web fresh vulnerabilities and exploits

(subscribe to this query)

4.3

CVSSv2

Cross-site scripting (XSS) vulnerability in guest.cgi in Fresh Guest Book allows remote malicious users to inject arbitrary web script or HTML via the Name field.

Web Fresh Fresh Guest Book 1.0 Web Fresh Fresh Guest Book 2.0 Web Fresh Fresh Guest Book 2.1

1 EDB exploit

2.1

CVSSv2

Cross-site scripting (XSS) vulnerability in the 3 slide gallery in the Fresh theme prior to 7.x-1.4 for Drupal allows remote authenticated users with the administer themes permission to inject arbitrary web script or HTML via unspecified vectors.

Devsaran Fresh 7.x-1.2 Devsaran Fresh 7.x-1.1 Devsaran Fresh 7.x-1.0 Devsaran Fresh 7.x-1.x Devsaran Fresh

4.3

CVSSv2

Cross-site scripting (XSS) vulnerability in register.php in FreshScripts Fresh Email Script 1.0 up to and including 1.11 allows remote malicious users to inject arbitrary web script or HTML via the Email parameter. NOTE: this can be leveraged to modify cookies and conduct session...

Freshscripts Fresh Email Script 1.0 Freshscripts Fresh Email Script 1.11

1 EDB exploit

5

CVSSv2

Microsoft Windows NT 4.0, Windows 2000, Windows XP, and Windows Small Business Server 2003 allow remote malicious users to cause a denial of service (IP stack hang) via a continuous stream of packets on TCP port 135 that have incorrect TCP header checksums and random numbers in c...

Microsoft Windows 2003 Server Datacenter Edition 64-bit Microsoft Windows 2003 Server Standard Microsoft Windows Xp Microsoft Windows 2003 Server Web Microsoft Windows 2003 Server Enterprise 64-bit Microsoft Windows 2000 Microsoft Windows 2003 Server Standard 64-bit Microsoft Windows 2003 Server Enterprise Edition 64-bit Microsoft Windows 2003 Server R2 Microsoft Windows 2003 Server Sp1 Microsoft Windows 2003 Server Enterprise Edition Microsoft Windows 2003 Server Datacenter Edition

1 EDB exploit

NA

In SysAid On-Premise prior to 23.3.36, a path traversal vulnerability leads to code execution after an attacker writes a file to the Tomcat webroot, as exploited in the wild in November 2023.

Sysaid Sysaid On-premises

2 Github repositories1 Article

9.3

CVSSv2

The (1) ListView, (2) ListView2, (3) TreeView, and (4) TreeView2 ActiveX controls in MSCOMCTL.OCX in the Common Controls in Microsoft Office 2003 SP3, 2007 SP2 and SP3, and 2010 Gold and SP1; Office 2003 Web Components SP3; SQL Server 2000 SP4, 2005 SP4, and 2008 SP2, SP3, and R2...

Microsoft Office 2010 Microsoft Office 2003 Microsoft Office Web Components 2003 Microsoft Office 2007 Microsoft Sql Server 2000 Microsoft Sql Server 2008 Microsoft Sql Server 2005 Microsoft Biztalk Server 2002 Microsoft Commerce Server 2002 Microsoft Commerce Server 2007 Microsoft Commerce Server 2009 Microsoft Visual Foxpro 8.0 Microsoft Visual Foxpro 9.0 Microsoft Visual Basic 6.0

1 EDB exploit7 Github repositories44 Articles

10

CVSSv2

A vulnerability in the upgrade mechanism of Cisco collaboration products based on the Cisco Voice Operating System software platform could allow an unauthenticated, remote malicious user to gain unauthorized, elevated access to an affected device. The vulnerability occurs when a ...

Cisco Prime License Manager -Cisco Unity Connection -Cisco Emergency Responder -Cisco Unified Communications Manager Im And Presence Service -Cisco Unified Communications Manager -Cisco Finesse -Cisco Mediasense -Cisco Socialminer -Cisco Unified Intelligence Center -Cisco Hosted Collaboration Solution -Cisco Unified Contact Center Express -

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook