Lucene search
+L
SecurityvulnsMost viewed

47153 matches found

securityvulns
securityvulns
added 2013/01/05 12:00 a.m.100 views

Aastra IP Telephone encrypted .tuz configuration file leakage

Aastra IP telephone encrypted .tuz configuration file leakage ------------------------------------------------------------- Affected products ================= Aastra 6753i IP Telephone Firmware Version 3.2.2.56 Firmware Release Code SIP Boot Version 2.5.2.1010 Background ========== "The 6753i fr...

7.1AI score
SaveExploits0
securityvulns
securityvulns
added 2012/12/10 12:00 a.m.100 views

Web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc...

7.5CVSS1.6AI score0.0766EPSS
SaveExploits22References21Affected Software13
securityvulns
securityvulns
added 2012/10/22 12:00 a.m.100 views

SEC Consult SA-20121017-0 :: ModSecurity multipart/invalid part ruleset bypass

SEC Consult Vulnerability Lab Security Advisory 20121017-0 ======================================================================= title: ModSecurity multipart/invalid part ruleset bypass product: ModSecurity vulnerable version: = 2.6.8 fixed version: 2.7.0 CVE number: - impact: Depends what you...

7AI score
SaveExploits0
securityvulns
securityvulns
added 2012/10/10 12:00 a.m.100 views

Fortigate UTM WAF Appliance - Cross Site Vulnerabilities

Title: ====== Fortigate UTM WAF Appliance - Cross Site Vulnerabilities Date: ===== 2012-09-07 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=559 VL-ID: ===== 559 Common Vulnerability Scoring System: ==================================== 3.5 Introduction: ============= T...

6.7AI score
SaveExploits0
securityvulns
securityvulns
added 2012/06/17 12:00 a.m.100 views

ZDI-12-093 : (Pwn2Own) Microsoft Internet Explorer Fixed Table Colspan Remote Code Execution Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ZDI-12-093 : Pwn2Own Microsoft Internet Explorer Fixed Table Colspan Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-12-093 June 12, 2012 - -- CVE ID: CVE-2012-1876 - -- CVSS: 9, AV:N/AC:L/Au:N/C:P/I:P/A:C - --...

9.3CVSS0.3AI score0.64962EPSS
SaveExploits27
securityvulns
securityvulns
added 2012/04/23 12:00 a.m.100 views

[waraxe-2012-SA#084] - Multiple Vulnerabilities in OpenCart 1.5.2.1

waraxe-2012-SA084 - Multiple Vulnerabilities in OpenCart 1.5.2.1 =============================================================================== Author: Janek Vind "waraxe" Date: 06. April 2012 Location: Estonia, Tartu Web: http://www.waraxe.us/advisory-84.html Description of vulnerable software:...

8.1AI score
SaveExploits0
securityvulns
securityvulns
added 2012/01/09 12:00 a.m.100 views

OpenKM 5.1.7 Privilege Escalation

COMPASS SECURITY ADVISORY http://www.csnc.ch/ ID: COMPASS-2012-001 Product: OpenKM Document Management System 5.1.7 1 Vendor: OpenKM http://www.openkm.com/ Subject: Privilege Escalation, Improper Access Control Risk: High Effect: Remotely exploitable Author: Cyrill Brunschwiler...

0.9AI score
SaveExploits0
securityvulns
securityvulns
added 2012/01/09 12:00 a.m.100 views

IpTools - Rcmd Remote Overflow Vulnerability

Title: IpToolsTiny TCP/IP server - Rcmd Remote Overflow Vulnerability Software : IpToolsTiny TCP/IP server Software Version : 0.1.4 Vendor: http://iptools.sourceforge.net/iptools.html Class: Boundary Condition Error CVE: Remote: Yes Local: No Published: 2012-01-07 Updated: Impact : High Bug...

SaveExploits0
securityvulns
securityvulns
added 2012/01/09 12:00 a.m.100 views

Google Chrome HTTPS Address Bar Spoofing

Google awarded one of our security researchers a Chromium Security Reward for an HTTPS address bar spoofing bug in Chrome 14 and 15 although it may be present in older versions too. The bug was fixed in Chrome 16, most browsers seem to be updated and we're happy to share technical details with th...

0.1AI score
SaveExploits0
securityvulns
securityvulns
added 2011/11/27 12:00 a.m.100 views

Valid tiny-erp <= 1.6 SQL Injection Vulnerability

Dear all, I have found a SQL injection vulnerability in Valid tiny-erp = 1.6. It seems to be version 1.6 as you can see in the 'project' section of www.valid.gr. Anyway there is not any specific number version in the sourceforge page. I reported the vulnerability to the vendor but no response as...

SaveExploits0
securityvulns
securityvulns
added 2011/11/25 12:00 a.m.100 views

Mozilla Foundation Security Advisory 2011-51

Mozilla Foundation Security Advisory 2011-51 Title: Cross-origin image theft on Mac with integrated Intel GPU Impact: High Announced: November 8, 2011 Reporter: Claus Wahlers Products: Firefox, Thunderbird Fixed in: Firefox 8.0 Thunderbird 8.0 Description Claus Wahlers reported that random images...

5CVSS0.8AI score0.01025EPSS
SaveExploits0
securityvulns
securityvulns
added 2011/10/31 12:00 a.m.100 views

ZDI-11-307 : Oracle Java MixerSequencer.nAddControllerEventCallback Remote Code Execution Vulnerability

ZDI-11-307 : Oracle Java MixerSequencer.nAddControllerEventCallback Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-11-307 October 26, 2011 -- CVE ID: CVE-2011-3545 -- CVSS: 9, AV:N/AC:L/Au:N/C:P/I:P/A:C -- Affected Vendors: Oracle -- Affected Products: Oracle...

10CVSS0.8AI score0.05445EPSS
SaveExploits1
securityvulns
securityvulns
added 2011/10/24 12:00 a.m.100 views

TeamSHATTER Security Advisory: Buffer Overflow in Oracle Database (CTXSYS.DRVDISP.TABLEFUNC_ASOWN function)

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 TeamSHATTER Security Advisory October 20, 2011 Risk Level: Medium Affected versions: Oracle Database Server version 10gR1, 10gR2 and 11gR1 Remote exploitable: Yes Authentication to Database Server is needed Credits: This vulnerability was discovered a...

8.5CVSS0.3AI score0.0224EPSS
SaveExploits0
securityvulns
securityvulns
added 2011/10/10 12:00 a.m.100 views

Low severity flaw in various applications including KSSL, Rekonq, Arora, Psi IM

I recently discovered that various Qt applications including KSSL the KDE class library responsible for SSL negotiation, Rekonq, Arora and Psi IM are vulnerable to UI spoofing due to their use of QLabel objects to render externally controlled security critical information. The primary area of...

5CVSS0.6AI score0.01073EPSS
SaveExploits0
securityvulns
securityvulns
added 2011/09/20 12:00 a.m.100 views

Cisco Unified Communications Manager / Cisco Intercompany Media Engine / Cisco TelePresence Codecs DoS

Crash on Service Advertisement Framework SAF packet parsing, crash on SIP processing, connection flood DoS...

9CVSS4.1AI score0.12723EPSS
SaveExploits7References3Affected Software2
securityvulns
securityvulns
added 2011/09/13 12:00 a.m.100 views

Vulnerability in plugins for Typepad, RapidWeaver, Habari, DasBlo, eZ Publish, EE, Serendipity, Social Web CMS, PHP-Fusion, Magento and Sweetcron

Hello 3APA3A! I want to warn you about Cross-Site Scripting vulnerability in multiple plugins for different engines it's combinations of my three publications which I've made earlier at my site. In plugins for Typepad, RapidWeaver, Habari, DasBlo, eZ Publish, EE, Serendipity, Social Web CMS,...

6.2AI score
SaveExploits0
securityvulns
securityvulns
added 2011/09/05 12:00 a.m.100 views

ph5gruppo (prodotto.php?id) Remote SQL injection Vulnerability

IRANIAN THE BEST HACKERS IN THE WORLD Remote SQL injection Vulnerability ph5gruppo prodotto.php?id AuTh0r : EhsanHp200 H0ME : www.ehsanhp.blogsky.com Email : [email protected] Vendor : http://www.ph5gruppo.it/ Persian Gulf 4 Ever! Dork : "Sito realizzato da ph5 gruppo" Exploite:...

2.9AI score
SaveExploits0
securityvulns
securityvulns
added 2011/08/03 12:00 a.m.100 views

ZDI-11-244: (0day) FlexNet License Server Manager lmadmin Remote Code Execution Vulnerability

ZDI-11-244: 0day FlexNet License Server Manager lmadmin Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-11-244 July 28, 2011 -- CVSS: 9, AV:N/AC:L/Au:N/C:P/I:P/A:C -- Affected Vendors: Flexera Software -- Affected Products: Flexera Software FlexNet License Serv...

1.1AI score
SaveExploits0
securityvulns
securityvulns
added 2011/03/23 12:00 a.m.100 views

Novell Netware FTP server buffer overflow

rmdir/mkdir/dele commands buffer overflow...

9CVSS3.2AI score0.14658EPSS
SaveExploits4References3Affected Software1
securityvulns
securityvulns
added 2011/02/11 12:00 a.m.100 views

Microsoft Visio multiple security vulnerabilities

Multiple memory corruptions...

9.3CVSS2.2AI score0.24225EPSS
SaveExploits0References1
securityvulns
securityvulns
added 2010/09/27 12:00 a.m.100 views

[security bulletin] HPSBMA02584 SSRT100230 rev.1 - HP System Management Homepage (SMH) for Linux and Windows, Remote URL Redirection

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c02514953 Version: 1 HPSBMA02584 SSRT100230 rev.1 - HP System Management Homepage SMH for Linux and Windows, Remote URL Redirection NOTICE: The information in this Security Bulletin should be acte...

4.3CVSS0.01431EPSS
SaveExploits1
securityvulns
securityvulns
added 2010/09/14 12:00 a.m.100 views

ZDI-10-172: Mozilla Firefox tree Object Removal Remote Code Execution Vulnerability

ZDI-10-172: Mozilla Firefox tree Object Removal Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-10-172 September 13, 2010 -- CVE ID: CVE-2010-3168 -- CVSS: 9, AV:N/AC:L/Au:N/C:P/I:P/A:C -- Affected Vendors: Mozilla Firefox -- Affected Products: Mozilla Firefox...

9.3CVSS0.2AI score0.04812EPSS
SaveExploits0
securityvulns
securityvulns
added 2010/07/24 12:00 a.m.100 views

Mozilla Foundation Security Advisory 2010-40

Mozilla Foundation Security Advisory 2010-40 Title: nsTreeSelection dangling pointer remote code execution vulnerability Impact: Critical Announced: July 20, 2010 Reporter: regenrecht via TippingPoint's Zero Day Initiative Products: Firefox, Thunderbird, SeaMonkey Fixed in: Firefox 3.6.7 Firefox...

9.3CVSS1.3AI score0.06672EPSS
SaveExploits1
securityvulns
securityvulns
added 2010/04/26 12:00 a.m.100 views

Apache ActiveMQ is prone to source code disclosure vulnerability.

Apache ActiveMQ Source Code Disclosure Vulnerability SecPod Technologies www.secpod.com Author Veerendra G.G SecPod ID: 1002 04/18/2010 Issue Discovered 04/20/2010 Vendor Notified 04/21/2010 Fix Available Class: Source code disclosure Severity: Medium Overview: --------- Apache ActiveMQ is prone ...

0.2AI score
SaveExploits0
securityvulns
securityvulns
added 2010/04/06 12:00 a.m.100 views

Mozilla Foundation Security Advisory 2010-22

Mozilla Foundation Security Advisory 2010-22 Title: Update NSS to support TLS renegotiation indication Impact: Low Announced: March 30, 2010 Reporter: Mozilla developers and community Products: Firefox, Thunderbird, SeaMonkey Fixed in: Firefox 3.6.2 Firefox 3.5.9 Thunderbird 3.0.4 SeaMonkey 2.0.4...

5.8CVSS1.9AI score0.87264EPSS
SaveExploits16
securityvulns
securityvulns
added 2010/02/04 12:00 a.m.100 views

eWebeditor ASP Version Multiple Vulnerabilities

Securitylab.ir Application Info: Name: eWebeditor Version: ASP Vulnerability: ======================= Arbitrary File Upload ======================= form action = "http://site.com/manage/ewebeditor/upload.asp?action=save&type=IMAGE&style=luoye 'union select SID, SName, SDir, SCSS, SUploadDir 2b' /...

0.4AI score
SaveExploits0
securityvulns
securityvulns
added 2009/11/13 12:00 a.m.100 views

[USN-858-1] OpenLDAP vulnerability

=========================================================== Ubuntu Security Notice USN-858-1 November 12, 2009 openldap2.2 vulnerability CVE-2009-3767 =========================================================== A security issue affects the following Ubuntu releases: Ubuntu 6.06 LTS This advisory...

6.8CVSS0.1AI score0.03273EPSS
SaveExploits1
securityvulns
securityvulns
added 2009/10/19 12:00 a.m.100 views

Adobe Acrobat / Reader multiple security vulnerabilities

Multiple memory corruptions, array index overflows, etc...

9.3CVSS3.2AI score0.86583EPSS
SaveExploits23References7Affected Software1
securityvulns
securityvulns
added 2009/10/17 12:00 a.m.100 views

Insufficient Anti-automation and Abuse of Functionality vulnerabilities in ALFcontact for Joomla

Здравствуйте 3APA3A! Сообщаю вам о найденных мною Insufficient Anti-automation и Abuse of Functionality уязвимостях в компоненте ALFcontact comalfcontact для Joomla. Insufficient Anti-automation: http://site/option,comalfcontact/ На странице контактов нет защиты от автоматизированных запросов...

7.1AI score
SaveExploits0
securityvulns
securityvulns
added 2009/08/24 12:00 a.m.100 views

FreeBSD <= 6.1 kqueue() NULL pointer dereference

FreeBSD = 6.1 suffers from classical check/use race condition on SMP systems in kevent syscall, leading to kernel mode NULL pointer dereference. It can be triggered by spawning two threads: 1st thread looping on open and close syscalls, and the 2nd thread looping on kevent, trying to add possibly...

7.2AI score
SaveExploits0
securityvulns
securityvulns
added 2009/08/19 12:00 a.m.100 views

ZDI-09-059: Oracle Secure Backup Administration Server Multiple Command Injection Vulnerabilities

ZDI-09-059: Oracle Secure Backup Administration Server Multiple Command Injection Vulnerabilities http://www.zerodayinitiative.com/advisories/ZDI-09-059 -- CVE ID: CVE-2009-1978 -- Affected Vendors: Oracle -- Affected Products: Oracle Secure Backup -- Vulnerability Details: This vulnerability...

9CVSS1.3AI score0.64694EPSS
SaveExploits13
securityvulns
securityvulns
added 2009/06/26 12:00 a.m.100 views

Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc...

10CVSS1.5AI score0.96565EPSS
SaveExploits19References4Affected Software3
securityvulns
securityvulns
added 2009/05/03 12:00 a.m.100 views

OpenBSD pf DoS

Null pointer dereferenceon malformed IPv4 packet with ICMPv6 data...

2.4AI score
SaveExploits0References2Affected Software1
securityvulns
securityvulns
added 2009/04/01 12:00 a.m.100 views

Cisco IOS multiple security vulnerabilities

Multiple DoS conditions in TCP, cTCP, Mobile IP/Mobile IPv6, WebVPN, SSLVPN implementations, SCP privilege escalation...

9CVSS2.9AI score0.04025EPSS
SaveExploits3References6Affected Software2
securityvulns
securityvulns
added 2009/01/28 12:00 a.m.100 views

Max.Blog <= 1.0.6 (submit_post.php) SQL Injection Vulnerability

Salvatore "drosophila" Fresta Application: Max.Blog http://www.mzbservices.com Version: Max.Blog = 1.0.6 Bug: SQL Injection Exploitation: Remote Dork: intext:"Powered by Max.Blog" Date: 27 Jan 2009 Discovered by: Salvatore "drosophila" Fresta Author: Salvatore "drosophila" Fresta e-mail:...

1AI score
SaveExploits0
securityvulns
securityvulns
added 2008/12/18 12:00 a.m.100 views

Mozilla Foundation Security Advisory 2008-63

Mozilla Foundation Security Advisory 2008-63 Title: User tracking via XUL persist attribute Impact: Low Announced: December 16, 2008 Reporter: Hish Products: Firefox Fixed in: Firefox 3.0.5 Description Security researcher Hish reported that the persist attribute in XUL elements can be used to sto...

5CVSS0.2AI score0.02295EPSS
SaveExploits0
securityvulns
securityvulns
added 2008/10/02 12:00 a.m.100 views

phpMyID can act as a redirector and as headers injector

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Subject: phpMyID can act as a redirector and as headers injector Credits: Raphael Geissert [email protected] Release date: 2008-10-27 Affects: v0.9 23-Jul-2008 Resources: Homepage: http://siege.org/projects/phpMyID/ Demo: http://phpmyid.com Background...

6.7AI score
SaveExploits0
securityvulns
securityvulns
added 2008/04/08 12:00 a.m.100 views

Microsoft Security Bulletin MS08-020 – Important Vulnerability in DNS Client Could Allow Spoofing (945553)

Microsoft Security Bulletin MS08-020 – Important Vulnerability in DNS Client Could Allow Spoofing 945553 Published: April 8, 2008 Version: 1.0 General Information Executive Summary This security update resolves a privately reported vulnerability. This spoofing vulnerability exists in Windows DNS...

8.8CVSS0.3AI score0.32446EPSS
SaveExploits0
securityvulns
securityvulns
added 2007/12/05 12:00 a.m.100 views

PR07-39: Multiple vulnerabilities on Absolute News Manager.NET 5.1 including file retrieval and SQL injection

PR07-39: Multiple vulnerabilities on Absolute News Manager.NET 5.1 including file retrieval and SQL injection Vulnerabilities found: 16 November 2007 Vendor informed: 19 November 2007 Vulnerability fixed: 28 November 2007 Severity: High Description: Multiple vulnerabilities were found on Absolute...

7.2AI score
SaveExploits0
securityvulns
securityvulns
added 2007/10/26 12:00 a.m.100 views

Multi Host Forum Pro phpbb & ipb Multiple Sql Injection

--------------------------------------------------------------- / | | / | / |/ | | |/ | | / | | | | | |/ | | // | || | ||| /| / / | |||| /| / / --------------------------------------------------------------- Http://www.inj3ct-it.org Staffatinj3ct-itdotorg...

1AI score
SaveExploits0
securityvulns
securityvulns
added 2007/10/23 12:00 a.m.100 views

SYMSA-2007-013: Lotus Notes Memory Mapped Files Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Symantec Vulnerability Research http://www.symantec.com/research Security Advisory Advisory ID: SYMSA-2007-013 Advisory Title: Lotus Notes Memory Mapped Files Vulnerability Author: Ollie Whitehouse / [email protected] Release Date: 23-10-20...

6.2CVSS0.1AI score0.0027EPSS
SaveExploits1
securityvulns
securityvulns
added 2007/09/17 12:00 a.m.100 views

Boa (with Intersil Extensions) - HTTP Basic Authentication Bypass

Secure Network - Security Research Advisory Vuln name: HTTP Basic Authentication Bypass Systems affected: Boa/0.93.15 with Intersil Extensions based systems i.e. FreeLan 802.11g Wireless Access Point RO80211G-AP Severity: High Local/Remote: Remote Vendor URL: http://www.boa.org -...

5CVSS0.4AI score0.08358EPSS
SaveExploits3
securityvulns
securityvulns
added 2007/08/13 12:00 a.m.100 views

Best Top List Remote File Upload Vulnerability

Best Top List Remote File Upload Vulnerability ---------------------------------------------- Script : Best Top List Version : All Version Site : http://besttoplist.sourceforge.net Closed Founder : Rizgar Contact : [email protected] and irc.gigachat.net kurdhack Thanks : KHC, PH , ColdHackers...

0.5AI score
SaveExploits0
securityvulns
securityvulns
added 2007/07/13 12:00 a.m.100 views

[Full-disclosure] ActiveWeb Contentserver CMS Clientside Filtering of Page Editor Content

Advisory: ActiveWeb Contentserver CMS Clientside Filtering of Page Editor Content RedTeam Pentesting discovered a design vulnerability in the page editor of the activeWeb contentserver CMS during a penetration test. Filtering of user content, e.g. to prevent the usage of Javascript code, is done ...

4CVSS6.5AI score0.05142EPSS
SaveExploits2
securityvulns
securityvulns
added 2007/07/10 12:00 a.m.100 views

Microsoft Internet Information Server DoS

Request like http://www.example.com/vtibin/.dll/0 for virtual folders with CGI execution enabled causes server to crash and potentially leads to code execution...

7.8CVSS2.7AI score0.86729EPSS
SaveExploits3References3Affected Software1
securityvulns
securityvulns
added 2007/05/15 12:00 a.m.100 views

ImI image file inclusion in script upload

w2box: web 2.0 File Repository Upload Script Code Source http://labs.beffa.org/w2box/ Dork : "powered by w2box" Discovered by 4ur3v0ir Homepage Four: http://www.security-frog.org http://www.c-group.org http://hslteam.org Greetz To:NINF,frat2005,komtec1,kakalake,AntraX,fr34k And Staff...

SaveExploits0
securityvulns
securityvulns
added 2007/04/11 12:00 a.m.100 views

Sisplet CMS <= 05.10 (site_path) Remote File Inclusion Vulnerability

Sisplet CMS Found by kezzap66345 Script Download:http://www.sisplet.org/uploadi/editor/Sisplet0504.tar.bz2 https://sourceforge.net/project/showfiles.php?groupid=111881 ERROR1: File:main/forum/komentar.php require$sitepath.'main/forum/class.php'; rfi coded RFI1:...

7.2AI score
SaveExploits0
securityvulns
securityvulns
added 2007/03/13 12:00 a.m.100 views

Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc...

9.3CVSS1.5AI score0.06578EPSS
SaveExploits11References5Affected Software8
securityvulns
securityvulns
added 2007/03/09 12:00 a.m.100 views

ZDI-07-009: Novell Netmail WebAdmin Buffer Overflow Vulnerability

ZDI-07-009: Novell Netmail WebAdmin Buffer Overflow Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-07-009.html March 7, 2007 -- CVE ID: CVE-2007-1350 -- Affected Vendor: Novell -- Affected Products: Novell NetMail 3.5.2 -- TippingPointTM IPS Customer Protection: TippingPoint IPS...

6.8CVSS0.3AI score0.19398EPSS
SaveExploits5
securityvulns
securityvulns
added 2007/02/27 12:00 a.m.100 views

MTCMS multiple upload vulnerabilities

avatar upload vulnerability: upload any kind of file in: site.com/MTCMS-V2.2/?a=gallery&b=adddown and approuved or not it will be here : /uploads/pictures/ same thing for : add link /index.php?a=links&b=addlink xss permanent on Contact Us : message & title fields are vulnerable to an xss attack...

1.9AI score
SaveExploits0
Total number of security vulnerabilities5000