Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
lite vulnerabilities and exploits
(subscribe to this query)
5.1
CVSSv2
CVE-2006-0765
GUI display truncation vulnerability in ICQ Inc. (formerly Mirabilis) ICQ 2003a, 2003b, Lite 4.0, Lite 4.1, and possibly other Windows versions allows user-assisted remote malicious users to hide malicious file extensions, bypass Windows security warnings via a filename that is a...
Mirabilis Icq Lite 4.1
Mirabilis Icq 2003b
Mirabilis Icq Lite 4.0
Mirabilis Icq 2003a
5.1
CVSSv2
CVE-2006-0766
ICQ Inc. (formerly Mirabilis) ICQ 2003a, 2003b, Lite 4.0, Lite 4.1, and possibly other Windows versions allows user-assisted remote malicious users to hide malicious file extensions and bypass Windows security warnings via a filename that ends in an assumed-safe extension such as...
Mirabilis Icq 2003a
Mirabilis Icq 2003b
Mirabilis Icq Lite 4.0
Mirabilis Icq Lite 4.1
7.5
CVSSv2
CVE-2005-0301
comersus_backoffice_install10.asp in BackOffice Lite 6.0 and 6.01 allows remote malicious users to bypass authentication and gain privileges via a direct request to the program.
Comersus Open Technologies Comersus Backoffice Lite 6.0
Comersus Open Technologies Comersus Backoffice Lite 6.1
4.3
CVSSv2
CVE-2005-0303
Multiple cross-site scripting (XSS) vulnerabilities in (1) comersus_supportError.asp or (2) comersus_backofficelite_supportError.asp in BackOffice Lite 6.0 and 6.01 allow remote malicious users to inject arbitrary web script or HTML via the error parameter.
Comersus Open Technologies Comersus Backoffice Lite 6.0
Comersus Open Technologies Comersus Backoffice Lite 6.1
9.3
CVSSv2
CVE-2008-4499
Multiple directory traversal vulnerabilities in PHP Web Explorer 0.99b and previous versions allow remote malicious users to include and execute arbitrary local files via a .. (dot dot) in the (1) refer parameter to main.php and the (2) file parameter to edit.php.
Php Web Explorer Php Web Explorer Lite
Php Web Explorer Php Web Explorer Lite 0.99a
2 EDB exploits
4.3
CVSSv2
CVE-2018-6834
static/js/pad_utils.js in Etherpad Lite before v1.6.3 has XSS via window.location.href.
Etherpad Etherpad Lite
9.3
CVSSv2
CVE-2017-8137
HedEx Earlier than V200R006C00 versions has a dynamic link library (DLL) hijacking vulnerability due to calling the DDL file by accessing a relative path. An attacker could exploit this vulnerability to tamper with the DLL file, leading to DLL hijacking.
Huawei Hedex Lite
4.3
CVSSv2
CVE-2017-8139
HedEx Earlier than V200R006C00 versions have the stored cross-site scripting (XSS) vulnerability. Attackers can exploit the vulnerability to plant malicious scripts into the configuration file to interrupt the services of legitimate users.
Huawei Hedex Lite
4.3
CVSSv2
CVE-2017-8136
HedEx Earlier than V200R006C00 versions has an arbitrary file download vulnerability. An attacker could exploit it to download arbitrary files on a target device to cause information leak.
Huawei Hedex Lite
6.8
CVSSv2
CVE-2017-8138
HedEx Earlier than V200R006C00 versions has a cross-site request forgery (CSRF) vulnerability. An attacker could trick a user into accessing a website containing malicious scripts which may tamper with configurations and interrupt normal services.
Huawei Hedex Lite
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
validation
CVE-2012-1823
malicious code
CVE-2024-5770
CVE-2023-45866
CVE-2024-35687
local users
CVE-2024-31246
CVE-2024-35730
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
« PREV
4
5
6
7
8
9
10
NEXT »