Browse CVEs

MEDIUM 6.5 CVE-2006-4471 The Admin Upload Image functionality in Joomla! before 1.0.11 allows remote authenticated users to upload files outside of the /images/stories/ direc… Joomla\! 1.0.11+ Fix from $1,6002006-08-31 HIGH 7.5 CVE-2006-2428 add.asp in DUware DUbanner 3.1 allows remote attackers to execute arbitrary code by uploading files with arbitrary extensions, such as ASP files, pro… Duware Dubanner Mitigation only Fix from $1,9502006-05-17 MEDIUM 5.0 CVE-2005-3288 Mailsite Express allows remote attackers to upload and execute files with executable extensions such as ASP by attaching the file using the "compose … Mailsite Express Patch available Fix from $1,6002005-10-23 HIGH 7.5 CVE-2005-1868 I-Man 0.9, and possibly earlier versions, allows remote attackers to execute arbitrary PHP code by uploading a file attachment with a .php extension. I Man after 0.9 Fix from $1,9502005-06-09 HIGH 7.5 CVE-2005-1881 upload.php in YaPiG 0.92b, 0.93u and 0.94u does not properly restrict the file extension for uploaded image files, which allows remote attackers to u… Yapig No fix yet Fix from $1,9502005-06-06 HIGH 7.5 CVE-2004-2262EPSS 15% ImageManager in e107 before 0.617 does not properly check the types of uploaded files, which allows remote attackers to execute arbitrary code by upl… E107 0.617+ Fix from $1,9502004-12-31 MEDIUM 5.0 CVE-2002-1841 The document management module in NOLA 1.1.1 and 1.1.2 does not restrict the types of files that are uploaded, which allows remote attackers to uploa… Nola Patch available Fix from $1,6002002-12-31 HIGH 7.5 CVE-2001-0901 Hypermail allows remote attackers to execute arbitrary commands on a server supporting SSI via an attachment with a .shtml extension, which is archiv… Hypermail Mitigation only Fix from $1,9502001-11-19 MEDIUM 5.0 CVE-2001-1099 The default configuration of Norton AntiVirus for Microsoft Exchange 2000 2.x allows remote attackers to identify the recipient's INBOX file path by … Norton Antivirus No fix yet Fix from $1,6002001-09-07 HIGH 7.5 CVE-2001-0340EPSS 6% An interaction between the Outlook Web Access (OWA) service in Microsoft Exchange 2000 Server and Internet Explorer allows attackers to execute malic… Exchange Server Patch available Fix from $1,9502001-07-21 HIGH 8.4 CVE-1999-0036 IRIX login program with a nonzero LOCKOUT parameter allows creation or damage to files. Irix Mitigation only Fix from $1,9501997-05-26