Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

stan bubrouski vulnerabilities and exploits

(subscribe to this query)
NA
CVE-2003-0154
Cross-site scripting vulnerabilities (XSS) in bonsai Mozilla CVS query tool allow remote malicious users to execute arbitrary web script via (1) the file, root, or rev parameters to cvslog.cgi, (2) the file or root parameters to cvsblame.cgi, (3) various parameters to cvsquery.cg...
Mozilla Bonsai 1.3
NA
CVE-2000-0520
Buffer overflow in restore program 0.4b17 and previous versions in dump package allows local users to execute arbitrary commands via a long tape name.
Stelian Pop Dump 0.4b17.0Stelian Pop Dump 0.4b9.0Stelian Pop Dump 0.4b15.1Stelian Pop Dump 0.4b15.30Stelian Pop Dump 0.4b16.0Stelian Pop Dump 0.4b9.9
NA
CVE-2000-0691
The faxrunq and faxrunqd in the mgetty package allows local users to create or modify arbitrary files via a symlink attack which creates a symlink in from /var/spool/fax/outgoing/.last_run to the target file.
Gert Doering Mgetty 1.1.19Gert Doering Mgetty 1.1.21Gert Doering Mgetty 1.1.20
NA
CVE-2001-0440
Buffer overflow in logging functions of licq prior to 1.0.3 allows remote malicious users to cause a denial of service, and possibly execute arbitrary commands.
Conectiva Linux EcommerceConectiva Linux Prg GraficosConectiva Linux 5.0Conectiva Linux 5.1Conectiva Linux 6.0Conectiva Linux 4.1Conectiva Linux 4.2Conectiva Linux 4.0Conectiva Linux 4.0esLicq LicqMandrakesoft Mandrake Linux 7.1Mandrakesoft Mandrake Linux 7.2
NA
CVE-2002-2174
The Telnet proxy of 602Pro LAN SUITE 2002 does not restrict the number of outstanding connections to the local host, which allows remote malicious users to create a denial of service (memory consumption) via a large number of connections.
Software602 602pro Lan Suite 2002
NA
CVE-2003-0153
bonsai Mozilla CVS query tool leaks the absolute pathname of the tool in certain error messages generated by (1) cvslog.cgi, (2) cvsview2.cgi, or (3) multidiff.cgi.
Mozilla Bonsai 1.3
NA
CVE-2005-4327
Multiple cross-site scripting (XSS) vulnerabilities in Michael Arndt WebCal 1.11-3.04 allow remote malicious users to inject arbitrary web script or HTML via the (1) function, (2) year, and (3) date parameters to webcal.cgi, (4) new calendar entries, and (5) notes for entries.
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
blind SQL injectionSSRFbuffer overflowCVE-2023-28952CVE-2023-41822CVE-2024-27956CVE-2023-7028CVE-2024-34447CVE-2024-34460
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook