Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
validation vulnerabilities and exploits
(subscribe to this query)
4.3
CVSSv2
CVE-2009-0050
Lasso 2.2.1 and previous versions does not properly check the return value from the OpenSSL DSA_verify function, which allows remote malicious users to bypass validation of the certificate chain via a malformed SSL/TLS signature, a similar vulnerability to CVE-2008-5077.
Entrouvert Lasso
Entrouvert Lasso 2.0.0-1
Entrouvert Lasso 1.9.9.0
7.5
CVSSv2
CVE-2005-4622
Directory traversal vulnerability in eFileGo 3.01 allows remote malicious users to execute arbitrary code, read arbitrary files, and upload arbitrary files via a ... (triple dot) in (1) the URL on port 608 and (2) the argument to upload.exe.
Efilego Efilego 3.0.1
1 EDB exploit
7.5
CVSSv2
CVE-2006-0135
SQL injection vulnerability in login.php in TheWebForum (twf) 1.2.1 allows remote malicious users to execute arbitrary SQL commands and bypass login authentication via the username parameter (aka the u variable).
Thewebforum Thewebforum
1 EDB exploit
7.5
CVSSv2
CVE-2010-0614
SQL injection vulnerability in ajax.php in evalSMSI 2.1.03 allows remote malicious users to execute arbitrary SQL commands via the query parameter in the (1) question action, and possibly the (2) sub_par or (3) num_quest actions.
Myshell Evalsmsi 2.1.03
1 EDB exploit
3.6
CVSSv2
CVE-2002-1673
The web interface for Webmin 0.92 does not properly quote or filter script code in files that are displayed to the interface, which allows local users to execute script and possibly steal cookies by inserting the script into certain files or fields, such as a real user name entry...
Webmin Webmin 0.1
Webmin Webmin 0.41
Webmin Webmin 0.42
Webmin Webmin 0.78
Webmin Webmin 0.79
Webmin Webmin 0.80
Webmin Webmin 0.92.1
Webmin Webmin 0.22
Webmin Webmin 0.3
Webmin Webmin 0.6
Webmin Webmin 0.7
Webmin Webmin 0.85
Webmin Webmin 0.88
Webmin Webmin 0.31
Webmin Webmin 0.4
Webmin Webmin 0.76
Webmin Webmin 0.77
Webmin Webmin 0.91
Webmin Webmin 0.92
Webmin Webmin 0.2
Webmin Webmin 0.21
Webmin Webmin 0.5
1 EDB exploit
3.5
CVSSv2
CVE-2018-3815
The "XML Interface to Messaging, Scheduling, and Signaling" (XIMSS) protocol implementation in CommuniGate Pro (CGP) 6.2 suffers from a Missing XIMSS Protocol Validation attack that leads to an email spoofing attack, allowing a malicious authenticated malicious user to ...
Stalker Communigate Pro 6.2
7.5
CVSSv2
CVE-2007-3909
Multiple SQL injection vulnerabilities in Bandersnatch 0.4 allow remote malicious users to execute arbitrary SQL commands via the (1) date and (2) limit parameters to index.php, and other unspecified vectors.
Bandersnatch Bandersnatch 0.4
1 EDB exploit
7.5
CVSSv2
CVE-2018-19971
JFrog Artifactory Pro 6.5.9 has Incorrect Access Control.
Jfrog Artifactory 6.5.9
5.8
CVSSv2
CVE-2021-1134
A vulnerability in the Cisco Identity Services Engine (ISE) integration feature of the Cisco DNA Center Software could allow an unauthenticated, remote malicious user to gain unauthorized access to sensitive data. The vulnerability is due to an incomplete validation of the X.509 ...
Cisco Dna Center
NA
CVE-2023-22955
An issue exists on AudioCodes VoIP desk phones up to and including 3.4.4.1000. The validation of firmware images only consists of simple checksum checks for different firmware components. Thus, by knowing how to calculate and where to store the required checksums for the flasher ...
Audiocodes C470hd Firmware
Audiocodes C455hd Firmware
Audiocodes C435hd Firmware
Audiocodes 445hd Firmware
Audiocodes 405hd Firmware
Audiocodes C450hd Firmware
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2023-7073
CVE-2024-5496
CVE-2024-5495
XPath injection
bypass
CVE-2024-30043
CVE-2024-24919
denial of service
CVE-2024-35468
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
« PREV
3
4
5
6
7
8
9
10
NEXT »