17 12:00 a.m.50 views

Debian: Security Advisory (DSA-638-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS7.1AI score0.02965EPSS
SaveExploits0References3
NVD
NVD
added 2007/03/28 12:19 a.m.27 views

CVE-2007-1717

The mail function in PHP 4.0.0 through 4.4.6 and 5.0.0 through 5.2.1 truncates e-mail messages at the first ASCIIZ '\0' byte, which might allow context-dependent attackers to prevent intended information from being delivered in e-mail messages. NOTE: this issue might be security-relevant in cases...

5CVSS6.2AI score0.0465EPSS
SaveExploits3References14
UbuntuCve
UbuntuCve
added 2007/03/28 12:19 a.m.53 views

CVE-2007-1717

The mail function in PHP 4.0.0 through 4.4.6 and 5.0.0 through 5.2.1 truncates e-mail messages at the first ASCIIZ '\0' byte, which might allow context-dependent attackers to prevent intended information from being delivered in e-mail messages. NOTE: this issue might be security-relevant in cases...

5CVSS5.9AI score0.0465EPSS
SaveExploits3References1
Prion
Prion
added 2007/03/28 12:19 a.m.26 views

Code injection

The mail function in PHP 4.0.0 through 4.4.6 and 5.0.0 through 5.2.1 truncates e-mail messages at the first ASCIIZ '\0' byte, which might allow context-dependent attackers to prevent intended information from being delivered in e-mail messages. NOTE: this issue might be security-relevant in cases...

5CVSS6.3AI score0.0465EPSS
SaveExploits3References14Affected Software1
UbuntuCve
UbuntuCve
added 2006/06/14 11:02 p.m.46 views

CVE-2006-3017

zendhashdelkeyorindex in zendhash.c in PHP before 4.4.3 and 5.x before 5.1.3 can cause zendhashdel to delete the wrong element, which prevents a variable from being unset even when the PHP unset function is called, which might cause the variable's value to be used in security-relevant operations...

9.3CVSS5.9AI score0.04136EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2006/06/14 11:00 p.m.36 views

CVE-2006-3017

zendhashdelkeyorindex in zendhash.c in PHP before 4.4.3 and 5.x before 5.1.3 can cause zendhashdel to delete the wrong element, which prevents a variable from being unset even when the PHP unset function is called, which might cause the variable's value to be used in security-relevant operations...

6AI score0.04136EPSS
SaveExploits0References36
UbuntuCve
UbuntuCve
added 2006/03/15 7:06 p.m.30 views

CVE-2006-1244

Unspecified vulnerability in certain versions of xpdf after 3.00, as used in various products including a pdfkit.framework, b gpdf, c pdftohtml, and d libextractor, has unknown impact and user-assisted attack vectors, possibly involving errors in 1 gmem.c, 2 SplashXPathScanner.cc, 3 JBIG2Stream.c...

7.6CVSS5.9AI score0.02189EPSS
SaveExploits0References2
myhack58
myhack58
added 2005/12/23 12:00 a.m.32 views

Parsing Asp. net Trojan file operations-vulnerability warning-the black bar safety net

Start Asp. net Trojan EvilSpy of preparation, name is boss ice blood to play, quite good. This article main introduce Asp. net Trojan file operation function of the specific implementation. You want to write Asp. net Trojan, the first to import the name space System. IO. The name space System. IO...

6.8AI score
SaveExploits0
NVD
NVD
added 2005/11/01 12:47 p.m.26 views

CVE-2005-2750

Software Update in Mac OS X 10.4.2, when the user marks all updates to be ignored, exits without asking the user to reset the status of the updates, which could prevent important, security-relevant updates from being installed...

2.1CVSS6.5AI score0.0035EPSS
SaveExploits0References7
Cvelist
Cvelist
added 2005/11/01 11:00 a.m.37 views

CVE-2005-2750

Software Update in Mac OS X 10.4.2, when the user marks all updates to be ignored, exits without asking the user to reset the status of the updates, which could prevent important, security-relevant updates from being installed...

6.5AI score0.0035EPSS
SaveExploits0References7
Rows per page
Query Builder