Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

stefano di paola vulnerabilities and exploits

(subscribe to this query)
NA
CVE-2005-0709
MySQL 4.0.23 and previous versions, and 4.1.x up to 4.1.10, allows remote authenticated users with INSERT and DELETE privileges to execute arbitrary code by using CREATE FUNCTION to access libc calls, as demonstrated by using strcat, on_exit, and exit.
Oracle Mysql 4.0.11Oracle Mysql 4.0.20Oracle Mysql 4.0.21Oracle Mysql 4.0.7Oracle Mysql 4.0.8Oracle Mysql 4.1.2Mysql Mysql 4.1.3Oracle Mysql 4.0.1Oracle Mysql 4.0.10Oracle Mysql 4.0.18Oracle Mysql 4.0.2Oracle Mysql 4.0.5aOracle Mysql 4.0.6Oracle Mysql 4.1.0Mysql Mysql 4.1.10Oracle Mysql 4.0.12Oracle Mysql 4.0.13Oracle Mysql 4.0.23Oracle Mysql 4.0.3Oracle Mysql 4.0.9Oracle Mysql 4.1.3Oracle Mysql 4.1.4
NA
CVE-2005-0710
MySQL 4.0.23 and previous versions, and 4.1.x up to 4.1.10, allows remote authenticated users with INSERT and DELETE privileges to bypass library path restrictions and execute arbitrary libraries by using INSERT INTO to modify the mysql.func table, which is processed by the udf_i...
Oracle Mysql 4.0.1Oracle Mysql 4.0.10Oracle Mysql 4.0.2Oracle Mysql 4.0.20Oracle Mysql 4.0.6Oracle Mysql 4.0.7Oracle Mysql 4.1.0Mysql Mysql 4.1.10Oracle Mysql 3.23.49Oracle Mysql 4.0.0Oracle Mysql 4.0.15Oracle Mysql 4.0.18Oracle Mysql 4.0.5Oracle Mysql 4.0.5aOracle Mysql 4.0.9Mysql Mysql 4.1.0Oracle Mysql 4.0.11Oracle Mysql 4.0.21Oracle Mysql 4.0.23Oracle Mysql 4.0.8Oracle Mysql 4.1.2Mysql Mysql 4.1.3
NA
CVE-2005-0711
MySQL 4.0.23 and previous versions, and 4.1.x up to 4.1.10, uses predictable file names when creating temporary tables, which allows local users with CREATE TEMPORARY TABLE privileges to overwrite arbitrary files via a symlink attack.
Oracle Mysql 4.0.0Oracle Mysql 4.0.1Oracle Mysql 4.0.15Oracle Mysql 4.0.18Oracle Mysql 4.0.5Oracle Mysql 4.0.5aMysql Mysql 4.1.0Oracle Mysql 4.1.0Oracle Mysql 3.23.49Oracle Mysql 4.0.13Oracle Mysql 4.0.14Oracle Mysql 4.0.3Oracle Mysql 4.0.4Oracle Mysql 4.0.9Oracle Mysql 4.1.4Oracle Mysql 4.1.5Oracle Mysql 4.0.10Oracle Mysql 4.0.11Oracle Mysql 4.0.2Oracle Mysql 4.0.20Oracle Mysql 4.0.6Oracle Mysql 4.0.7
NA
CVE-2004-0957
Unknown vulnerability in MySQL 3.23.58 and previous versions, when a local user has privileges for a database whose name includes a "_" (underscore), grants privileges to other databases that have similar names, which can allow the user to conduct unauthorized activitie...
Oracle Mysql 3.21Oracle Mysql 3.22Oracle Mysql 3.23Oracle Mysql 3.23.10Oracle Mysql 3.23.27Oracle Mysql 3.23.28Oracle Mysql 3.23.34Oracle Mysql 3.23.36Oracle Mysql 3.23.42Oracle Mysql 3.23.43Oracle Mysql 3.23.5Oracle Mysql 3.23.50Oracle Mysql 3.23.56Oracle Mysql 3.23.58Oracle Mysql 4.0.11Oracle Mysql 4.0.20Oracle Mysql 4.0.3Oracle Mysql 3.22.28Oracle Mysql 3.22.29Oracle Mysql 3.23.23Oracle Mysql 3.23.24Oracle Mysql 3.23.3
NA
CVE-2004-1018
Multiple integer handling errors in PHP prior to 4.3.10 allow malicious users to bypass safe mode restrictions, cause a denial of service, or execute arbitrary code via (1) a negative offset value to the shmop_write function, (2) an "integer overflow/underflow" in the p...
Php PhpCanonical Ubuntu Linux 4.10
NA
CVE-2004-1063
PHP 4.x to 4.3.9, and PHP 5.x to 5.0.2, when running in safe mode on a multithreaded Unix webserver, allows local users to bypass safe_mode_exec_dir restrictions and execute commands outside of the intended safe_mode_exec_dir via shell metacharacters in the current directory name...
Php PhpCanonical Ubuntu Linux 4.10
NA
CVE-2006-1516
The check_connection function in sql_parse.cc in MySQL 4.0.x up to 4.0.26, 4.1.x up to 4.1.18, and 5.0.x up to 5.0.20 allows remote malicious users to read portions of memory via a username without a trailing null byte, which causes a buffer over-read.
Oracle Mysql 4.0.1Oracle Mysql 4.0.10Oracle Mysql 4.0.16Oracle Mysql 4.0.17Oracle Mysql 4.0.24Oracle Mysql 4.0.25Oracle Mysql 4.0.7Oracle Mysql 4.0.8Mysql Mysql 4.1.10Oracle Mysql 4.1.17Oracle Mysql 4.1.18Oracle Mysql 4.1.2Mysql Mysql 4.1.8Oracle Mysql 4.1.9Oracle Mysql 5.0.12Oracle Mysql 5.0.13Mysql Mysql 5.0.3Oracle Mysql 5.0.3Mysql Mysql 5.0.4Oracle Mysql 4.0.0Oracle Mysql 4.0.14Oracle Mysql 4.0.15
NA
CVE-2006-1517
sql_parse.cc in MySQL 4.0.x up to 4.0.26, 4.1.x up to 4.1.18, and 5.0.x up to 5.0.20 allows remote malicious users to obtain sensitive information via a COM_TABLE_DUMP request with an incorrect packet length, which includes portions of memory in an error message.
Oracle Mysql 4.0.0Oracle Mysql 4.0.1Oracle Mysql 4.0.15Oracle Mysql 4.0.16Oracle Mysql 4.0.24Oracle Mysql 4.0.25Oracle Mysql 4.0.7Oracle Mysql 4.1.0Mysql Mysql 4.1.10Oracle Mysql 4.1.17Oracle Mysql 4.1.18Oracle Mysql 4.1.7Mysql Mysql 4.1.8Oracle Mysql 5.0.11Oracle Mysql 5.0.12Mysql Mysql 5.0.3Oracle Mysql 5.0.3Oracle Mysql 4.0.13Oracle Mysql 4.0.14Oracle Mysql 4.0.20Oracle Mysql 4.0.21Oracle Mysql 4.0.10
NA
CVE-2007-1095
Mozilla Firefox prior to 2.0.0.8 and SeaMonkey prior to 1.1.5 do not properly implement JavaScript onUnload handlers, which allows remote malicious users to run certain JavaScript code and access the location DOM hierarchy in the context of the next web site that is visited by a ...
Mozilla Firefox 1.0.5Mozilla Firefox 1.0.4Mozilla Firefox 1.0.1Mozilla Firefox 1.0Mozilla Firefox 1.5Mozilla Firefox 1.0.8Mozilla Firefox 1.4.1Mozilla Firefox 1.5.0.12Mozilla Firefox 1.5.0.1Mozilla Firefox 1.5.0.8Mozilla Firefox 1.5.0.9Mozilla Firefox 1.5.5Mozilla Firefox 2.0Mozilla Firefox 2.0.0.2Mozilla Firefox 0.10Mozilla Firefox 0.9Mozilla Firefox 0.6.1Mozilla Firefox 0.2Mozilla Firefox 1.5.0.5Mozilla Firefox 1.5.0.2Mozilla Firefox 1.5.3Mozilla Firefox 1.5.4
NA
CVE-2007-2292
CRLF injection vulnerability in the Digest Authentication support for Mozilla Firefox prior to 2.0.0.8 and SeaMonkey prior to 1.1.5 allows remote malicious users to conduct HTTP request splitting attacks via LF (%0a) bytes in the username attribute.
Mozilla FirefoxMozilla SeamonkeyMicrosoft Internet Explorer 7.0.5730.11
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2022-48693CVE-2024-30851CVE-2024-34460CVE-2024-2887localCVE-2024-27956remote code executionCVE-2024-34475privilege
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook