Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
inject vulnerabilities and exploits
(subscribe to this query)
6.8
CVSSv2
CVE-2011-1432
The STARTTLS implementation in SCO SCOoffice Server does not properly restrict I/O buffering, which allows man-in-the-middle malicious users to insert commands into encrypted SMTP sessions by sending a cleartext command that is processed after TLS is in place, related to a "...
Sco Scoofficeserver
5.8
CVSSv2
CVE-2011-1575
The STARTTLS implementation in ftp_parser.c in Pure-FTPd prior to 1.0.30 does not properly restrict I/O buffering, which allows man-in-the-middle malicious users to insert commands into encrypted FTP sessions by sending a cleartext command that is processed after TLS is in place,...
Pureftpd Pure-ftpd 1.0.16a
Pureftpd Pure-ftpd 1.0.14
Pureftpd Pure-ftpd 1.0.15
Pureftpd Pure-ftpd 1.0.20
Pureftpd Pure-ftpd 1.0.21
Pureftpd Pure-ftpd 1.0.10
Pureftpd Pure-ftpd 1.0.9
Pureftpd Pure-ftpd 1.0.2
Pureftpd Pure-ftpd 1.0.1
Pureftpd Pure-ftpd 0.99.1a
Pureftpd Pure-ftpd 0.99.1
Pureftpd Pure-ftpd 0.98.6
Pureftpd Pure-ftpd 0.98.5
Pureftpd Pure-ftpd 0.98pre2
Pureftpd Pure-ftpd 0.98pre1
Pureftpd Pure-ftpd 0.97.3
Pureftpd Pure-ftpd 0.97.2
Pureftpd Pure-ftpd 0.97pre1
Pureftpd Pure-ftpd 0.96.1
Pureftpd Pure-ftpd 0.95-pre3
Pureftpd Pure-ftpd 0.95-pre2
Pureftpd Pure-ftpd 0.95-pre1
2.6
CVSSv2
CVE-2020-15011
GNU Mailman prior to 2.1.33 allows arbitrary content injection via the Cgi/private.py private archive login page.
Gnu Mailman
Canonical Ubuntu Linux 16.04
Canonical Ubuntu Linux 18.04
Debian Debian Linux 8.0
Debian Debian Linux 9.0
Debian Debian Linux 10.0
4.3
CVSSv2
CVE-2020-12108
/options/mailman in GNU Mailman prior to 2.1.31 allows Arbitrary Content Injection.
Gnu Mailman
Debian Debian Linux 9.0
Debian Debian Linux 10.0
Fedoraproject Fedora 31
Opensuse Leap 15.1
Opensuse Backports Sle 15.0
Opensuse Leap 15.2
Canonical Ubuntu Linux 18.04
Canonical Ubuntu Linux 16.04
5
CVSSv2
CVE-2007-5615
CRLF injection vulnerability in Mortbay Jetty prior to 6.1.6rc0 allows remote malicious users to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via unspecified vectors.
Mortbay Jetty Jetty
5
CVSSv2
CVE-2017-1001000
The register_routes function in wp-includes/rest-api/endpoints/class-wp-rest-posts-controller.php in the REST API in WordPress 4.7.x prior to 4.7.2 does not require an integer identifier, which allows remote malicious users to modify arbitrary pages via a request for wp-json/wp/v...
Wordpress Wordpress 4.7.1
Wordpress Wordpress 4.7
Wordpress Wordpress 4.7.2
1 Nmap script
3 Github repositories
8.5
CVSSv2
CVE-2012-3001
Mutiny Standard prior to 4.5-1.12 allows remote malicious users to execute arbitrary commands via the network-interface menu, related to a "command injection vulnerability."
Mutiny Standard 4.5-1.05
Mutiny Standard 4.5-1.03
Mutiny Standard 4.4-1.12
Mutiny Standard
Mutiny Standard 4.5-1.07
1 EDB exploit
4.3
CVSSv2
CVE-2005-2282
Multiple cross-site scripting (XSS) vulnerabilities in WebEOC prior to 6.0.2 allow remote malicious users to inject arbitrary web script and HTML via unknown vectors.
Esi Products Webeoc 6.0.2
4.3
CVSSv2
CVE-2013-0141
Directory traversal vulnerability in McAfee ePolicy Orchestrator (ePO) prior to 4.5.7 and 4.6.x prior to 4.6.6 allows remote malicious users to upload arbitrary files via a crafted request over the Agent-Server communication channel, as demonstrated by writing to the Software/ di...
Mcafee Epolicy Orchestrator 3.6.0
Mcafee Epolicy Orchestrator 3.5.0
Mcafee Epolicy Orchestrator 4.5.5
Mcafee Epolicy Orchestrator 4.5.4
Mcafee Epolicy Orchestrator 4.0
Mcafee Epolicy Orchestrator 3.6.1
Mcafee Epolicy Orchestrator 2.5
Mcafee Epolicy Orchestrator 2.0
Mcafee Epolicy Orchestrator 4.5.0
Mcafee Epolicy Orchestrator 2.5.1
Mcafee Epolicy Orchestrator 3.0
Mcafee Epolicy Orchestrator 4.5.3
Mcafee Epolicy Orchestrator
Mcafee Epolicy Orchestrator 4.6.4
Mcafee Epolicy Orchestrator 4.6.3
Mcafee Epolicy Orchestrator 4.6.1
Mcafee Epolicy Orchestrator 4.6.5
Mcafee Epolicy Orchestrator 4.6.0
Mcafee Epolicy Orchestrator 4.6.2
1 Github repository
7.9
CVSSv2
CVE-2013-0140
SQL injection vulnerability in the Agent-Handler component in McAfee ePolicy Orchestrator (ePO) prior to 4.5.7 and 4.6.x prior to 4.6.6 allows remote malicious users to execute arbitrary SQL commands via a crafted request over the Agent-Server communication channel.
Mcafee Epolicy Orchestrator 3.6.1
Mcafee Epolicy Orchestrator 3.6.0
Mcafee Epolicy Orchestrator 2.0
Mcafee Epolicy Orchestrator 4.5.5
Mcafee Epolicy Orchestrator 3.0
Mcafee Epolicy Orchestrator 2.5
Mcafee Epolicy Orchestrator 3.5.0
Mcafee Epolicy Orchestrator 4.5.4
Mcafee Epolicy Orchestrator 4.5.3
Mcafee Epolicy Orchestrator
Mcafee Epolicy Orchestrator 4.5.0
Mcafee Epolicy Orchestrator 4.0
Mcafee Epolicy Orchestrator 2.5.1
Mcafee Epolicy Orchestrator 4.6.4
Mcafee Epolicy Orchestrator 4.6.3
Mcafee Epolicy Orchestrator 4.6.0
Mcafee Epolicy Orchestrator 4.6.2
Mcafee Epolicy Orchestrator 4.6.1
Mcafee Epolicy Orchestrator 4.6.5
1 EDB exploit
1 Github repository
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-36920
buffer overflow
CVE-2024-36913
CVE-2024-5497
CVE-2024-23917
CVE-2024-4956
server-side request forgery
CVE-2024-35468
SSTI
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
« PREV
1
2
3
4
5
6
7
8
NEXT »