Show filters
249 Total Results
Displaying 231-240 of 249
Sort by:
Attacker Value
Unknown
CVE-2009-3233
Disclosure Date: September 17, 2009 (last updated October 04, 2023)
changetrack 4.3 allows local users to execute arbitrary commands via CRLF sequences and shell metacharacters in a filename in a directory that is checked by changetrack.
0
Attacker Value
Unknown
CVE-2008-3429
Disclosure Date: July 31, 2008 (last updated October 04, 2023)
Buffer overflow in URI processing in HTTrack and WinHTTrack before 3.42-3 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long URL.
0
Attacker Value
Unknown
CVE-2007-2819
Disclosure Date: May 22, 2007 (last updated October 04, 2023)
Cross-site scripting (XSS) vulnerability in reportItem.do in Track+ 3.3.2 and earlier allows remote attackers to inject arbitrary web script or HTML via the projId parameter.
0
Attacker Value
Unknown
CVE-2007-0852
Disclosure Date: February 08, 2007 (last updated October 04, 2023)
Cross-site scripting (XSS) vulnerability in DevTrack 6.x allows remote attackers to inject arbitrary web script or HTML via the "Keyword search" form field and unspecified other form fields that populate a public saved query. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
0
Attacker Value
Unknown
CVE-2007-0853
Disclosure Date: February 08, 2007 (last updated October 04, 2023)
SQL injection vulnerability in DevTrack 6.0.3 allows remote attackers to execute arbitrary SQL commands via the Username form field. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
0
Attacker Value
Unknown
CVE-2004-2563
Disclosure Date: December 31, 2004 (last updated February 22, 2025)
Serena TeamTrack 6.1.1 allows remote attackers to obtain sensitive information such as user names, versions, and database information, and conduct cross-site scripting (XSS) attacks, via a direct request to tmtrack.dll with modified LoginPage and Template parameters.
0
Attacker Value
Unknown
CVE-2004-0604
Disclosure Date: December 06, 2004 (last updated February 22, 2025)
The HTTP client and server in giFT-FastTrack 0.8.6 and earlier allows remote attackers to cause a denial of service (crash), possibly via an empty search query, which triggers a NULL dereference.
0
Attacker Value
Unknown
CVE-2004-0278
Disclosure Date: November 23, 2004 (last updated February 22, 2025)
Ratbag game engine, as used in products such as Dirt Track Racing, Leadfoot, and World of Outlaws Spring Cars, allows remote attackers to cause a denial of service (CPU consumption) via a TCP packet that specifies the length of data to read and then sends a second TCP packet that contains less data than specified, which causes Ratbag to repeatedly check the socket for more data.
0
Attacker Value
Unknown
CVE-2002-2158
Disclosure Date: December 31, 2002 (last updated February 22, 2025)
zenTrack 2.0.3 and earlier allows remote attackers to obtain the full path to the web root via an invalid ticket ID, which leaks the path in an error message.
0
Attacker Value
Unknown
CVE-2001-0175
Disclosure Date: March 26, 2001 (last updated February 22, 2025)
The caching module in Netscape Fasttrack Server 4.1 allows remote attackers to cause a denial of service (resource exhaustion) by requesting a large number of non-existent URLs.
0
