Show filters
8 Total Results
Displaying 1-8 of 8
Sort by:
Attacker Value
Unknown

CVE-2013-6196

Disclosure Date: December 21, 2013 (last updated October 05, 2023)
Cross-site scripting (XSS) vulnerability in HP Autonomy Ultraseek 5 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.
0
0
Attacker Value
Unknown

CVE-2009-0347

Disclosure Date: January 29, 2009 (last updated October 04, 2023)
Open redirect vulnerability in cs.html in the Autonomy (formerly Verity) Ultraseek search engine allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via the url parameter.
0
0
Attacker Value
Unknown

CVE-2006-5819

Disclosure Date: November 18, 2006 (last updated October 04, 2023)
Verity Ultraseek before 5.7 allows remote attackers to use the server as a proxy for web attacks and host scanning via a direct request to the highlight/index.html script.
0
0
Attacker Value
Unknown

CVE-2006-5970

Disclosure Date: November 18, 2006 (last updated October 04, 2023)
Verity Ultraseek before 5.7 allows remote attackers to obtain sensitive information via direct requests with (1) a null ("%00") terminated url parameter to help/urlstatusgo.html; or missing parameters to (2) help/header.html, (3) help/footer.html, (4) spell.html, (5) coreforma.html, (6) daterange.html, (7) hits.html, (8) hitsnavbottom.html, (9) indexform.html, (10) indexforma.html, (11) languages.html, (12) nohits.html, (13) onehit1.html, (14) onehit2.html, (15) query.html, (16) queryform0.html, (17) queryform0a.html, (18) queryform1.html, (19) queryform1a.html, (20) queryform2.html, (21) queryform2a.html, (22) quicklinks.html, (23) relatedtopics.html, (24) signin.html, (25) subtopics.html, (26) thesaurus.html, (27) topics.html, (28) hitspagebar.html, (29) highlight/highlight.html, (30) highlight/highlight_one.html, and (31) highlight/topnav.html, which leaks the installation path in the resulting error message.
0
0
Attacker Value
Unknown

CVE-2006-5971

Disclosure Date: November 18, 2006 (last updated October 04, 2023)
Absolute path traversal vulnerability in admin/logfile.txt in Verity Ultraseek before 5.6.2 allows remote attackers to read arbitrary files via the name variable.
0
0
Attacker Value
Unknown

CVE-2005-0514

Disclosure Date: February 22, 2005 (last updated February 22, 2025)
Cross-site scripting (XSS) vulnerability in Verity Ultraseek before 5.3.3 allows remote attackers to inject arbitrary HTML and web script via search parameters.
0
0
Attacker Value
Unknown

CVE-2004-0050

Disclosure Date: June 14, 2004 (last updated February 22, 2025)
Verity Ultraseek before 5.2.2 allows remote attackers to obtain the full pathname of the document root via an MS-DOS device name in the web search option, such as (1) NUL, (2) CON, (3) AUX, (4) COM1, (5) COM2, and others.
0
0
Attacker Value
Unknown

CVE-1999-0996

Disclosure Date: December 15, 1999 (last updated February 22, 2025)
Buffer overflow in Infoseek Ultraseek search engine allows remote attackers to execute commands via a long GET request.
0
0