Lucene search
+L

10512 matches found

CVE
CVE
added 2009/04/13 4:00 p.m.48 views

CVE-2009-1287

CVE-2009-1287 concerns Cisco Subscriber Edge Services Manager (SESM) and describes a Cross-site scripting (XSS) vulnerability that allows remote attackers to inject arbitrary web script or HTML via the URI. The available documents identify SESM as the affected product and specify the vulnerabilit...

4.3CVSS5.9AI score0.23149EPSS
SaveExploits1References4Affected Software1
Exploit DB
Exploit DB
added 2009/04/13 12:00 a.m.31 views

Banshee 1.4.2 DAAP Extension - '/apps/web/vs_diag.cgi' Cross-Site Scripting

source: https://www.securityfocus.com/bid/34507/info Banshee DAAP Extension is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in th...

5.8AI score
SaveExploits0
exploitpack
exploitpack
added 2009/04/13 12:00 a.m.14 views

Banshee 1.4.2 DAAP Extension - appswebvs_diag.cgi Cross-Site Scripting

Banshee 1.4.2 DAAP Extension - appswebvsdiag.cgi Cross-Site Scripting source: https://www.securityfocus.com/bid/34507/info Banshee DAAP Extension is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to...

SaveExploits0
OpenVAS
OpenVAS
added 2009/04/09 12:00 a.m.31 views

Mandriva Update for libneon0.26 MDKSA-2007:013 (libneon0.26)

Check for the Version of libneon0.26 OpenVAS Vulnerability Test Mandriva Update for libneon0.26 MDKSA-2007:013 libneon0.26 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or...

7.8CVSS6.5AI score0.02159EPSS
SaveExploits0References2
OpenVAS
OpenVAS
added 2009/04/09 12:00 a.m.36 views

Mandriva Update for lynx MDVSA-2008:218 (lynx)

Check for the Version of lynx OpenVAS Vulnerability Test Mandriva Update for lynx MDVSA-2008:218 lynx Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the ter...

10CVSS0.2AI score0.0506EPSS
SaveExploits0References2
OpenVAS
OpenVAS
added 2009/04/09 12:00 a.m.43 views

Mandriva Update for konqueror MDKSA-2007:176 (konqueror)

Check for the Version of konqueror OpenVAS Vulnerability Test Mandriva Update for konqueror MDKSA-2007:176 konqueror Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify i...

6.8CVSS0.7AI score0.02562EPSS
SaveExploits0References2
OpenVAS
OpenVAS
added 2009/04/09 12:00 a.m.15 views

Mandriva Update for inkscape MDKSA-2007:069 (inkscape)

Check for the Version of inkscape OpenVAS Vulnerability Test Mandriva Update for inkscape MDKSA-2007:069 inkscape Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

6.8CVSS0.03364EPSS
SaveExploits0References2
OpenVAS
OpenVAS
added 2009/04/09 12:00 a.m.31 views

Mandriva Update for kdelibs MDKSA-2007:054 (kdelibs)

Check for the Version of kdelibs OpenVAS Vulnerability Test Mandriva Update for kdelibs MDKSA-2007:054 kdelibs Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it unde...

4.3CVSS0.1AI score0.08185EPSS
SaveExploits2References2
Cvelist
Cvelist
added 2009/04/07 11:00 p.m.37 views

CVE-2009-0796

Cross-site scripting XSS vulnerability in Status.pm in Apache::Status and Apache2::Status in modperl1 and modperl2 for the Apache HTTP Server, when /perl-status is accessible, allows remote attackers to inject arbitrary web script or HTML via the URI...

8AI score0.29638EPSS
SaveExploits4References17
NVD
NVD
added 2009/04/01 6:30 p.m.27 views

CVE-2009-1219

Sun Calendar Express Web Server in Sun ONE Calendar Server 6.0 and Sun Java System Calendar Server 6 2004Q2 through 6.3-7.01 allows remote attackers to cause a denial of service daemon crash via multiple requests to the default URI with alphabetic characters in the tzid parameter...

5CVSS6.5AI score0.08698EPSS
SaveExploits3References6
Prion
Prion
added 2009/04/01 1:30 a.m.14 views

Cross site scripting

Cross-site scripting XSS vulnerability in TikiWiki Tiki CMS/Groupware 2.2 allows remote attackers to inject arbitrary web script or HTML via the PHPSELF portion of a URI to 1 tiki-galleries.php, 2 tiki-listfilegallery.php, 3 tiki-listpages.php, and 4 tiki-orphanpages.php...

4.3CVSS6.1AI score0.0454EPSS
SaveExploits4References9Affected Software1
NVD
NVD
added 2009/04/01 1:30 a.m.22 views

CVE-2009-1204

Cross-site scripting XSS vulnerability in TikiWiki Tiki CMS/Groupware 2.2 allows remote attackers to inject arbitrary web script or HTML via the PHPSELF portion of a URI to 1 tiki-galleries.php, 2 tiki-listfilegallery.php, 3 tiki-listpages.php, and 4 tiki-orphanpages.php...

4.3CVSS5.6AI score0.0454EPSS
SaveExploits4References9
Cvelist
Cvelist
added 2009/04/01 1:00 a.m.27 views

CVE-2009-1204

Cross-site scripting XSS vulnerability in TikiWiki Tiki CMS/Groupware 2.2 allows remote attackers to inject arbitrary web script or HTML via the PHPSELF portion of a URI to 1 tiki-galleries.php, 2 tiki-listfilegallery.php, 3 tiki-listpages.php, and 4 tiki-orphanpages.php...

5.6AI score0.0454EPSS
SaveExploits4References9
exploitpack
exploitpack
added 2009/03/26 12:00 a.m.21 views

PhotoStand 1.2.0 - Remote Command Execution

PhotoStand 1.2.0 - Remote Command Execution !/usr/bin/perl App : PhotoStand 1.2.0 Site : http://www.photostand.org Remote Command Execution Exploit Credits to : Giovanni Buzzin, "Osirys" osirysatautisticidotorg Greets: drosophila, emgent, Fireshot PhotoStand is a used Image Gallery CMS. PhotoStan...

0.1AI score
SaveExploits0
Prion
Prion
added 2009/03/25 6:30 p.m.17 views

Design/Logic Flaw

Multiple argument injection vulnerabilities in PPLive.exe in PPLive 1.9.21 and earlier allow remote attackers to execute arbitrary code via a UNC share pathname in the LoadModule argument to the 1 synacast, 2 Play, 3 pplsv, or 4 ppvod URI handler. NOTE: some of these details are obtained from thi...

9.3CVSS8.5AI score0.05136EPSS
SaveExploits1References4Affected Software1
CVE
CVE
added 2009/03/25 6:00 p.m.49 views

CVE-2009-1087

CVE-2009-1087 affects PPLive and its PPLive.exe component up to version 1.9.21. The vulnerability is caused by multiple argument injection flaws in the LoadModule URI handler used by several components (synacast, Play, pplsv, ppvod), allowing remote attackers to execute arbitrary code via a UNC s...

9.3CVSS8.1AI score0.05136EPSS
SaveExploits1References4Affected Software1
UbuntuCve
UbuntuCve
added 2009/03/23 2:19 p.m.29 views

CVE-2008-6505

Multiple directory traversal vulnerabilities in Apache Struts 2.0.x before 2.0.12 and 2.1.x before 2.1.3 allow remote attackers to read arbitrary files via a ..%252f encoded dot dot slash in a URI with a /struts/ path, related to 1 FilterDispatcher in 2.0.x and 2 DefaultStaticContentLoader in 2.1...

5CVSS5.9AI score0.72711EPSS
SaveExploits1References1
OpenVAS
OpenVAS
added 2009/03/23 12:00 a.m.52 views

Ubuntu Update for firefox-3.0, xulrunner-1.9 vulnerabilities USN-626-1

Ubuntu Update for Linux kernel vulnerabilities USN-626-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN6261.nasl 7969 2017-12-01 09:23:16Z santu $ Ubuntu Update for firefox-3.0, xulrunner-1.9 vulnerabilities USN-626-1 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks Gmb...

9.3CVSS0.9AI score0.05284EPSS
SaveExploits4References2
OpenVAS
OpenVAS
added 2009/03/23 12:00 a.m.46 views

Ubuntu Update for firefox vulnerabilities USN-623-1

Ubuntu Update for Linux kernel vulnerabilities USN-623-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN6231.nasl 7969 2017-12-01 09:23:16Z santu $ Ubuntu Update for firefox vulnerabilities USN-623-1 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH,...

9.3CVSS0.8AI score0.05284EPSS
SaveExploits2References2
NVD
NVD
added 2009/03/20 6:30 p.m.20 views

CVE-2008-6500

Cross-site scripting XSS vulnerability in CodeToad ASP Shopping Cart Script allows remote attackers to inject arbitrary web script or HTML via the query string to the default URI...

4.3CVSS5.7AI score0.01445EPSS
SaveExploits2References3
Rows per page
Query Builder