Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
cvs vulnerabilities and exploits
(subscribe to this query)
760
VMScore
CVE-2005-3877
Multiple SQL injection vulnerabilities in Simple Document Management System (SDMS) 2.0-CVS and previous versions allow remote malicious users to execute arbitrary SQL commands via the (1) folder_id parameter in list.php and (2) mid parameter in a view action to messages.php.
Cafuego Simple Document Management System 1.1.5
Cafuego Simple Document Management System
Cafuego Simple Document Management System 1.1.4
Cafuego Simple Document Management System 1.1.6
2 EDB exploits
668
VMScore
CVE-2006-6226
Multiple format string vulnerabilities in NeoEngine 0.8.2 and previous versions, and CVS 3422, allow remote malicious users to cause a denial of service and possibly execute arbitrary code via (1) Console::Render in neoengine/console.cpp and (2) TextArea::Render in neowtk/textare...
Neoengine Neoengine 0.8.2
445
VMScore
CVE-2006-6227
The Core::Receive function in neonet/core.cpp for NeoEngine 0.8.2 and previous versions, and CVS 3422, allow remote malicious users to cause a denial of service (engine crash) via a message with a large uiMessageLength that produces a failed memory allocation and a null pointer d...
Neoengine Neoengine 0.8.2
NA
CVE-2023-43071
Dell SmartFabric Storage Software v1.4 (and previous versions) contains possible vulnerabilities for HTML injection or CVS formula injection which might escalate to cross-site scripting attacks in HTML pages in the GUI. A remote authenticated attacker could potentially exploit t...
Dell Smartfabric Storage Software
435
VMScore
CVE-2007-1287
A regression error in the phpinfo function in PHP 4.4.3 to 4.4.6, and PHP 6.0 in CVS, allows remote malicious users to conduct cross-site scripting (XSS) attacks via GET, POST, or COOKIE array values, which are not escaped in the phpinfo output, as originally fixed for CVE-2005-3...
Php Php 4.4.6
Php Php 6.0
Php Php 4.4.4
Php Php 4.4.5
1 EDB exploit
445
VMScore
CVE-2003-0155
bonsai Mozilla CVS query tool allows remote malicious users to gain access to the parameters page without authentication.
Mozilla Bonsai 1.3
383
VMScore
CVE-2009-3989
Bugzilla prior to 3.0.11, 3.2.x prior to 3.2.6, 3.4.x prior to 3.4.5, and 3.5.x prior to 3.5.3 does not block access to files and directories that are used by custom installations, which allows remote malicious users to obtain sensitive information via requests for (1) CVS/, (2) ...
Mozilla Bugzilla 3.0.4
Mozilla Bugzilla 3.0.6
Mozilla Bugzilla 3.0.7
Mozilla Bugzilla 3.0.9
Mozilla Bugzilla 3.4.2
Mozilla Bugzilla 3.4.3
Mozilla Bugzilla 2.20
Mozilla Bugzilla 2.20.1
Mozilla Bugzilla 2.22.5
Mozilla Bugzilla 2.22.4
Mozilla Bugzilla 2.18.4
Mozilla Bugzilla 2.18.5
Mozilla Bugzilla 2.18.6
Mozilla Bugzilla 2.18.2
Mozilla Bugzilla 2.18.3
Mozilla Bugzilla 2.16.8
Mozilla Bugzilla 2.16.7
Mozilla Bugzilla 2.16.1
Mozilla Bugzilla 2.16
Mozilla Bugzilla 2.12
Mozilla Bugzilla 2.10
Mozilla Bugzilla 3.4
445
VMScore
CVE-2006-1195
The enet_protocol_handle_send_fragment function in protocol.c for ENet library CVS version Jul 2005 and previous versions, as used in products including (1) Cube, (2) Sauerbraten, and (3) Duke3d_w32, allows remote malicious users to cause a denial of service (application crash) v...
Enet Enet Library
505
VMScore
CVE-2006-1194
Integer signedness error in the enet_protocol_handle_incoming_commands function in protocol.c for ENet library CVS version Jul 2005 and previous versions, as used in products including (1) Cube, (2) Sauerbraten, and (3) Duke3d_w32, allows remote malicious users to cause a denial ...
Enet Enet Library
1 EDB exploit
828
VMScore
CVE-2018-6461
March Hare WINCVS prior to 2.8.01 build 6610, and CVS Suite prior to 2009R2 build 6610, contains an Insecure Library Loading vulnerability in the wincvs2.exe or wincvs.exe file, which may allow local users to gain privileges via a Trojan horse Python or TCL DLL file in the curren...
March-hare Wincvs
VMScore
CVSSv2
CVSSv3
VMScore
Recommendations:
NULL pointer dereference
CVE-2023-52689
CVE-2024-23803
client side
CVE-2023-52696
information disclosure
CVE-2024-35843
CVE-2024-27130
CVE-2023-52697
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
« PREV
2
3
4
5
6
7
8
9
10
NEXT »