Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
inject vulnerabilities and exploits
(subscribe to this query)
NA
CVE-2011-1431
The STARTTLS implementation in qmail-smtpd.c in qmail-smtpd in the netqmail-1.06-tls patch for netqmail 1.06 does not properly restrict I/O buffering, which allows man-in-the-middle malicious users to insert commands into encrypted SMTP sessions by sending a cleartext command tha...
Frederik Vermeulen Netqmail 1.06
NA
CVE-2011-1430
The STARTTLS implementation in the server in Ipswitch IMail 11.03 and previous versions does not properly restrict I/O buffering, which allows man-in-the-middle malicious users to insert commands into encrypted SMTP sessions by sending a cleartext command that is processed after ...
Ipswitch Imail 8.22
Ipswitch Imail 8.11
Ipswitch Imail 6.1
Ipswitch Imail 6.0.2
Ipswitch Imail 6.0
Ipswitch Imail 6.0.1
Ipswitch Imail 7.0.5
Ipswitch Imail 7.0.2
Ipswitch Imail 7.0.3
Ipswitch Imail 8.0.3
Ipswitch Imail 8.0.5
Ipswitch Imail 11
Ipswitch Imail 10.02
Ipswitch Imail 6.00
Ipswitch Imail 6.06
Ipswitch Imail 2006.1
Ipswitch Imail 5.0.8
Ipswitch Imail 5.0.5
Ipswitch Imail 7.0.4
Ipswitch Imail 8.1
Ipswitch Imail 8.12
Ipswitch Imail 11.02
NA
CVE-2011-1575
The STARTTLS implementation in ftp_parser.c in Pure-FTPd prior to 1.0.30 does not properly restrict I/O buffering, which allows man-in-the-middle malicious users to insert commands into encrypted FTP sessions by sending a cleartext command that is processed after TLS is in place,...
Pureftpd Pure-ftpd 1.0.16a
Pureftpd Pure-ftpd 1.0.14
Pureftpd Pure-ftpd 1.0.15
Pureftpd Pure-ftpd 1.0.20
Pureftpd Pure-ftpd 1.0.21
Pureftpd Pure-ftpd 1.0.10
Pureftpd Pure-ftpd 1.0.9
Pureftpd Pure-ftpd 1.0.2
Pureftpd Pure-ftpd 1.0.1
Pureftpd Pure-ftpd 0.99.1a
Pureftpd Pure-ftpd 0.99.1
Pureftpd Pure-ftpd 0.98.6
Pureftpd Pure-ftpd 0.98.5
Pureftpd Pure-ftpd 0.98pre2
Pureftpd Pure-ftpd 0.98pre1
Pureftpd Pure-ftpd 0.97.3
Pureftpd Pure-ftpd 0.97.2
Pureftpd Pure-ftpd 0.97pre1
Pureftpd Pure-ftpd 0.96.1
Pureftpd Pure-ftpd 0.95-pre3
Pureftpd Pure-ftpd 0.95-pre2
Pureftpd Pure-ftpd 0.95-pre1
NA
CVE-2011-1432
The STARTTLS implementation in SCO SCOoffice Server does not properly restrict I/O buffering, which allows man-in-the-middle malicious users to insert commands into encrypted SMTP sessions by sending a cleartext command that is processed after TLS is in place, related to a "...
Sco Scoofficeserver
4.3
CVSSv3
CVE-2020-15011
GNU Mailman prior to 2.1.33 allows arbitrary content injection via the Cgi/private.py private archive login page.
Gnu Mailman
Canonical Ubuntu Linux 16.04
Canonical Ubuntu Linux 18.04
Debian Debian Linux 8.0
Debian Debian Linux 9.0
Debian Debian Linux 10.0
6.5
CVSSv3
CVE-2020-12108
/options/mailman in GNU Mailman prior to 2.1.31 allows Arbitrary Content Injection.
Gnu Mailman
Debian Debian Linux 9.0
Debian Debian Linux 10.0
Fedoraproject Fedora 31
Opensuse Leap 15.1
Opensuse Backports Sle 15.0
Opensuse Leap 15.2
Canonical Ubuntu Linux 18.04
Canonical Ubuntu Linux 16.04
NA
CVE-2007-5615
CRLF injection vulnerability in Mortbay Jetty prior to 6.1.6rc0 allows remote malicious users to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via unspecified vectors.
Mortbay Jetty Jetty
NA
CVE-2012-3001
Mutiny Standard prior to 4.5-1.12 allows remote malicious users to execute arbitrary commands via the network-interface menu, related to a "command injection vulnerability."
Mutiny Standard 4.5-1.05
Mutiny Standard 4.5-1.03
Mutiny Standard 4.4-1.12
Mutiny Standard
Mutiny Standard 4.5-1.07
1 EDB exploit
7.5
CVSSv3
CVE-2017-1001000
The register_routes function in wp-includes/rest-api/endpoints/class-wp-rest-posts-controller.php in the REST API in WordPress 4.7.x prior to 4.7.2 does not require an integer identifier, which allows remote malicious users to modify arbitrary pages via a request for wp-json/wp/v...
Wordpress Wordpress 4.7.1
Wordpress Wordpress 4.7
Wordpress Wordpress 4.7.2
1 Nmap script
3 Github repositories
NA
CVE-2005-2282
Multiple cross-site scripting (XSS) vulnerabilities in WebEOC prior to 6.0.2 allow remote malicious users to inject arbitrary web script and HTML via unknown vectors.
Esi Products Webeoc 6.0.2
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
remote code execution
CVE-2024-34909
CVE-2024-3317
SSTI
CVE-2024-3400
CVE-2024-30051
wireless
CVE-2024-4622
CVE-2024-4908
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
« PREV
1
2
3
4
5
6
7
8
NEXT »