Lucene search
K

796 matches found

Packet Storm
Packet Storm
added 2011/03/18 12:0 a.m.32 views

Shape Web Solutions CMS SQL Injection

Shape Web Solutions CMS SQL Injection Vulnerability Exploit Title: Shape Web Solutions CMS SQL Injection Vulnerability Arrow Credit : Ashiyane Digital Security Team Date: 03-18-2011 Author: HashoR Vendor or Software Link: http://www.shapeweb.com.br/ Version: All version Category:: webapps Google...

0.1AI score
Exploits0
NVD
NVD
added 2011/02/10 7:0 p.m.24 views

CVE-2011-0977

Use-after-free vulnerability in Microsoft Office XP SP3, Office 2003 SP3, Office 2007 SP2, Office 2004 and 2008 for Mac, and Open XML File Format Converter for Mac allows remote attackers to execute arbitrary code via malformed shape data in the Office drawing file format, aka "Microsoft Office...

9.3CVSS7.5AI score0.62606EPSS
Exploits1References9
Zero Day Initiative
Zero Day Initiative
added 2011/02/07 12:0 a.m.34 views

(0Day) Microsoft Office Drawing Object Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Excel 2007. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

10CVSS5AI score0.62606EPSS
Exploits1References1
seebug.org
seebug.org
added 2010/11/10 12:0 a.m.45 views

Microsoft Office Drawing Shape Container Parsing Vulnerability

No description provided by source. ====================================================================== Secunia Research 09/11/2010 - Microsoft Office Drawing Shape Container Parsing Vulnerability - ====================================================================== Table of Contents Affecte...

9.3CVSS6.5AI score0.65803EPSS
Exploits2
Zero Day Initiative
Zero Day Initiative
added 2010/08/23 12:0 a.m.14 views

IBM Lotus Notes Autonomy KeyView Office Shape Parsing Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of IBM Lotus Notes Email Client. User interaction is required to exploit this vulnerability in that the target must open a malicious email attachment. The specific flaw exists within the Lotus Notes...

10CVSS7.6AI score
Exploits0References1
Check Point Advisories
Check Point Advisories
added 2010/02/09 12:0 a.m.4 views

Microsoft Office Drawing Shape Group Properties Buffer Overflow (MS10-003; CVE-2010-0243)

Microsoft Excel is a popular spreadsheet application. A remote code execution vulnerability has been reported in the way Microsoft Office handles specially crafted Excel files. The vulnerability is due to a memory corruption error in Microsoft Office when loading malformed Excel records. A remote...

9.3CVSS7.3AI score0.43397EPSS
Exploits0
myhack58
myhack58
added 2009/05/06 12:0 a.m.17 views

Ann can resolution I is male and female it?-- Keep track of the same shape word attack techniques-vulnerability warning-the black bar safety net

An attacker in order to achieve the attack purpose, they in the network link can be described under the foot work: in order to convince the user to click a link, find ways to make these links look a bit of a problem are not, however, as long as the user clicks on to be brought into the...

0.6AI score
Exploits0
RedHat Linux
RedHat Linux
added 2008/06/30 3:33 p.m.2 views

JFreeChart: XSS vulnerabilities in the image map feature

Multiple cross-site scripting XSS vulnerabilities in the image map feature in JFreeChart 1.0.8 allow remote attackers to inject arbitrary web script or HTML via the 1 chart name or 2 chart tool tip text; or the 3 href, 4 shape, or 5 coords attribute of a chart area...

4.3CVSS5.8AI score0.02289EPSS
Exploits1References4
RedHat Linux
RedHat Linux
added 2008/04/02 8:44 p.m.3 views

JFreeChart: XSS vulnerabilities in the image map feature

Multiple cross-site scripting XSS vulnerabilities in the image map feature in JFreeChart 1.0.8 allow remote attackers to inject arbitrary web script or HTML via the 1 chart name or 2 chart tool tip text; or the 3 href, 4 shape, or 5 coords attribute of a chart area...

4.3CVSS5.8AI score0.02289EPSS
Exploits1References4
RedHat Linux
RedHat Linux
added 2008/04/02 8:42 p.m.3 views

JFreeChart: XSS vulnerabilities in the image map feature

Multiple cross-site scripting XSS vulnerabilities in the image map feature in JFreeChart 1.0.8 allow remote attackers to inject arbitrary web script or HTML via the 1 chart name or 2 chart tool tip text; or the 3 href, 4 shape, or 5 coords attribute of a chart area...

4.3CVSS5.8AI score0.02289EPSS
Exploits1References4
OSV
OSV
added 2007/12/11 9:46 p.m.3 views

DEBIAN-CVE-2007-6306

Multiple cross-site scripting XSS vulnerabilities in the image map feature in JFreeChart 1.0.8 allow remote attackers to inject arbitrary web script or HTML via the 1 chart name or 2 chart tool tip text; or the 3 href, 4 shape, or 5 coords attribute of a chart area...

4.3CVSS5.9AI score0.02289EPSS
Exploits1References1
NVD
NVD
added 2006/09/07 12:4 a.m.15 views

CVE-2006-4615

Shape Services IM+ Mobile Instant Messenger for Pocket PC 3.10 stores usernames and passwords in plaintext in %PROGRAMFILES%\IMPlus\implus.cfg, which allows local users to obtain sensitive information by reading the file...

4.9CVSS5.8AI score0.00069EPSS
Exploits1References3
CVE
CVE
added 2006/09/07 12:0 a.m.41 views

CVE-2006-4615

The CVE documents a vulnerability in Shape Services IM+ Mobile Instant Messenger for Pocket PC, version 3.10, where usernames and passwords are stored in plaintext in %PROGRAMFILES%\IMPlus\implus.cfg. This local-access issue allows a user with file-read privileges to obtain credentials. Affected ...

4.9CVSS6.1AI score0.00069EPSS
Exploits1References3Affected Software1
VulnCheck KEV
VulnCheck KEV
added 2006/08/08 12:0 a.m.1 views

VulnCheck KEV: CVE-2006-3590

mso.dll, as used by Microsoft PowerPoint 2000 through 2003, allows user-assisted attackers to execute arbitrary commands via a malformed shape container in a PPT file that leads to memory corruption, as exploited by Trojan.PPDropper.B, a different issue than CVE-2006-1540 and CVE-2006-3493...

9.3CVSS6.1AI score0.70342EPSS
Exploits2References1
Microsoft KB
Microsoft KB
added 1970/01/01 12:0 a.m.2 views

Security update 1970-01-01

...

5.3AI score
Exploits0
Microsoft KB
Microsoft KB
added 1970/01/01 12:0 a.m.3 views

Security update 1970-01-01

...

5.3AI score
Exploits0
Rows per page
Query Builder