Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
abysssec vulnerabilities and exploits
(subscribe to this query)
NA
CVE-2010-1248
Buffer overflow in Microsoft Office Excel 2002 SP3 and Office 2004 for Mac allows remote malicious users to execute arbitrary code via an Excel file with a malformed HFPicture (0x866) record, aka "Excel HFPicture Memory Corruption Vulnerability."
Microsoft Excel 2002
Microsoft Office 2004
2 EDB exploits
NA
CVE-2010-3404
Multiple SQL injection vulnerabilities in eshtery CMS (aka eshtery.com) allow remote malicious users to execute arbitrary SQL commands via the (1) Criteria field in an unspecified form related to catlgsearch.aspx or (2) user name to an unspecified form related to adminlogin.aspx.
Eshtery.she7ata Eshtery Cms
1 EDB exploit
NA
CVE-2011-0041
Integer overflow in gdiplus.dll in GDI+ in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold and SP2, and Office XP SP3 allows remote malicious users to execute arbitrary code via a crafted EMF image, aka "GDI+ Int...
Microsoft Windows Server 2008
Microsoft Windows Server 2008 -
Microsoft Windows Xp -
Microsoft Windows Xp
Microsoft Windows Vista
Microsoft Windows Server 2003
Microsoft Windows 2003 Server
Microsoft Office Xp
1 EDB exploit
NA
CVE-2010-3603
Cross-site request forgery (CSRF) vulnerability in the file manager service (Services/FileService.ashx) in mojoPortal 2.3.4.3 and 2.3.5.1 allows remote malicious users to hijack the authentication of administrators for requests that rename arbitrary files, as demonstrated by caus...
Sourcetreesolutions Mojoportal 2.3.4.3
Sourcetreesolutions Mojoportal 2.3.5.1
1 EDB exploit
NA
CVE-2010-4893
Cross-site scripting (XSS) vulnerability in foodvendors.php in FestOS 2.3b allows remote malicious users to inject arbitrary web script or HTML via the category parameter in a details action.
Festengine Festos 2.3b
1 EDB exploit
NA
CVE-2010-0824
Unspecified vulnerability in Microsoft Office Excel 2002 SP3 and Office 2004 for Mac allows remote malicious users to execute arbitrary code via an Excel file with a malformed WOPT (0x80B) record, aka "Excel Record Memory Corruption Vulnerability," a different vulnerabi...
Microsoft Excel 2002
Microsoft Office 2004
1 EDB exploit
NA
CVE-2010-3480
Directory traversal vulnerability in index.php in ApPHP PHP MicroCMS 1.0.1, when magic_quotes_gpc is disabled, allows remote malicious users to include and execute arbitrary local files via a .. (dot dot) in the page parameter.
Apphp Php Microcms 1.0.1
1 EDB exploit
NA
CVE-2010-3481
Multiple SQL injection vulnerabilities in login.php in ApPHP PHP MicroCMS 1.0.1, when magic_quotes_gpc is disabled, allow remote malicious users to execute arbitrary SQL commands via the (1) user_name and (2) password variables, possibly related to include/classes/Login.php. NOTE...
Apphp Php Microcms 1.0.1
1 EDB exploit
NA
CVE-2010-3602
Cross-site scripting (XSS) vulnerability in ProfileView.aspx in mojoPortal 2.3.4.3 and 2.3.5.1 allows remote malicious users to inject arbitrary web script or HTML via the User ID parameter. NOTE: some of these details are obtained from third party information.
Sourcetreesolutions Mojoportal 2.3.5.1
Sourcetreesolutions Mojoportal 2.3.4.3
1 EDB exploit
NA
CVE-2012-4957
Absolute path traversal vulnerability in NFRAgent.exe in Novell File Reporter 1.0.2 allows remote malicious users to read arbitrary files via a /FSF/CMD request with a full pathname in a PATH element of an SRS record.
Novell File Reporter 1.0.2
1 EDB exploit
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-26925
CVE-2023-41826
LFI
CVE-2022-22364
CVE-2024-2887
command injection
remote code execution
CVE-2024-34446
CVE-2022-48699
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
« PREV
1
2
3
4
5
NEXT »