Show filters
110 Total Results
Displaying 61-70 of 110
Sort by:
Attacker Value
Unknown
CVE-2013-1218
Disclosure Date: July 18, 2013 (last updated October 05, 2023)
Cisco Intrusion Prevention System (IPS) Software in ASA 5500-X IPS-SSP software modules before 7.1(7)sp1E4 allows remote attackers to cause a denial of service (Analysis Engine process hang or device reload) via fragmented (1) IPv4 or (2) IPv6 packets, aka Bug ID CSCue51272.
0
Attacker Value
Unknown
CVE-2013-3411
Disclosure Date: July 18, 2013 (last updated October 05, 2023)
The IDSM-2 drivers in Cisco Intrusion Prevention System (IPS) Software on Cisco Catalyst 6500 devices with an IDSM-2 module allow remote attackers to cause a denial of service (device hang) via malformed IPv4 TCP packets, aka Bug ID CSCuh27460.
0
Attacker Value
Unknown
CVE-2011-5021
Disclosure Date: December 29, 2011 (last updated October 04, 2023)
PHPIDS before 0.7 does not properly implement Regular Expression Denial of Service (ReDoS) filters, which allows remote attackers to bypass rulesets and add PHP sequences to a file via unspecified vectors.
0
Attacker Value
Unknown
CVE-2011-3781
Disclosure Date: September 24, 2011 (last updated October 04, 2023)
PHPIDS 0.6.5 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by tests/IDS/VersionTest.php and certain other files.
0
Attacker Value
Unknown
CVE-2011-0646
Disclosure Date: January 25, 2011 (last updated October 04, 2023)
SQL injection vulnerability in viewfaqs.php in PHP LOW BIDS allows remote attackers to execute arbitrary SQL commands via the cat parameter.
0
Attacker Value
Unknown
CVE-2010-0751
Disclosure Date: April 06, 2010 (last updated October 04, 2023)
The ip_evictor function in ip_fragment.c in libnids before 1.24, as used in dsniff and possibly other products, allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via crafted fragmented packets.
0
Attacker Value
Unknown
CVE-2009-4229
Disclosure Date: December 08, 2009 (last updated October 04, 2023)
Multiple SQL injection vulnerabilities in ActiveWebSoftwares Active Bids allow remote attackers to execute arbitrary SQL commands via (1) the catid parameter in the PATH_INFO to the default URI or (2) the catid parameter to default.asp. NOTE: this might overlap CVE-2009-0429.3. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
0
Attacker Value
Unknown
CVE-2009-3968
Disclosure Date: November 18, 2009 (last updated October 04, 2023)
Multiple SQL injection vulnerabilities in ITechBids 8.0 allow remote attackers to execute arbitrary SQL commands via the (1) user_id parameter to feedback.php, (2) cate_id parameter to category.php, (3) id parameter to news.php, and (4) productid parameter to itechd.php. NOTE: the sellers_othersitem.php, classifieds.php, and shop.php vectors are already covered by CVE-2008-3238.
0
Attacker Value
Unknown
CVE-2009-3529
Disclosure Date: October 02, 2009 (last updated October 04, 2023)
SQL injection vulnerability in index.php in RadScripts RadBids Gold 4 allows remote attackers to execute arbitrary SQL commands via the fid parameter in a view_forum action, a different vector than CVE-2005-1074.
0
Attacker Value
Unknown
CVE-2009-3530
Disclosure Date: October 02, 2009 (last updated October 04, 2023)
Cross-site scripting (XSS) vulnerability in storefront.php in RadScripts RadBids Gold 4 allows remote attackers to inject arbitrary web script or HTML via the mode parameter.
0
