Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 8

Export CSV
CVE-1999-0524

ICMP information such as (1) netmask and (2) timestamp is allowed from arbitrary hosts.

CVSS 3.1 · 4 Medium EPSS 32.2% KEV · Not listed
Vendors
Apple Cisco Hp and 8 more
Products
Mac Os X Macos Ios and 11 more
CVE-2006-7034

SQL injection vulnerability in directory.php in Super Link Exchange Script 1.0 might allow remote attackers to execute arbitrary SQL queries via the cat parameter.

CVSS 2.0 · 7.5 High EPSS 1.1% KEV · Not listed
Vendors
Apple Hp Ibm and 6 more
Products
Mac Os X Hp-ux Tru64 and 15 more
CVE-2007-1043

Ezboo webstats, possibly 3.0.3, allows remote attackers to bypass authentication and gain access via a direct request to (1) update.php and (2) config.php.

CVSS 2.0 · 7.5 High EPSS 8.1% KEV · Not listed
Vendors
Apple Ezboo Hp and 6 more
Products
Mac Os X Webstats Hp-ux and 15 more
CVE-2007-1898

formmail.php in Jetbox CMS 2.1 allows remote attackers to send arbitrary e-mails (spam) via modified recipient, _SETTINGS[allowed_email_hosts][], and subject parameters.

CVSS 2.0 · 5.8 Medium EPSS 2.5% KEV · Not listed
Vendors
Apple Hp Jetbox and 5 more
Products
Mac Os X Hp-ux Tru64 and 13 more
CVE-2007-2736

PHP remote file inclusion vulnerability in index.php in Achievo 1.1.0 allows remote attackers to execute arbitrary PHP code via a URL in the config_atkroot parameter.

CVSS 2.0 · 10.0 Critical EPSS 4.1% KEV · Not listed
Vendors
Achievo Apple Hp and 6 more
Products
Achievo A Ux Mac Os X and 15 more
CVE-2007-4938

Heap-based buffer overflow in libmpdemux/aviheader.c in MPlayer 1.0rc1 and earlier allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a .avi file with certain large "indx truck size" and nEntriesInuse values, and a certain wLongsPerEntry value.

CVSS 2.0 · 7.6 High EPSS 16.0% KEV · Not listed
Vendors
Apple Hp Ibm and 8 more
Products
Mac Os X Hp-ux Tru64 and 15 more
CVE-2007-6232

Cross-site scripting (XSS) vulnerability in index.php in FTP Admin 0.1.0 allows remote attackers to inject arbitrary web script or HTML via the error parameter in an error page action.

CVSS 2.0 · 4.3 Medium EPSS 1.6% KEV · Not listed
Vendors
Ftp Hp Ibm and 5 more
Products
Admin Hp-ux Tru64 and 6 more
CVE-2002-1337

security flaw

Buffer overflow in Sendmail 5.79 to 8.12.7 allows remote attackers to execute arbitrary code via certain formatted address fields, related to sender and recipient header comments as processed by the crackaddr function of headers.c.

CVSS 2.0 · 10.0 Critical EPSS 72.6% KEV · Not listed
Vendors
Gentoo Hp Netbsd and 5 more
Products
Linux Alphaserver Sc Hp-ux and 8 more