CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

1737 matches found

Debian CVE•added 2006/06/02 7:0 p.m.•54 views

CVE-2006-2779

Mozilla Firefox and Thunderbird before 1.5.0.4 allow remote attackers to cause a denial of service crash and possibly execute arbitrary code via 1 nested tags in a select tag, 2 a DOMNodeRemoved mutation event, 3 "Content-implemented tree views," 4 BoxObjects, 5 the XBL implementation, 6 an ifram...

9.3CVSS7.4AI score0.0696EPSS

Exploits0

securityvulns•added 2006/04/10 12:0 a.m.•32 views

[Full-disclosure] Oracle read-only user can insert/update/delete data via specially crafted views

Hello Full Disclosure Last Thursday 6th April 2006, Oracle released a note on the Oracle knowledgebase Metalink with details about an unfixed security vulnerability =0day and a working test case =exploit code which effects all versions of Oracle from 9.2.0.0 to 10.2.0.3. This note "363848.1 - A...

0.9AI score

Exploits0

Positive Technologies•added 2006/01/22 12:0 a.m.•9 views

PT-2006-1440 · Oracle · Mysql Server

Name of the Vulnerable Software and Affected Versions: MySQL version 5.0.18 Description: The issue allows local users with access to a VIEW to obtain sensitive information via the "SELECT FROM information schema.views;" query, which returns the query that created the VIEW. It is noted that the...

2.1CVSS6.4AI score0.00802EPSS

Exploits0References9

NVD•added 2005/11/02 11:2 a.m.•31 views

CVE-2005-3438

Multiple unspecified vulnerabilities in Oracle Database Server 9i up to 10.1.0.4.2 have unknown impact and attack vectors, aka Oracle Vuln 1 DB04 in Change Data Capture; 2 DB06 in Data Guard Logical Standby; 3 DB10 in Locale; 4 DB12 in Materialized Views; 5 DB13 in Objects Extension; 6 DB15 in...

10CVSS7AI score0.05866EPSS

Exploits5References7

NVD•added 2005/11/02 11:2 a.m.•15 views

CVE-2005-3442

Multiple unspecified vulnerabilities in Oracle Database Server 8i up to 10.1.0.4.2 have unknown impact and attack vectors, aka Oracle Vuln 1 DB09 in Export, 2 DB11 in Materialized Views, and 3 DB16 in Security Service...

10CVSS6.5AI score0.02884EPSS

Exploits0References5

Cvelist•added 2005/11/02 11:0 a.m.•30 views

CVE-2005-3438

7AI score0.05866EPSS

Exploits5References7

0day.today•added 2005/08/30 12:0 a.m.•35 views

Gopher <= 3.0.9 (+VIEWS) Remote (Client Side) Buffer Overflow Exploit

Exploit for linux platform in category local exploits ===================================================================== Gopher bindshell port The Internet Gopher Client is based on the UMN Gopher/Gopherd 2.3.1 code. Gopher is an Internet technology that predates the Web. It presents informati...

6.8AI score

Exploits0

exploitpack•added 2005/08/30 12:0 a.m.•17 views

Gopher 3.0.9 - +VIEWS Client-Side Buffer Overflow

Gopher 3.0.9 - +VIEWS Client-Side Buffer Overflow / gopherv3.0.9+: remote client buffer overflow exploit. by: vade79/v9 [email protected] fakehalo/realhalo compile: gcc xgopher-client.c -o xgopher-client syntax: ./xgopher-client bindshell port The Internet Gopher Client is based on the UMN...

0.7AI score

Exploits0

Cvelist•added 2005/07/10 4:0 a.m.•23 views

CVE-2004-2185

Multiple cross-site scripting XSS vulnerabilities in MediaWiki 1.3.5 allow remote attackers to execute arbitrary scripts and/or SQL queries via 1 the UnicodeConverter extension, 2 raw page views, 3 SpecialIpblocklist, 4 SpecialEmailuser, 5 SpecialMaintenance, and 6 ImagePage...

6.7AI score0.02039EPSS

Exploits0References2

Debian CVE•added 2005/07/10 4:0 a.m.•40 views

CVE-2004-2185

6.8CVSS6.7AI score0.02039EPSS

Exploits0

securityvulns•added 2005/05/03 12:0 a.m.•41 views

ASP.NET __VIEWSTATE crypto validation prone to replay attacks

Good morning, ASP.NET's extremely popular VIEWSTATE functionality provides an automatic, uniform method for storing current state of all webpage "controls" including form fields, database views, etc, so that user-entered data automagically persists and is populated across newly rendered HTML, and...

Exploits0