Page 7 of 102 results (0.007 seconds)

CVSS: 5.5EPSS: 0%CPEs: 2EXPL: 0

31 Dec 2005 — Trusted Mobility Agent PC Policy in Trust Digital Trusted Mobility Suite provides a cancel button that bypasses the domain-authentication prompt, which allows local users to sync a handheld (PDA) device despite a policy setting that sync is unauthorized. • http://www.securityfocus.com/archive/1/413417 •

CVSS: 9.8EPSS: 2%CPEs: 1EXPL: 2

19 Sep 2005 — SQL injection vulnerability in login.php in Digital Scribe 1.4 allows remote attackers to execute arbitrary SQL commands via the username parameter. • http://marc.info/?l=bugtraq&m=112680124115325&w=2 •

CVSS: 7.5EPSS: 5%CPEs: 1EXPL: 2

31 Dec 2004 — Buffer overflow in pop3svr.exe for DMS POP3 1.5.3.27 and earlier allows remote attackers to cause a denial of service (service crash) via a long (1) username or (2) password. • https://www.exploit-db.com/exploits/644 •

CVSS: 7.5EPSS: 0%CPEs: 5EXPL: 2

31 Dec 2004 — Digital Reality game engine, as used in Haegemonia 1.0 through 1.0.7 and Desert Rats vs. Afrika Korps 1.0, allows remote attackers to cause a denial of service (crash) via a chat message with a large message size, which triggers an out-of-bounds read. • http://aluigi.altervista.org/adv/hgmcrash-adv.txt •

CVSS: 7.5EPSS: 12%CPEs: 2EXPL: 3

15 Dec 2004 — Battlefield 1942 1.6.19 and earlier, and Battlefield Vietnam 1.2 and earlier, allows a remote master server to cause a denial of service (client crash) via a server reply that contains a large numplayers value, which triggers a null dereference. • https://www.exploit-db.com/exploits/679 •

CVSS: 7.8EPSS: 0%CPEs: 10EXPL: 0

24 Sep 2002 — Buffer overflow in uucp in Compaq Tru64/OSF1 3.x allows local users to execute arbitrary code via a long source (-s) command line parameter. • http://archives.neohapsis.com/archives/vulnwatch/2002-q3/0122.html •

CVSS: 7.8EPSS: 0%CPEs: 12EXPL: 0

24 Sep 2002 — Buffer overflow in inc mail utility for Compaq Tru64/OSF1 3.x allows local users to execute arbitrary code via a long MH environment variable. • http://archives.neohapsis.com/archives/vulnwatch/2002-q3/0122.html •

CVSS: 7.8EPSS: 0%CPEs: 27EXPL: 1

24 Sep 2002 — Buffer overflow in dxterm allows local users to execute arbitrary code via a long -xrm argument. • https://www.exploit-db.com/exploits/21807 •

CVSS: 7.5EPSS: 0%CPEs: 2EXPL: 1

27 Jul 2001 — eEye SecureIIS versions 1.0.3 and earlier allows a remote attacker to bypass filtering of requests made to SecureIIS by escaping HTML characters within the request, which could allow a remote attacker to use restricted variables and perform directory traversal attacks on vulnerable programs that would otherwise be protected. • http://archives.neohapsis.com/archives/bugtraq/2001-05/0185.html •

CVSS: 7.5EPSS: 0%CPEs: 1EXPL: 1

27 Jul 2001 — eEye SecureIIS versions 1.0.3 and earlier does not perform length checking on individual HTTP headers, which allows a remote attacker to send arbitrary length strings to IIS, contrary to an advertised feature of SecureIIS versions 1.0.3 and earlier. • http://archives.neohapsis.com/archives/bugtraq/2001-05/0185.html •