Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

todor donev vulnerabilities and exploits

(subscribe to this query)
NA
CVE-2007-3285
Mozilla Firefox prior to 2.0.0.5, when run on Windows, allows remote malicious users to bypass file type checks and possibly execute programs via a (1) file:/// or (2) resource: URI with a dangerous extension, followed by a NULL byte (%00) and a safer extension, which causes Fire...
Mozilla Firefox 0.10.1Mozilla Firefox 1.0.1Mozilla Firefox 1.0.3Mozilla Firefox 1.5.0.1Mozilla Firefox 1.5.0.11Mozilla Firefox 1.5.0.6Mozilla Firefox 1.5.0.8Mozilla Firefox 1.5.6Mozilla Firefox 1.5.8Mozilla Firefox 2.0Mozilla Firefox 1.0.5Mozilla Firefox 1.0.6Mozilla Firefox 1.0.7Mozilla Firefox 1.0.8Mozilla Firefox 1.5.1Mozilla Firefox 1.5.2Mozilla Firefox 1.5.3Mozilla Firefox 1.5.4Mozilla Firefox 0.9Mozilla Firefox 0.9.1Mozilla Firefox 0.9.2Mozilla Firefox 0.9.3
NA
CVE-2012-1025
Absolute path traversal vulnerability in file in Enigma2 Webinterface 1.6.0 up to and including 1.6.8, 1.6rc3, and 1.7.0 allows remote malicious users to read arbitrary files via a full pathname in the file parameter.
Dream-multimedia-tv Enigma2 Webinterface 1.6.3Dream-multimedia-tv Enigma2 Webinterface 1.6.4Dream-multimedia-tv Enigma2 Webinterface 1.6.5Dream-multimedia-tv Enigma2 Webinterface 1.6.6Dream-multimedia-tv Enigma2 Webinterface 1.6.7Dream-multimedia-tv Enigma2 Webinterface 1.6.0Dream-multimedia-tv Enigma2 Webinterface 1.6.2Dream-multimedia-tv Enigma2 Webinterface 1.6Dream-multimedia-tv Enigma2 Webinterface 1.6.1Dream-multimedia-tv Enigma2 Webinterface 1.6.8Dream-multimedia-tv Enigma2 Webinterface 1.7.0
NA
CVE-2012-1024
Directory traversal vulnerability in file in Enigma2 Webinterface 1.5rc1 and 1.5beta4 allows remote malicious users to read arbitrary files via a .. (dot dot) in the file parameter.
Dream-multimedia-tv Enigma2 Webinterface 1.5
NA
CVE-2011-4716
Directory traversal vulnerability in file in DreamBox DM800 1.6rc3, 1.5rc1, and previous versions allows remote malicious users to read arbitrary files via the file parameter.
Dream-multimedia-tv Dreambox Dm800 Hd Se FirmwareDream-multimedia-tv Dreambox Dm800 Hd Se Firmware 1.5Dream-multimedia-tv Dreambox Dm800 Hd Se -Dream-multimedia-tv Dreambox Dm800 Hd Pvr Firmware 1.5Dream-multimedia-tv Dreambox Dm800 Hd Pvr Firmware 1.6Dream-multimedia-tv Dreambox Dm800 Hd Pvr -
NA
CVE-2013-0229
The ProcessSSDPRequest function in minissdp.c in the SSDP handler in MiniUPnP MiniUPnPd prior to 1.4 allows remote malicious users to cause a denial of service (service crash) via a crafted request that triggers a buffer over-read.
Miniupnp Project MiniupnpdMiniupnp Project Miniupnpd 1.2Miniupnp Project Miniupnpd 1.1Miniupnp Project Miniupnpd 1.0
NA
CVE-2013-0230
Stack-based buffer overflow in the ExecuteSoapAction function in the SOAPAction handler in the HTTP service in MiniUPnP MiniUPnPd 1.0 allows remote malicious users to execute arbitrary code via a long quoted method.
Miniupnp Project Miniupnpd 1.0
NA
CVE-2010-3856
ld.so in the GNU C Library (aka glibc or libc6) prior to 2.11.3, and 2.12.x prior to 2.12.2, does not properly restrict use of the LD_AUDIT environment variable to reference dynamic shared objects (DSOs) as audit objects, which allows local users to gain privileges by leveraging ...
Gnu Glibc 2.2.2Gnu Glibc 2.9Gnu Glibc 2.7Gnu Glibc 2.1.2Gnu Glibc 2.11Gnu Glibc 2.0.5Gnu Glibc 2.2.5Gnu Glibc 2.0.6Gnu Glibc 2.10.1Gnu Glibc 1.00Gnu Glibc 1.06Gnu Glibc 2.1.1Gnu Glibc 1.02Gnu Glibc 2.0.3Gnu Glibc 1.07Gnu Glibc 2.3.1Gnu Glibc 2.3Gnu Glibc 2.12.0Gnu Glibc 2.0Gnu Glibc 2.1.1.6Gnu Glibc 1.04Gnu Glibc 1.01
NA
CVE-2010-3847
elf/dl-load.c in ld.so in the GNU C Library (aka glibc or libc6) up to and including 2.11.2, and 2.12.x up to and including 2.12.1, does not properly handle a value of $ORIGIN for the LD_AUDIT environment variable, which allows local users to gain privileges via a crafted dynamic...
Gnu Glibc 2.2.2Gnu Glibc 2.9Gnu Glibc 2.7Gnu Glibc 2.1.2Gnu Glibc 2.11Gnu Glibc 2.0.5Gnu Glibc 2.2.5Gnu Glibc 2.0.6Gnu Glibc 2.10.1Gnu Glibc 1.00Gnu Glibc 1.06Gnu Glibc 2.1.1Gnu Glibc 1.02Gnu Glibc 2.0.3Gnu Glibc 1.07Gnu Glibc 2.3.1Gnu Glibc 2.3Gnu Glibc 2.12.0Gnu Glibc 2.0Gnu Glibc 2.1.1.6Gnu Glibc 1.04Gnu Glibc 1.01
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2023-49333CVE-2024-33901CVE-2024-36001CVE-2024-2835firewallXPath injectionauthentication bypassCVE-2024-22120CVE-2024-32002
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook