Lucene search
+L
JvnMost viewed

5651 matches found

Japan Vulnerability Notes
Japan Vulnerability Notes
•added 2015/10/26 3:27 a.m.•10 views

EC-CUBE vulnerable to cross-site request forgery

Overview EC-CUBE from LOCKON CO.,LTD. is an open source system for creating shopping websites. EC-CUBE contains a cross-site request forgery vulnerability CWE-352. Gen Sato of TRADE WORKS Co.,Ltd. Security Dept. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under...

5.1CVSS6.9AI score0.00646EPSS
SaveExploits0References7
Japan Vulnerability Notes
Japan Vulnerability Notes
•added 2015/10/02 4:36 a.m.•10 views

gollum vulnerable to file exposure

Overview gollum is a wiki system that uses git repositories. gollum contains a vulnerability which may allow an attacker to view arbitrary files on the server. Shoji Baba reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning...

4.3CVSS6.7AI score0.01876EPSS
SaveExploits0References5
Japan Vulnerability Notes
Japan Vulnerability Notes
•added 2015/09/30 6:4 a.m.•10 views

MATCHA INVOICE vulnerable to code injection

Overview MATCHA INVOICE provided by ICZ Corporation is a web-based billing management software. MATCHA INVOICE contains a code injection CWE-94 vulnerability due to a flaw when configuring the database during installation. Shoji Baba reported this vulnerability to IPA. JPCERT/CC coordinated with...

6.8CVSS7.7AI score0.01321EPSS
SaveExploits0References5
Japan Vulnerability Notes
Japan Vulnerability Notes
•added 2015/09/30 5:46 a.m.•10 views

baserCMS vulnerable to SQL injection

Overview baserCMS contains an SQL injection vulnerability. baserCMS is an open-source Contents Management System CMS. baserCMS contains a vulnerability that allows an authenticated user to inject arbitrary SQL statements CWE-89. Shoji Baba reported this vulnerability to IPA. JPCERT/CC coordinated...

6.5CVSS7.8AI score0.01566EPSS
SaveExploits0References5
Japan Vulnerability Notes
Japan Vulnerability Notes
•added 2015/09/16 7:58 a.m.•10 views

Koritore vulnerable to URL whitelist bypass

Overview Koritore provided by Newphoria Corporation Inc. is an application for both iOS or Android built using "applican". Koritore contains an issue where an arbitrary page may be loaded if the application is launched using the URL-scheme. Kenta Suefusa and Tomonori Shiomi of Sprout Inc. reporte...

6.8CVSS6.6AI score0.01093EPSS
SaveExploits0References5
Japan Vulnerability Notes
Japan Vulnerability Notes
•added 2015/07/29 5:58 a.m.•10 views

yoyaku_v41 vulnerable to OS command injection

Overview yoyakuv41 provided by Webservice-DIC is a software to manage conference room reservations. yoyakuv41 contains an OS command injection vulnerability CWE-78. Shoji Baba reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning...

7.5CVSS7.6AI score0.01383EPSS
SaveExploits0References5
Japan Vulnerability Notes
Japan Vulnerability Notes
•added 2015/05/20 5:34 a.m.•10 views

mt-phpincgi vulnerable to PHP object injection

Overview mt-phpincgi is script that runs Movable Type templates as PHP. mt-phpincgi contains a PHP object Injection vulnerability. According to the reporter, attacks that attempt to exploit this vulnerability have been confirmed. Impact Arbitrary PHP code may be executed on the server by an...

7.5CVSS7.3AI score0.01749EPSS
SaveExploits1References7
Japan Vulnerability Notes
Japan Vulnerability Notes
•added 2014/12/12 4:48 a.m.•10 views

LinPHA vulnerable to cross-site scripting

Overview LinPHA is a software to manage and host image files on the web. LinPHA contains a cross-site scripting vulnerability. Daiki Fukumori of Cyber Defense Institute, Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning...

4.3CVSS6.2AI score0.00931EPSS
SaveExploits0References5
Japan Vulnerability Notes
Japan Vulnerability Notes
•added 2014/12/04 3:22 a.m.•10 views

KENT-WEB Clip Board vulnerable to cross-site scripting

Overview KENT-WEB Clip Board is a bulletin board software that a user can upload binary files such as image files. Clip Board contains a cross-site scripting vulnerability. Sen UENO of Tricorder Co. Ltd. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Informatio...

4.3CVSS6.1AI score0.01193EPSS
SaveExploits1References5
Japan Vulnerability Notes
Japan Vulnerability Notes
•added 2014/12/03 6:9 a.m.•10 views

DBD::PgPP vulnerable to SQL injection

Overview DBD::PgPP is a pure-Perl client interface for the PostgreSQL database. DBD::PgPP contains a SQL injection vulnerability. Toshiharu Sugiyama reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership. Impact If DBD::Pg...

9.8CVSS7.9AI score0.01559EPSS
SaveExploits0References7
Japan Vulnerability Notes
Japan Vulnerability Notes
•added 2014/11/11 4:36 a.m.•10 views

Multiple Cybozu products vulnerable to buffer overflow

Overview Multiple products provided by Cybozu, Inc. contain a buffer overflow vulnerability CWE-119. Masaaki Chida of GREE, Inc. reported this vulnerability to the developer. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership. Impact A remote attacker ma...

9CVSS7.7AI score0.03742EPSS
SaveExploits0References6
Japan Vulnerability Notes
Japan Vulnerability Notes
•added 2014/09/04 7:36 a.m.•10 views

EmFTP may insecurely load executable files

Overview EmFTP contains a flaw when loading files, where an unitended executable file may be loaded when attempting to open a file without an extension. For example, if a text file named "exmaple" without an extension and an executable "example.exe" are in the same directory, attemtping to open t...

5.1CVSS7.7AI score0.00354EPSS
SaveExploits0References5
Japan Vulnerability Notes
Japan Vulnerability Notes
•added 2014/08/19 3:35 a.m.•10 views

Advance-Flow vulnerable to SQL injection

Overview Advance-Flow provided by OSK Co., LTD contains an issue in processing input data, which may result in SQL injection. Yoshinori Ohta of Business Architects Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnershi...

7.5CVSS7.2AI score0.01164EPSS
SaveExploits0References5
Japan Vulnerability Notes
Japan Vulnerability Notes
•added 2014/07/18 4:50 a.m.•10 views

FuelPHP vulnerable to remote code execution

Overview FuelPHP is a PHP web framework for creating web applications. FuelPHP applications contain an issue in the RequestCurl class, which may result in arbitrary code execution. Masaaki Chida of GREE, Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under...

7.5CVSS7.9AI score0.02718EPSS
SaveExploits0References6
Japan Vulnerability Notes
Japan Vulnerability Notes
•added 2014/07/15 5:46 a.m.•10 views

Cybozu Garoon vulnerable to access restriction bypass

Overview Cybozu Garoon provided by Cybozu, Inc. is a groupware. Cybozu Garoon contains an issue in the function "Portlets", which may result in an access restriction bypass vulnerability CWE-264. Impact Portlets may be altered by another Cybozu Garoon user. Solution Update the Software Update to...

4CVSS6.7AI score0.01107EPSS
SaveExploits0References5
Japan Vulnerability Notes
Japan Vulnerability Notes
•added 2014/07/02 5:40 a.m.•10 views

RockDisk vulnerable to cross-site scripting

Overview RockDisk provided by I-O DATA DEVICE, INC. are LAN connectable hard disk drives. RockDisk contains a cross-site scripting vulnerability. NOTE: This vulnerability exists because of an incomplete fix for CVE-2013-4713. Yuji Tounai of bogus.jp reported this vulnerability to IPA. JPCERT/CC...

5.4CVSS6.3AI score0.00642EPSS
SaveExploits0References6
Japan Vulnerability Notes
Japan Vulnerability Notes
•added 2014/06/25 6:1 a.m.•10 views

Web Kyukincho vulnerable to cross-site request forgery

Overview Web Kyukincho provided by Intercom, Inc. is a software that digitizes and distributes a pay statement and others. Web Kyukincho contains a cross-site request forgery vulnerability. Impact If a user views a malicious page while logged in, unintended operations may be conducted. Solution...

6.8CVSS6.5AI score0.00636EPSS
SaveExploits0References5
Japan Vulnerability Notes
Japan Vulnerability Notes
•added 2014/06/24 5:22 a.m.•10 views

Login rebuilder vulnerable to cross-site request forgery

Overview Login rebuilder is a plugin for WordPress. Login rebuilder contains a cross-site request forgery vulnerability. Impact If a user views a malicious page while logged in, unintended operations may be conducted. Solution Update the Software Update to the latest version according to the...

6.8CVSS6.6AI score0.01076EPSS
SaveExploits0References6
Japan Vulnerability Notes
Japan Vulnerability Notes
•added 2014/06/24 5:21 a.m.•10 views

Sophos Disk Encryption vulnerable to authentication bypass

Overview Sophos Disk Encryption contains an authentication bypass vulnerability. Sophos Disk Encryption is a product to encrypt hard disk data on Windows PC. By default, Window requires logon authentication when the PC wakes up from hibernation or sleep mode. When Sophos Disk Encryption is...

6.9CVSS7AI score0.0051EPSS
SaveExploits0References7
Japan Vulnerability Notes
Japan Vulnerability Notes
•added 2014/06/20 4:56 a.m.•10 views

Usermin vulnerable to cross-site scripting

Overview Usermin is a web-based interface used to manage webmail. Usermin contains a cross-site scripting vulnerability. Keigo Yamazaki of LAC Co., Ltd reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership. Impact An...

4.3CVSS6AI score0.01351EPSS
SaveExploits0References5
Japan Vulnerability Notes
Japan Vulnerability Notes
•added 2014/04/11 4:43 a.m.•10 views

SD Card Manager vulnerable to directory traversal

Overview SD Card Manager provided by apps4u@android contains an issue in processing file names, which may result in a directory traversal CWE-22 vulnerability. Ryohei Koike of Sakura Information Systems Co., Ltd. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under...

5.8CVSS7.1AI score0.01152EPSS
SaveExploits0References5
Japan Vulnerability Notes
Japan Vulnerability Notes
•added 2014/01/22 6:29 a.m.•10 views

Information disclosure vulnerability in Sleipnir Mobile for Android

Overview Sleipnir Mobile for Android contains an issue in handling Geolocation API, which may result in the disclosure of a user's location. Sleipnir Mobile for Android is a web browser for Android devices. Sleipnir Mobile for Android contains an issue in handling Geolocation API, which may resul...

4.3CVSS6.3AI score0.01066EPSS
SaveExploits0References7
Japan Vulnerability Notes
Japan Vulnerability Notes
•added 2013/12/24 6:2 a.m.•10 views

VMware ESX and ESXi may allow access to arbitrary files

Overview VMware ESX and ESXi contain a vulnerability in the handling of Virtual Machine file descriptors, which may allow access to arbitrary ESX and ESXi files. Shanon Olsson reported this vulnerability to JPCERT/CC. JPCERT/CC coordinated with the developer under Information Security Early Warni...

4.4CVSS7AI score0.00353EPSS
SaveExploits0References5
Japan Vulnerability Notes
Japan Vulnerability Notes
•added 2013/11/20 7:14 a.m.•10 views

EC-CUBE information disclosure vulnerability

Overview EC-CUBE from LOCKON CO.,LTD. is an open source system for creating shopping websites. EC-CUBE contains an information disclosure vulnerability due to an issue in processing front features. LAC Co., Ltd. reported this vulnerability to the developer. JPCERT/CC coordinated with the develope...

5.5CVSS6.3AI score0.01172EPSS
SaveExploits1References7
Japan Vulnerability Notes
Japan Vulnerability Notes
•added 2013/07/22 6:0 a.m.•10 views

Oracle Enterprise Manager vulnerable to cross-site scripting

Overview Oracle Enterprise Manager provided by Oracle contains a cross-site scripting vulnerability. Masashi Shiraishi reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership. Impact An arbitrary script may be executed on t...

4.3CVSS6AI score0.01395EPSS
SaveExploits0References7
Japan Vulnerability Notes
Japan Vulnerability Notes
•added 2013/05/29 6:32 a.m.•10 views

Content Provider in MovatwiTouch fails to restrict access permissions

Overview MovatwiTouch is a Twitter client software for Android devices. The Content Provider in MovatwiTouch contains an issue where access permissions are not restricted. Masata Nishida of Advanced Research Laboratory, SecureBrain Corporation reported this vulnerability to IPA. JPCERT/CC...

2.6CVSS6.5AI score0.01338EPSS
SaveExploits0References7
Japan Vulnerability Notes
Japan Vulnerability Notes
•added 2012/09/27 3:43 a.m.•10 views

Trend Micro Control Manager vulnerable to SQL injection

Overview Trend Micro Control Manager contains a SQL injection vulnerability. Trend Micro Control Manager contains a vulnerability in the ad hoc query module, which may result in SQL injection. Tom Gregory and Mada R Perdhana of Spentera reported this vulnerability to JPCERT/CC. JPCERT/CC...

7.5CVSS7.9AI score0.06089EPSS
SaveExploits5References10
Japan Vulnerability Notes
Japan Vulnerability Notes
•added 2012/08/07 4:33 a.m.•10 views

LINE for Android vulnerable in handling of implicit intents

Overview LINE for Android contains a vulnerability in the handling of implicit intents. LINE for Android provided by NHN Japan, is an application for communication with others. LINE for Android contains a vulnerability in the handling of implicit intents. Gaku Mochizuki of Mitsui Bussan Secure...

5CVSS6.5AI score0.01354EPSS
SaveExploits0References5
Japan Vulnerability Notes
Japan Vulnerability Notes
•added 2012/06/19 3:35 a.m.•10 views

WEB PATIO vulnerable to cross-site scripting

Overview WEB PATIO contains a cross-site scripting vulnerability. WEB PATIO is a bulletin-board software. WEB PATIO contains a vulnerability in handling cookies, which may result in cross-site scripting. Taketo Ikeuchi of Hitachi Solutions, Ltd. reported this vulnerability to IPA. JPCERT/CC...

4.3CVSS5.8AI score0.01148EPSS
SaveExploits0References5
Japan Vulnerability Notes
Japan Vulnerability Notes
•added 2012/06/14 5:20 a.m.•10 views

Dolphin Browser vulnerable in the WebView class

Overview Dolphin Browser contains a vulnerability in the WebView class. Dolphin Browser is a web browser for Android devices. Dolphin Browser HD and Dolphin for Pad contain a vulnerability in the WebView class. Gaku Mochizuki of Mitsui Bussan Secure Directions, Inc. reported this vulnerability to...

4.3CVSS6.5AI score0.01066EPSS
SaveExploits0References6
Japan Vulnerability Notes
Japan Vulnerability Notes
•added 2012/05/17 4:55 a.m.•10 views

Drupal Form API fails to validate the redirect URL

Overview Drupal's Form API fails to validate the redirect URL, which may lead to unintended information disclosure. Drupal is a content management system CMS. Drupal's Form API fails to validate the redirect URL, which may lead to unintended information disclosure. Katsuhiko Nakanishi from NEC...

5.8CVSS6.7AI score0.01378EPSS
SaveExploits1References5
Japan Vulnerability Notes
Japan Vulnerability Notes
•added 2012/04/13 5:8 a.m.•10 views

ActiveScriptRuby vulnerable to arbitrary Ruby script execution

Overview ActiveScriptRuby contains a vulnerability where an arbitrary Ruby script may be executed on a web browser that can execute ActiveX controls when HTML is displayed. ActiveScriptRuby is a software to implement Ruby into a Windows environment. ActiveScriptRuby contains a vulnerability where...

7.5CVSS7AI score0.01688EPSS
SaveExploits1References6
Japan Vulnerability Notes
Japan Vulnerability Notes
•added 2012/02/23 5:28 a.m.•10 views

Movable Type vulnerable to session hijacking

Overview Movable Type contains a session hijacking vulnerability. Movable Type contains a session hijacking vulnerability in entering comments and community functionality. Impact A remote unauthenticated attacker may impersonate an honest user of the affected product. Solution Update the software...

7.5CVSS6.8AI score0.02677EPSS
SaveExploits0References5
Japan Vulnerability Notes
Japan Vulnerability Notes
•added 2011/10/31 9:3 a.m.•10 views

Multiple SKYARC System Co., Ltd. products vulnerable to cross-site request forgery

Overview Multiple products provided by SKYARC System Co., Ltd. contain a cross-site request forgery vulnerability. MTCMS and multiple Movable Type plugins provided by SKYARC System Co., Ltd. contain a cross-site request forgery vulnerability. Impact If a user views a malicious page while logged...

6.8CVSS6.6AI score0.00586EPSS
SaveExploits0References6
Japan Vulnerability Notes
Japan Vulnerability Notes
•added 2011/10/11 10:28 a.m.•10 views

WEB FORUM vulnerable to cross-site scripting

Overview WEB FORUM provided by KENT-WEB contains a cross-site scripting vulnerability. WEB FORUM provided by KENT-WEB is a bulletin-board software. WEB FORUM contains a vulnerability in handling web form entries, which may result in cross-site scripting. ISHIBASHI,Tsuyoshi of Mitsui Bussan Secure...

4.3CVSS5.8AI score0.02044EPSS
SaveExploits0References5
Japan Vulnerability Notes
Japan Vulnerability Notes
•added 2011/10/11 10:24 a.m.•10 views

WEB FORUM vulnerable to cross-site scripting

Overview WEB FORUM provided by KENT-WEB contains a cross-site scripting vulnerability. WEB FORUM provided by KENT-WEB is a bulletin board software. WEB FORUM contains a vulnerability in processing the web page to be output, which may result in cross-site scripting. ISHIBASHI,Tsuyoshi of Mitsui...

5CVSS5.8AI score0.01029EPSS
SaveExploits0References5
Japan Vulnerability Notes
Japan Vulnerability Notes
•added 2011/07/15 7:27 a.m.•10 views

Google Search Appliance vulnerable to cross-site scripting

Overview Google Search Appliance provided by Google contains a cross-site scripting vulnerability. Google Search Appliance from Google is a product that provides searching services for an intranet service or a website. Google Search Appliance contains a cross-site scripting vulnerability. Yosuke...

4.3CVSS6.1AI score0.00489EPSS
SaveExploits0References6
Japan Vulnerability Notes
Japan Vulnerability Notes
•added 2011/05/10 11:44 p.m.•10 views

EC-CUBE vulnerable to cross-site request forgery

Overview EC-CUBE provided by LOCKON CO.,LTD. contains a cross-site request forgery vulnerability. EC-CUBE provided by LOCKON CO.,LTD. is an open source system for creating shopping websites. EC-CUBE contains a cross-site request forgery vulnerability. Masako Oono reported this vulnerability to IP...

5.8CVSS6.4AI score0.0061EPSS
SaveExploits0References7
Japan Vulnerability Notes
Japan Vulnerability Notes
•added 2011/01/13 2:46 a.m.•11 views

SGX-SP Final and SGX-SP Final NE vulnerable to cross-site scripting

Overview SGX-SP Final and SGX-SP Final NE are vulnerable to cross-site scripting. SGX-SP Final and SGX-SP Final NE are shopping cart software. SGX-SP Final and SGX-SP Final NE are vulnerable to cross-site scripting. Yoshinori Ohta of Business Architects Inc. reported this vulnerability to IPA...

4.3CVSS6.2AI score0.01263EPSS
SaveExploits0References7
Japan Vulnerability Notes
Japan Vulnerability Notes
•added 2010/11/26 8:32 a.m.•10 views

Google Chrome information disclosure vulnerability

Overview Google Chrome contains an information disclosure vulnerability. Google Chrome contains an information disclosure vulnerability caused by the improper handling of XML files. Takayoshi Isayama from Mitsui Bussan Secure Directions, Inc. reported this vulnerability to IPA. JPCERT/CC...

6.5CVSS6.2AI score0.00761EPSS
SaveExploits0References5
Japan Vulnerability Notes
Japan Vulnerability Notes
•added 2010/03/23 8:42 a.m.•10 views

Ichitaro series buffer overflow vulnerability

Overview The "Ichitaro" series word processing software contains a buffer overflow vulnerability. This vulnerability is different from JVN29211062, JVN32981509 and JVN50495547. The "Ichitaro" series word processing software, from JustSystems Corporation, contains an issue in the reading of Rich...

9.3CVSS7.9AI score0.03475EPSS
SaveExploits0References11
Japan Vulnerability Notes
Japan Vulnerability Notes
•added 2010/03/12 6:29 a.m.•10 views

OpenPNE authentication bypass vulnerability

Overview OpenPNE contains an authentication bypass vulnerability. OpenPNE is an open source SNS Social Networking Service software. OpenPNE provides an "IP address range limitation" function to provide access to certain pages only to mobile devices. OpenPNE has an issue with the IP address range...

5.8CVSS6.7AI score0.01074EPSS
SaveExploits0References7
Japan Vulnerability Notes
Japan Vulnerability Notes
•added 2010/02/26 3:45 a.m.•10 views

tDiary plugin tb-send.rb vulnerable to cross-site scripting

Overview tDiary plugin tb-send.rb contains a cross-site scripting vulnerability. tDiary is a weblog software. tDiary plugin tb-send.rb contains a cross-site scripting vulnerability. The developer has confirmed that tDiary 2.3.x are not affected by this vulnerability. Project VEX of UBsecure, Inc...

4.3CVSS6.2AI score0.01996EPSS
SaveExploits0References8
Japan Vulnerability Notes
Japan Vulnerability Notes
•added 2009/08/19 7:33 a.m.•10 views

ColdFusion vulnerable to cross-site scripting

Overview ColdFusion provided by Adobe contains a cross-site scripting vulnerability. ColdFusion from Adobe is a software to develop web applications. ColdFusion contains a cross-site scripting vulnerability. This vulnerability is different from JVN28356427 and JVN48566866. Project VEX of UBsecure...

4.3CVSS6.2AI score0.01773EPSS
SaveExploits0References6
Japan Vulnerability Notes
Japan Vulnerability Notes
•added 2009/06/18 8:54 a.m.•10 views

Cross-site scripting vulnerability in activeCollab

Overview activeCollab from A51 D.O.O. contains a cross-site scripting vulnerability. activeCollab from A51 D.O.O. is software for project management. activeCollab contains a cross-site scripting vulnerability. Daiki Fukumori reported this vulnerability to IPA. JPCERT/CC coordinated with the vendo...

4.3CVSS6.2AI score0.01022EPSS
SaveExploits0References6
Japan Vulnerability Notes
Japan Vulnerability Notes
•added 2009/04/07 8:6 a.m.•10 views

XOOPS Cube Legacy cross-site scripting vulnerability

Overview XOOPS Cube Legacy from XOOPS Cube Project contains a cross-site scripting vulnerability. XOOPS Cube Legacy from XOOPS Cube Project is an open source contents management system. XOOPS Cube Legacy contains a cross-site scripting vulnerability. According to the developers, a XOOPS Cube Lega...

4.3CVSS6.1AI score
SaveExploits0References4
Japan Vulnerability Notes
Japan Vulnerability Notes
•added 2008/12/25 7:22 a.m.•10 views

Mayaa cross-site scripting vulnerability

Overview Mayaa from Seasar Project contains a cross-site scripting vulnerability. Mayaa from Seasar Project is an open source Java template engine. The default error page that Mayaa displays contains a cross-site scripting vulnerability. Tetsuo Nakamura of NEC Soft,Ltd. reported this vulnerabilit...

4.3CVSS6.3AI score0.01263EPSS
SaveExploits0References10
Japan Vulnerability Notes
Japan Vulnerability Notes
•added 2008/11/10 4:29 a.m.•10 views

sISAPILocation vulnerability bypasses HTTP header rewrite function

Overview sISAPILocation, an ISAPI Internet Server Application Program Interface filter, contains a vulnerability that allows the HTTP header rewrite function to be bypassed. sISAPILocation, developed by an individual developer, is an ISAPI filter for IIS Internet Information Services...

5CVSS6.6AI score0.01477EPSS
SaveExploits0References9
Japan Vulnerability Notes
Japan Vulnerability Notes
•added 2008/10/30 3:20 a.m.•10 views

CA ARCserver Backup and CA ARCserve Backup Client Agent Denial of Service (DoS) Vulnerability

Overview CA ARCserve Backup and CA ARCserve Backup Client Agent fail to properly handle packets with a large integer value used in an increment to TCP port 41523, which leads to a denial of service DoS. Impact A remote attacker could cause a denial of service DoS condition. Solution Please refer ...

5CVSS6.7AI score0.03634EPSS
SaveExploits2References10
Japan Vulnerability Notes
Japan Vulnerability Notes
•added 2008/10/22 8:49 a.m.•10 views

Internet Explorer vulnerable in handling CDO protocol

Overview Internet Explorer is vulnerable in handling CDO Collaboration Data Objects protocol, which allows the download dialog box to be bypassed. When Internet Explorer IE accesses a website using CDO Collaboration Data Objects, IE processes the contents as CDO data, ignoring their actual conten...

4.3CVSS6.5AI score0.24389EPSS
SaveExploits1References12
Total number of security vulnerabilities5000