2326 matches found
MDaemon IMAP Server DoS Vulnerability (CVE-2001-0584)
It is possible to crash the remote MDaemon IMAP server by sending a too long argument to the SPDX-FileCopyrightText: 2004 David Maciejak Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
Shambala web server DoS
It was possible to kill the web server by sending a malicious request. SPDX-FileCopyrightText: 2002 Michel Arboi Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
PHP-Nuke <= 5.2 Arbitrary File Upload Vulnerability
PHP-Nuke is prone to an arbitrary file upload vulnerability in admin.php. SPDX-FileCopyrightText: 2001 SecurITeam Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later CPE =...
Artmedic Kleinanzeigen File Inclusion Vulnerability
Artmedic Kleinanzeigen, an email verifying PHP script, has been found to contain an external file inclusion vulnerability. SPDX-FileCopyrightText: 2004 Noam Rathaus Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...
RealMedia Server DoS Vulnerability
It is possible to crash a RealServer version 7 by sending a malformed HTTP request. SPDX-FileCopyrightText: 2000 John Lampe Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
SimpleServer remote execution
By sending a specially encoded string to the remote server, it is possible to execute remote commands with the privileges of the server. SPDX-FileCopyrightText: 2001 Mathieu Meadele Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right...
DotNetNuke < 3.0.12 Multiple HTML Injection Vulnerabilities
DotNetNuke contains several input validation flaws leading to the execution of attacker supplied HTML and script code. SPDX-FileCopyrightText: 2005 Josh Zlatin-Amishav Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...
FSP Suite Directory Traversal Vulnerability
The FSP Suite daemon has been found to improperly filter out paths with trailing / or starting with /. This would allow an attacker access to files that reside outside the bounding FSP root directory. SPDX-FileCopyrightText: 2004 Noam Rathaus Some text descriptions might be excerpted from a...
QuiXplorer < 2.3.1 Directory Traversal Vulnerability
QuiXplorer is prone to a directory traversal vulnerability. SPDX-FileCopyrightText: 2005 Noam Rathaus Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
WS FTP Server Session Hijacking Vulnerability (Nov 2005)
WSFTP server is prone to session hijacking during passive connections and to a FTP bounce attack when a user submits a specially crafted FTP command. SPDX-FileCopyrightText: 2005 David Maciejak Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...
akfingerd <= 0.5 Multiple Vulnerabilities
The remote finger service appears to be vulnerable to a remote attack which can disrupt the service of the finger daemon. This denial of service does not effect other services that may be running on the remote computer, only the finger service can be disrupted. SPDX-FileCopyrightText: 2002 Andrew...
Buffer Overrun in Messenger Service (828035)
A security vulnerability exists in the Messenger Service that could allow arbitrary code execution on an affected system. This plugin determined by reading the remote registry that the patch MS03-043 has not been applied. SPDX-FileCopyrightText: 2003 Jeff Adams Some text descriptions might be...
SMB Registry : SQL7 Patches
The remote SQL server seems to be vulnerable to the SQL abuse vulnerability described in technet article Q256052. This problem allows an attacker who has to ability to execute SQL queries on this host to gain elevated privileges. OpenVAS Vulnerability Test $Id: smbmssql7.nasl 6056 2017-05-02...
ping.asp
The 'ping.asp' CGI is installed. Some versions allows a cracker to launch a ping flood against your machine or another by entering '127.0.0.1 -l 65000 -t' in the Address field. OpenVAS Vulnerability Test $Id: pingasp.nasl 8023 2017-12-07 08:36:26Z teissa $ Description: ping.asp Authors: Michel...
CVS file existence information disclosure weakness
The remote CVS server, according to its version number, can be exploited by malicious users to gain knowledge of certain system information. SPDX-FileCopyrightText: 2004 David Maciejak Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right...
cgi.rb
The SPDX-FileCopyrightText: 2004 David Maciejak Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.15710";...
Sambar pagecount Vulnerability - Active Check
By default, there is a pagecount script with Sambar Web Server located at http://sambarserver/session/pagecount. This counter writes its temporary files in c:\sambardirectory\tmp. It allows to overwrite any files on the filesystem since the SPDX-FileCopyrightText: 2001 StrongHoldNet...
PPTP Server Buffer Overflow Vulnerability
The remote PPTP server is prone to a remote buffer overflow vulnerability. SPDX-FileCopyrightText: 2003 Xue Yong Zhi Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Quake3 Arena 1.29 f/g DOS
It was possible to crash the Quake3 Arena daemon by sending a specially crafted login string. SPDX-FileCopyrightText: 2001 Michel Arboi Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
Sun Java Runtime Environment < 1.4.2_04 DoS Vulnerability
The remote Windows machine is running a Java SDK or JRE version 1.4.203 and prior which is vulnerable to a DoS attack. SPDX-FileCopyrightText: 2004 Netteksecure Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...