Lucene search
+L
CvelistMost viewed

381205 matches found

Cvelist
Cvelist
•added 2018/09/21 1:0 p.m.•65 views

CVE-2018-14645

A flaw was discovered in the HPACK decoder of HAProxy, before 1.8.14, that is used for HTTP/2. An out-of-bounds read access in hpackvalididx resulted in a remote crash and denial of service...

7.5CVSS7.3AI score0.03009EPSS
SaveExploits0References5
Cvelist
Cvelist
•added 2018/08/20 8:0 p.m.•65 views

CVE-2018-1000226

Cobbler version Verified as present in Cobbler versions 2.6.11+, but code inspection suggests at least 2.0.0+ or possibly even older versions may be vulnerable contains a Incorrect Access Control vulnerability in XMLRPC API /cobblerapi that can result in Privilege escalation, data manipulation or...

9.7AI score0.12484EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2018/04/19 2:0 a.m.•65 views

CVE-2018-2761

Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Client programs. Supported versions that are affected are 5.5.59 and prior, 5.6.39 and prior and 5.7.21 and prior. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocol...

6AI score0.0401EPSS
SaveExploits0References17
Cvelist
Cvelist
•added 2017/06/08 6:0 p.m.•65 views

CVE-2014-3498

The user module in ansible before 1.6.6 allows remote authenticated users to execute arbitrary commands...

8.7AI score0.02521EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2016/06/01 8:0 p.m.•65 views

CVE-2016-3697

libcontainer/user/user.go in runC before 0.1.0, as used in Docker before 1.11.2, improperly treats a numeric UID as a potential username, which allows local users to gain privileges via a numeric username in the password file in a container...

7.5AI score0.00388EPSS
SaveExploits0References8
Cvelist
Cvelist
•added 2015/10/21 11:0 p.m.•65 views

CVE-2015-4879

Unspecified vulnerability in Oracle MySQL Server 5.5.44 and earlier, and 5.6.25 and earlier, allows remote authenticated users to affect confidentiality, integrity, and availability via vectors related to DML...

5.2AI score0.04172EPSS
SaveExploits0References13
Cvelist
Cvelist
•added 2015/05/18 3:0 p.m.•65 views

CVE-2015-3306

The modcopy module in ProFTPD 1.3.5 allows remote attackers to read and write to arbitrary files via the site cpfr and site cpto commands...

9.4AI score0.96803EPSS
SaveExploits25References14
Cvelist
Cvelist
•added 2015/05/01 12:0 a.m.•65 views

CVE-2014-8361

The miniigd SOAP service in Realtek SDK allows remote attackers to execute arbitrary code via a crafted NewInternalClient request, as exploited in the wild through 2023...

7AI score0.99975EPSS
SaveExploits6References9
Cvelist
Cvelist
•added 2015/04/16 4:0 p.m.•65 views

CVE-2015-0441

Unspecified vulnerability in Oracle MySQL Server 5.5.41 and earlier, and 5.6.22 and earlier, allows remote authenticated users to affect availability via unknown vectors related to Server : Security : Encryption...

4.9AI score0.04473EPSS
SaveExploits0References11
Cvelist
Cvelist
•added 2015/01/21 6:0 p.m.•65 views

CVE-2015-0374

Unspecified vulnerability in Oracle MySQL Server 5.5.40 and earlier and 5.6.21 and earlier allows remote authenticated users to affect confidentiality via unknown vectors related to Server : Security : Privileges : Foreign Key...

6.1AI score0.03131EPSS
SaveExploits0References18
Cvelist
Cvelist
•added 2014/10/15 10:3 p.m.•65 views

CVE-2014-6505

Unspecified vulnerability in Oracle MySQL Server 5.5.38 and earlier, and 5.6.19 and earlier, allows remote authenticated users to affect availability via vectors related to SERVER:MEMORY STORAGE ENGINE...

6.3AI score0.02667EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2014/10/15 10:3 p.m.•65 views

CVE-2014-6496

Unspecified vulnerability in Oracle MySQL Server 5.5.39 and earlier, and 5.6.20 and earlier, allows remote attackers to affect availability via vectors related to CLIENT:SSL:yaSSL, a different vulnerability than CVE-2014-6494...

6.6AI score0.04349EPSS
SaveExploits0References8
Cvelist
Cvelist
•added 2014/10/15 3:15 p.m.•65 views

CVE-2014-6463

Unspecified vulnerability in Oracle MySQL Server 5.5.38 and earlier and 5.6.19 and earlier allows remote authenticated users to affect availability via vectors related to SERVER:REPLICATION ROW FORMAT BINARY LOG DML...

6.3AI score0.02815EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2014/10/15 3:15 p.m.•65 views

CVE-2014-6464

Unspecified vulnerability in Oracle MySQL Server 5.5.39 and earlier and 5.6.20 and earlier allows remote authenticated users to affect availability via vectors related to SERVER:INNODB DML FOREIGN KEYS...

5.7AI score0.04098EPSS
SaveExploits0References8
Cvelist
Cvelist
•added 2014/07/07 2:0 p.m.•66 views

CVE-2014-0035

The SymmetricBinding in Apache CXF before 2.6.13 and 2.7.x before 2.7.10, when EncryptBeforeSigning is enabled and the UsernameToken policy is set to an EncryptedSupportingToken, transmits the UsernameToken in cleartext, which allows remote attackers to obtain sensitive information by sniffing th...

6AI score0.07053EPSS
SaveExploits0References14
Cvelist
Cvelist
•added 2014/05/07 10:0 a.m.•65 views

CVE-2014-0130

Directory traversal vulnerability in actionpack/lib/abstractcontroller/base.rb in the implicit-render implementation in Ruby on Rails before 3.2.18, 4.0.x before 4.0.5, and 4.1.x before 4.1.1, when certain route globbing configurations are enabled, allows remote attackers to read arbitrary files...

6.2AI score0.53703EPSS
SaveExploits2References4
Cvelist
Cvelist
•added 2014/04/16 2:5 a.m.•65 views

CVE-2014-2438

Unspecified vulnerability in Oracle MySQL Server 5.5.35 and earlier and 5.6.15 and earlier allows remote authenticated users to affect availability via unknown vectors related to Replication...

4AI score0.03175EPSS
SaveExploits0References7
Cvelist
Cvelist
•added 2014/04/16 2:5 a.m.•65 views

CVE-2014-2440

Unspecified vulnerability in the MySQL Client component in Oracle MySQL 5.5.36 and earlier and 5.6.16 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors...

4.5AI score0.04578EPSS
SaveExploits0References8
Cvelist
Cvelist
•added 2014/04/16 2:5 a.m.•65 views

CVE-2014-2436

Unspecified vulnerability in Oracle MySQL Server 5.5.36 and earlier and 5.6.16 and earlier allows remote authenticated users to affect confidentiality, integrity, and availability via vectors related to RBR...

4.1AI score0.03667EPSS
SaveExploits0References8
Cvelist
Cvelist
•added 2013/10/04 5:0 p.m.•65 views

CVE-2013-2222

Multiple stack-based buffer overflows in GNU ZRTPCPP before 3.2.0 allow remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted ZRTP Hello packet to the 1 ZRtp::findBestSASType, 2 ZRtp::findBestAuthLen, 3 ZRtp::findBestCipher, 4 ZRtp::findBestHash, or...

7.5AI score0.04744EPSS
SaveExploits1References8
Cvelist
Cvelist
•added 2013/08/28 5:18 p.m.•65 views

CVE-2013-2035

Race condition in hawtjni-runtime/src/main/java/org/fusesource/hawtjni/runtime/Library.java in HawtJNI before 1.8, when a custom library path is not specified, allows local users to execute arbitrary Java code by overwriting a temporary JAR file with a predictable name in /tmp...

6.8AI score0.00594EPSS
SaveExploits1References18
Cvelist
Cvelist
•added 2013/07/17 10:0 a.m.•65 views

CVE-2013-3805

Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.30 and earlier and 5.6.10 allows remote authenticated users to affect availability via unknown vectors related to Prepared Statements...

5AI score0.02375EPSS
SaveExploits0References7
Cvelist
Cvelist
•added 2013/07/17 10:0 a.m.•65 views

CVE-2013-3801

Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.30 and earlier and 5.6.10 allows remote authenticated users to affect availability via unknown vectors related to Server Options...

5AI score0.03788EPSS
SaveExploits0References8
Cvelist
Cvelist
•added 2013/04/17 2:0 p.m.•65 views

CVE-2013-2392

Unspecified vulnerability in Oracle MySQL 5.1.68 and earlier, 5.5.30 and earlier, and 5.6.10 and earlier allows remote authenticated users to affect availability via unknown vectors related to Server Optimizer...

4.5AI score0.0226EPSS
SaveExploits0References5
Cvelist
Cvelist
•added 2013/04/17 2:0 p.m.•65 views

CVE-2013-2376

Unspecified vulnerability in Oracle MySQL 5.5.30 and earlier and 5.6.10 and earlier allows remote authenticated users to affect availability via unknown vectors related to Stored Procedure...

4.4AI score0.02214EPSS
SaveExploits0References5
Cvelist
Cvelist
•added 2013/04/17 2:0 p.m.•65 views

CVE-2013-2378

Unspecified vulnerability in Oracle MySQL 5.1.67 and earlier, 5.5.29 and earlier, and 5.6.10 and earlier allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors related to Information Schema...

4.4AI score0.02224EPSS
SaveExploits0References5
Cvelist
Cvelist
•added 2013/04/17 12:10 p.m.•65 views

CVE-2013-1552

Unspecified vulnerability in Oracle MySQL 5.1.67 and earlier and 5.5.29 and earlier allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors...

4.6AI score0.02224EPSS
SaveExploits0References5
Cvelist
Cvelist
•added 2013/03/28 5:0 p.m.•65 views

CVE-2013-1808

Cross-site scripting XSS vulnerability in ZeroClipboard.swf and ZeroClipboard10.swf in ZeroClipboard before 1.0.8, as used in em-shorty, RepRapCalculator, Fulcrum, Django, aCMS, and other products, allows remote attackers to inject arbitrary web script or HTML via the id parameter. NOTE: this is...

5.4AI score0.06316EPSS
SaveExploits4References16
Cvelist
Cvelist
•added 2013/01/29 11:0 a.m.•66 views

CVE-2013-1451

Microsoft Internet Explorer 8 and 9, when the Proxy Settings configuration has the same Proxy address and Port values in the HTTP and Secure rows, does not ensure that the SSL lock icon is consistent with the Address bar, which makes it easier for remote attackers to spoof web sites via a crafted...

6.2AI score0.20379EPSS
SaveExploits5References3
Cvelist
Cvelist
•added 2013/01/29 11:0 a.m.•65 views

CVE-2013-1450

Microsoft Internet Explorer 8 and 9, when the Proxy Settings configuration has the same Proxy address and Port values in the HTTP and Secure rows, does not properly reuse TCP sessions to the proxy server, which allows remote attackers to obtain sensitive information intended for a specific host v...

5.7AI score0.08993EPSS
SaveExploits2References3
Cvelist
Cvelist
•added 2013/01/17 1:30 a.m.•65 views

CVE-2013-0367

Unspecified vulnerability in the Server component in Oracle MySQL 5.5.28 and earlier allows remote authenticated users to affect availability via unknown vectors related to Server Partition...

4.4AI score0.02547EPSS
SaveExploits0References6
Cvelist
Cvelist
•added 2012/11/23 8:0 p.m.•65 views

CVE-2011-4085

The servlets invoked by httpha-invoker in JBoss Enterprise Application Platform before 5.1.2, SOA Platform before 5.2.0, BRMS Platform before 5.3.0, and Portal Platform before 4.3 CP07 perform access control only for the GET and POST methods, which allow remote attackers to bypass authentication ...

9.4AI score0.02953EPSS
SaveExploits3References11
Cvelist
Cvelist
•added 2012/07/17 10:0 p.m.•65 views

CVE-2012-1734

Unspecified vulnerability in Oracle MySQL Server 5.1.62 and earlier, and 5.5.23 and earlier, allows remote authenticated users to affect availability via unknown vectors related to Server Optimizer...

4.4AI score0.03917EPSS
SaveExploits0References10
Cvelist
Cvelist
•added 2012/04/18 10:0 a.m.•65 views

CVE-2012-0883

envvars aka envvars-std in the Apache HTTP Server before 2.4.2 places a zero-length directory name in the LDLIBRARYPATH, which allows local users to gain privileges via a Trojan horse DSO in the current working directory during execution of apachectl...

6AI score0.00946EPSS
SaveExploits4References32
Cvelist
Cvelist
•added 2010/08/23 8:0 p.m.•65 views

CVE-2010-3106

The ienipp.ocx ActiveX control in the browser plugin in Novell iPrint Client before 5.42 does not properly validate the debug parameter, which allows remote attackers to execute arbitrary code or cause a denial of service stack memory corruption via a parameter value with a crafted length, relate...

7.5AI score0.37328EPSS
SaveExploits8References3
Cvelist
Cvelist
•added 2010/05/27 6:32 p.m.•65 views

CVE-2010-1459

The default configuration of ASP.NET in Mono before 2.6.4 has a value of FALSE for the EnableViewStateMac property, which allows remote attackers to conduct cross-site scripting XSS attacks, as demonstrated by the VIEWSTATE parameter to 2.0/menu/menu1.aspx in the XSP sample project...

5.5AI score0.01931EPSS
SaveExploits0References6
Cvelist
Cvelist
•added 2010/05/12 3:0 p.m.•65 views

CVE-2010-1482

Cross-site scripting XSS vulnerability in admin/editprefs.php in the backend in CMS Made Simple CMSMS before 1.7.1 might allow remote attackers to inject arbitrary web script or HTML via the dateformatstring parameter...

5.6AI score0.01085EPSS
SaveExploits3References4
Cvelist
Cvelist
•added 2010/03/30 6:0 p.m.•65 views

CVE-2010-0055

xar in Apple Mac OS X 10.5.8 does not properly validate package signatures, which allows attackers to have an unspecified impact via a modified package...

8.7AI score0.01981EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2010/01/22 9:20 p.m.•65 views

CVE-2010-0244

Microsoft Internet Explorer 6, 6 SP1, 7, and 8 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing an object that 1 was not properly initialized or 2 is deleted, leading to memory corruption, aka "Uninitialized Memory Corruption...

8.8AI score0.20759EPSS
SaveExploits2References3
Cvelist
Cvelist
•added 2010/01/13 1:0 a.m.•65 views

CVE-2010-0079

Multiple vulnerabilities in the JRockit component in BEA Product Suite R27.6.5 using JRE/JDK 1.4.2, 5, and 6 allow remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: this CVE identifier overlaps CVE-2009-3867, CVE-2009-3868, CVE-2009-3869,...

6.8AI score0.03088EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2009/10/13 10:0 a.m.•65 views

CVE-2009-3459

Heap-based buffer overflow in Adobe Reader and Acrobat 7.x before 7.1.4, 8.x before 8.1.7, and 9.x before 9.2 allows remote attackers to execute arbitrary code via a crafted PDF file that triggers memory corruption, as exploited in the wild in October 2009. NOTE: some of these details are obtaine...

7.6AI score0.86583EPSS
SaveExploits12References12
Cvelist
Cvelist
•added 2007/12/13 9:0 p.m.•65 views

CVE-2007-6204

Multiple stack-based buffer overflows in HP OpenView Network Node Manager OV NNM 6.41, 7.01, and 7.51 allow remote attackers to execute arbitrary code via unspecified long arguments to 1 ovlogin.exe, 2 OpenView5.exe, 3 snmpviewer.exe, and 4 webappmon.exe, as demonstrated via a long Action paramet...

7.6AI score0.69613EPSS
SaveExploits10References10
Cvelist
Cvelist
•added 2007/11/14 1:0 a.m.•65 views

CVE-2007-3898

The DNS server in Microsoft Windows 2000 Server SP4, and Server 2003 SP1 and SP2, uses predictable transaction IDs when querying other DNS servers, which allows remote attackers to spoof DNS replies, poison the DNS cache, and facilitate further attack vectors...

6.1AI score0.52306EPSS
SaveExploits4References15
Cvelist
Cvelist
•added 2007/02/28 3:0 p.m.•65 views

CVE-2007-1167

inc/filebrowser/browser.php in deV!Lz Clanportal DZCP 1.4.5 and earlier allows remote attackers to obtain MySQL data via the inc/mysql.php value of the file parameter...

6.6AI score0.03924EPSS
SaveExploits2References6
Cvelist
Cvelist
•added 2007/02/12 8:0 p.m.•65 views

CVE-2007-0882

Argument injection vulnerability in the telnet daemon in.telnetd in Solaris 10 and 11 SunOS 5.10 and 5.11 misinterprets certain client "-f" sequences as valid requests for the login program to skip authentication, which allows remote attackers to log into certain accounts, as demonstrated by the...

6.6AI score0.97848EPSS
SaveExploits14References19
Cvelist
Cvelist
•added 2004/09/01 4:0 a.m.•65 views

CVE-2003-0985

The mremap system call domremap in Linux kernel 2.4.x before 2.4.21, and possibly other versions before 2.4.24, does not properly perform bounds checks, which allows local users to cause a denial of service and possibly gain privileges by causing a remapping of a virtual memory area VMA to create...

6.3AI score0.01233EPSS
SaveExploits6References46
Cvelist
Cvelist
•added 2002/06/25 4:0 a.m.•65 views

CVE-2002-0057

XMLHTTP control in Microsoft XML Core Services 2.6 and later does not properly handle IE Security Zone settings, which allows remote attackers to read arbitrary files by specifying a local file as an XML Data Source...

6.4AI score0.19175EPSS
SaveExploits0References6
Cvelist
Cvelist
•added 1999/09/29 4:0 a.m.•65 views

CVE-1999-0017

FTP servers can allow an attacker to connect to arbitrary ports on machines other than the FTP client, aka FTP bounce...

6.3AI score0.02002EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/08/11 5:6 p.m.•64 views

CVE-2026-62757 Windows Schannel Security Feature Bypass Vulnerability

...

5.3CVSS0.00255EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/08/03 10:37 p.m.•64 views

CVE-2026-48331 Adobe Campaign Classic (ACC) | Server-Side Request Forgery (SSRF) (CWE-918)

Adobe Campaign Classic ACC is affected by a Server-Side Request Forgery SSRF vulnerability that could result in privilege escalation. Exploitation of this issue does not require user interaction. Scope is changed...

10CVSS0.00473EPSS
SaveExploits0References1
Total number of security vulnerabilities5000