Lucene search
K

7 matches found

SUSE CVE
SUSE CVE
added 2023/02/15 6:1 a.m.4 views

SUSE CVE-2009-5028

Stack-based buffer overflow in Namazu before 2.0.20 allows remote attackers to cause a denial of service daemon crash or possibly execute arbitrary code via a crafted request containing an empty uri field...

7.5CVSS8.3AI score0.03934EPSS
Exploits0References3
OSV
OSV
added 2019/02/11 5:29 p.m.2 views

UBUNTU-CVE-2019-7732

In Live555 0.95, a setup packet can cause a memory leak leading to DoS because, when there are multiple instances of a single field username, realm, nonce, uri, or response, only the last instance can ever be freed...

7.5CVSS7.1AI score0.00334EPSS
Exploits0References3
NVD
NVD
added 2018/12/25 11:29 p.m.8 views

CVE-2018-20465

Craft CMS through 3.0.34 allows remote authenticated administrators to read sensitive information via server-side template injection, as demonstrated by a % string for craft.app.config.DB.user and craft.app.config.DB.password in the URI Format of the Site Settings, which causes a cleartext userna...

7.2CVSS6.7AI score0.00664EPSS
Exploits1References2
Prion
Prion
added 2018/12/25 11:29 p.m.7 views

Design/Logic Flaw

Craft CMS through 3.0.34 allows remote authenticated administrators to read sensitive information via server-side template injection, as demonstrated by a % string for craft.app.config.DB.user and craft.app.config.DB.password in the URI Format of the Site Settings, which causes a cleartext userna...

4CVSS6.6AI score0.00664EPSS
Exploits1References2Affected Software1
CNVD
CNVD
added 2017/11/21 12:0 a.m.4 views

dayrui FineCms Cross-Site Request Forgery Vulnerability

dayrui FineCms is China Tianrui dayrui program design team released a set of content management system CMS using MVC architecture and PDO database interface development. A cross-site request forgery vulnerability exists in version 5.2.0 of dayrui FineCms before 2017.11.16. A remote attacker can...

6.1CVSS6.9AI score0.00266EPSS
Exploits0References1
OSV
OSV
added 2017/11/16 9:29 p.m.3 views

CVE-2017-16866

dayrui FineCms 5.2.0 before 2017.11.16 has Cross Site Scripting XSS in core/MController.php via the DRURI field...

6.1CVSS5.8AI score
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2011/11/30 4:5 a.m.2 views

CVE-2009-5028

Stack-based buffer overflow in Namazu before 2.0.20 allows remote attackers to cause a denial of service daemon crash or possibly execute arbitrary code via a crafted request containing an empty uri field...

7.5CVSS6.5AI score0.03934EPSS
Exploits0References9
Rows per page
Query Builder