Количество 65 611
Количество 65 611
CVE-2004-0006
Multiple buffer overflows in Gaim 0.75 and earlier, and Ultramagnetic before 0.81, allow remote attackers to cause a denial of service and possibly execute arbitrary code via (1) cookies in a Yahoo web connection, (2) a long name parameter in the Yahoo login web page, (3) a long value parameter in the Yahoo login page, (4) a YMSG packet, (5) the URL parser, and (6) HTTP proxy connect.
CVE-2004-0003
Unknown vulnerability in Linux kernel before 2.4.22 allows local users to gain privileges, related to "R128 DRI limits checking."
CVE-2003-1599
WordPress 0.7 allows remote execution of commands. / Wp-links / links.all.php. An attacker can inject a url in $ abspath and get remote execution of commands with the privileges of the server web (usually nobody).
CVE-2003-1598
WordPress 0.7 (b2 cafelog code) allows SQL injection. / Blog.header.php. $ posts not converted to an integer, so we can inject sql in this variable. In MySQL 4.x can use UNION and subselects to obtain privileges.
CVE-2003-1564
libxml2, possibly before 2.5.0, does not properly detect recursion during entity expansion, which allows context-dependent attackers to cause a denial of service (memory and CPU consumption) via a crafted XML document containing a large number of nested entity references, aka the "billion laughs attack."
CVE-2003-1327
CVE-2003-0993
CVE-2003-0987
CVE-2003-0985
CVE-2003-0984
CVE-2003-0972
CVE-2003-0969
CVE-2003-0967
FreeRadius DoS
CVE-2003-0961
CVE-2003-0949
CVE-2003-0927
CVE-2003-0926
CVE-2003-0925
CVE-2003-0899
CVE-2003-0858
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2004-0006 Multiple buffer overflows in Gaim 0.75 and earlier, and Ultramagnetic before 0.81, allow remote attackers to cause a denial of service and possibly execute arbitrary code via (1) cookies in a Yahoo web connection, (2) a long name parameter in the Yahoo login web page, (3) a long value parameter in the Yahoo login page, (4) a YMSG packet, (5) the URL parser, and (6) HTTP proxy connect. | CVSS2: 7.5 | 18% Средний | около 22 лет назад |
| CVE-2004-0003 Unknown vulnerability in Linux kernel before 2.4.22 allows local users to gain privileges, related to "R128 DRI limits checking." | CVSS2: 4.6 | 0% Низкий | около 22 лет назад |
| CVE-2003-1599 WordPress 0.7 allows remote execution of commands. / Wp-links / links.all.php. An attacker can inject a url in $ abspath and get remote execution of commands with the privileges of the server web (usually nobody). | CVSS2: 7.5 | 1% Низкий | больше 11 лет назад |
| CVE-2003-1598 WordPress 0.7 (b2 cafelog code) allows SQL injection. / Blog.header.php. $ posts not converted to an integer, so we can inject sql in this variable. In MySQL 4.x can use UNION and subselects to obtain privileges. | CVSS2: 7.5 | 1% Низкий | больше 11 лет назад |
| CVE-2003-1564 libxml2, possibly before 2.5.0, does not properly detect recursion during entity expansion, which allows context-dependent attackers to cause a denial of service (memory and CPU consumption) via a crafted XML document containing a large number of nested entity references, aka the "billion laughs attack." | CVSS3: 6.5 | 1% Низкий | больше 22 лет назад |
| CVSS2: 9.3 | 1% Низкий | больше 22 лет назад | |
| CVSS2: 7.5 | 5% Низкий | около 22 лет назад | |
| CVSS2: 7.5 | 20% Средний | около 22 лет назад | |
| CVSS2: 7.2 | 1% Низкий | около 22 лет назад | |
| CVSS2: 4.6 | 0% Низкий | больше 22 лет назад | |
| CVSS2: 10 | 1% Низкий | больше 22 лет назад | |
| CVSS2: 7.5 | 2% Низкий | около 22 лет назад | |
| CVE-2003-0967 FreeRadius DoS | CVSS2: 5 | 6% Низкий | больше 22 лет назад |
| CVSS2: 7.2 | 1% Низкий | больше 22 лет назад | |
| CVSS2: 4.6 | 0% Низкий | около 22 лет назад | |
| CVSS2: 7.5 | 2% Низкий | больше 22 лет назад | |
| CVSS2: 5 | 2% Низкий | больше 22 лет назад | |
| CVSS2: 7.5 | 3% Низкий | больше 22 лет назад | |
| CVSS3: 9.8 | 20% Средний | больше 22 лет назад | |
| CVSS2: 2.1 | 0% Низкий | больше 22 лет назад |
Уязвимостей на страницу