Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
document server vulnerabilities and exploits
(subscribe to this query)
4
CVSSv2
CVE-2022-0904
A stack overflow bug in the document extractor in Mattermost Server in versions up to and including 6.3.2 allows an malicious user to crash the server via submitting a maliciously crafted Apple Pages document.
Mattermost Mattermost Server
9.3
CVSSv2
CVE-2013-0686
Invensys Wonderware Information Server (WIS) 4.0 SP1SP1, 4.5- Portal, and 5.0- Portal allows remote malicious users to read arbitrary files, send HTTP requests to intranet servers, or cause a denial of service (CPU and memory consumption) via an XML document containing an externa...
Invensys Wonderware Information Server 4.5
Invensys Wonderware Information Server 5.0
Invensys Wonderware Information Server 4.0
1.9
CVSSv2
CVE-2017-0220
The Windows kernel in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, and Windows Server 2012 Gold allows authenticated malicious users to obtain sensitive information via a specially crafted document, aka "Windows Kernel Information Disclosure Vulnerability," a diff...
Microsoft Windows 7
Microsoft Windows Server 2008 R2
Microsoft Windows Server 2012 -
Microsoft Windows Server 2008
1 EDB exploit
5.1
CVSSv2
CVE-2006-0761
Buffer overflow in BlackBerry Attachment Service in Research in Motion (RIM) BlackBerry Enterprise Server 2.2 and 4.0 before SP3 Hotfix 4 for IBM Lotus Domino, 3.6 before SP7 and 5.0 before SP3 Hotfix 3 for Microsoft Exchangem, and 4.0 for Novell GroupWise before SP3 Hotfix 1 mig...
Rim Blackberry Enterprise Server 2.2
Rim Blackberry Enterprise Server 2.2 Sp2
Rim Blackberry Enterprise Server 3.6 Sp1a
Rim Blackberry Enterprise Server 3.6 Sp4 Hotfix2
Rim Blackberry Enterprise Server 4.0 Sp3
Rim Blackberry Enterprise Server 2.2 Sp2a
Rim Blackberry Enterprise Server 2.2 Sp3a
Rim Blackberry Enterprise Server 4.0
Rim Blackberry Enterprise Server 4.0 Sp1
Rim Blackberry Enterprise Server 3.6.1
Rim Blackberry Enterprise Server 3.6
Rim Blackberry Enterprise Server 4.0 Sp2
Rim Blackberry Enterprise Server 2.2 Sp4
Rim Blackberry Enterprise Server 2.2 Sp4 Hotfix2
5
CVSSv2
CVE-2001-0557
T. Hauck Jana Webserver 1.46 and previous versions allows a remote malicious user to view arbitrary files via a '..' (dot dot) attack which is URL encoded (%2e%2e).
T. Hauck Jana Web Server 1.0j
T. Hauck Jana Web Server 1.45
T. Hauck Jana Web Server 2.0 Beta 1
T. Hauck Jana Web Server
1 EDB exploit
7.8
CVSSv2
CVE-2010-3595
Unspecified vulnerability in the Oracle Document Capture component in Oracle Fusion Middleware 10.1.3.4 and 10.1.3.5 allows remote malicious users to affect confidentiality via unknown vectors related to Import Server. NOTE: the previous information was obtained from the January ...
Oracle Fusion Middleware 10.1.3.4
Oracle Fusion Middleware 10.1.3.5
1 EDB exploit
6
CVSSv2
CVE-2016-2945
The API Discovery implementation in IBM WebSphere Application Server (WAS) 8.5.5.8 up to and including 8.5.5.9 Liberty before Liberty Fix Pack 16.0.0.2 allows remote authenticated users to gain privileges via an external reference in a Swagger document.
Ibm Websphere Application Server 8.5.5.8
Ibm Websphere Application Server 8.5.5.9
4.3
CVSSv2
CVE-2011-0096
The MHTML protocol handler in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 does not properly handle a MIME format in a request for content blocks in a document, whic...
Microsoft Windows Server 2008
Microsoft Windows Server 2008 R2
Microsoft Windows Xp
Microsoft Windows Server 2008 -
Microsoft Windows 7 -
Microsoft Windows Vista
Microsoft Windows Server 2003
Microsoft Windows 2003 Server
1 EDB exploit
3 Articles
4.3
CVSSv2
CVE-2015-2556
The InfoPath Forms Services component in Microsoft SharePoint Server 2007 SP3 and 2010 SP2 misparses DTDs, which allows remote malicious users to read arbitrary files via an XML document containing an external entity declaration in conjunction with an entity reference, related to...
Microsoft Sharepoint Server 2007
Microsoft Sharepoint Server 2010
7.2
CVSSv2
CVE-2003-0542
Multiple stack-based buffer overflows in (1) mod_alias and (2) mod_rewrite for Apache prior to 1.3.29 allow malicious users to create configuration files to cause a denial of service (crash) or execute arbitrary code via a regular expression with more than 9 captures.
Apache Http Server 2.0.42
Apache Http Server 1.3.23
Apache Http Server 2.0.47
Apache Http Server 1.3.27
Apache Http Server 2.0.35
Apache Http Server 2.0.37
Apache Http Server 2.0.44
Apache Http Server 1.3.1
Apache Http Server 1.3.25
Apache Http Server 1.3.28
Apache Http Server 1.3.19
Apache Http Server 2.0.39
Apache Http Server 1.3.24
Apache Http Server 1.3.20
Apache Http Server 1.3.6
Apache Http Server 2.0.41
Apache Http Server 1.3.4
Apache Http Server 1.3.18
Apache Http Server 2.0.32
Apache Http Server 2.0.38
Apache Http Server 1.3
Apache Http Server 1.3.12
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2023-21991
CVE-2024-32674
path traversal
CVE-2023-21987
denial of service
dos
CVE-2024-4647
CVE-2024-25519
CVE-2024-33612
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
« PREV
2
3
4
5
6
7
8
9
10
NEXT »