Exploitdb Exploits
31,344 exploits tracked across all sources.
Oracle Document Capture - Info Disclosure
Unspecified vulnerability in the Oracle Document Capture component in Oracle Fusion Middleware 10.1.3.4 and 10.1.3.5 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Internal Operations. NOTE: the previous information was obtained from the January 2011 CPU. Oracle has not commented on claims from the original researcher that remote attackers can overwrite or delete arbitrary files via a full pathname in the second argument to the DownloadSingleMessageToFile method in the EMPOP3Lib ActiveX component (empop3.dll).
by Evdokimov Dmitriy
Oracle Fusion Middleware <10.1.3.5 - Info Disclosure
Unspecified vulnerability in the Oracle Document Capture component in Oracle Fusion Middleware 10.1.3.4 and 10.1.3.5 allows remote attackers to affect confidentiality via unknown vectors related to Import Server. NOTE: the previous information was obtained from the January 2011 CPU. Oracle has not commented on claims from the original researcher that remote attackers can read arbitrary files via a full pathname in the first argument to the ImportBodyText method in the EasyMail ActiveX control (emsmtp.dll).
by Alexey Sintsov
Xnova Legacies 2009.2 - Cross-Site Request Forgery
by Xploit A Day
SimpGB 1.49.2 - 'Guestbook.php' Multiple Cross-Site Scripting Vulnerabilities
by MustLive
PHPDirector Game Edition - 'game.php' SQL Injection
by AtT4CKxT3rR0r1ST
Awcm-cms AR Web Content Manager - Path Traversal
Multiple directory traversal vulnerabilities in AR Web Content Manager (AWCM) 2.2 allow remote attackers to read arbitrary files and possibly have other unspecified impact via a .. (dot dot) in the (1) awcm_theme or (2) awcm_lang cookie to (a) index.php or (b) header.php.
by Cucura
WordPress Plugin Videox7 UGC 2.5.3.2 - 'listid' Cross-Site Scripting
by AutoSec Tools
WordPress Plugin Featured Content 0.0.1 - 'listid' Cross-Site Scripting
by AutoSec Tools
WordPress Plugin FCChat Widget 2.1.7 - 'path' Cross-Site Scripting
by AutoSec Tools
WordPress Plugin BezahlCode Generator 1.0 - 'gen_name' Cross-Site Scripting
by AutoSec Tools
Pivotx < 2.2.2 - XSS
Cross-site scripting (XSS) vulnerability in pivotx/modules/module_image.php in PivotX before 2.2.3 allows remote attackers to inject arbitrary web script or HTML via the image parameter.
by AutoSec Tools
Pivotx - XSS
Multiple cross-site scripting (XSS) vulnerabilities in PivotX 2.2.0, and possibly other versions before 2.2.2, allow remote attackers to inject arbitrary web script or HTML via the (1) color parameter to includes/blogroll.php or (2) src parameter to includes/timwrapper.php.
by High-Tech Bridge SA
Pivotx - XSS
Multiple cross-site scripting (XSS) vulnerabilities in PivotX 2.2.0, and possibly other versions before 2.2.2, allow remote attackers to inject arbitrary web script or HTML via the (1) color parameter to includes/blogroll.php or (2) src parameter to includes/timwrapper.php.
by High-Tech Bridge SA
Sun Microsystems SunScreen Firewall <5.9 - RCE
Multiple untrusted search path vulnerabilities in the Java Service in Sun Microsystems SunScreen Firewall on SunOS 5.9 allow local users to execute arbitrary code via a modified (1) PATH or (2) LD_LIBRARY_PATH environment variable.
by kingcope
Lomtec Activeweb - Unrestricted File Upload
Unrestricted file upload vulnerability in the EasyEdit module in Lomtec ActiveWeb Professional 3.0 allows remote attackers to execute arbitrary code by uploading an executable file via the UploadDirectory and Accepted Extensions fields in the getImagefile component of EasyEdit.cfm.
by StenoPlasma
Microsoft Fax - Cover Page Editor 5.2.3790.3959 Double-Free Memory Corruption
by Luigi Auriemma
WordPress Plugin Uploader 1.0 - 'num' Cross-Site Scripting
by AutoSec Tools
WordPress Plugin Powerhouse Museum Collection Image Grid 0.9.1.1 - 'tbpv_username' Cross-Site Scripting
by AutoSec Tools
WordPress Plugin oQey-Gallery 0.2 - 'tbpv_domain' Cross-Site Scripting
by AutoSec Tools
WordPress Plugin Feature Slideshow 1.0.6 - 'src' Cross-Site Scripting
by AutoSec Tools
By Source