berlios records
7 published records for vendor berlios.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 1 · 14.3%
- Pre-auth RCE
- 4
- With a fix record
- 71.4%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-476 NULL Pointer Dereference1
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')1
The weakness classes this vendor ships most often: where to look.
CWEAll records
7 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
50Plan | CVE-2004-1388Weaponized | Format string vulnerability in the gpsd_report function for BerliOS GPD daemon (gpsd, formerly pygps) 1.9.0 through 2.7 allows remote attackberlios · gps daemon | High7.5 | — | 68.1% | Dec 31, 2004 |
33Monitor | CVE-2005-0129Proof of concept | The Quick Buttons feature in Konversation 0.15 allows remote attackers to execute certain IRC commands via a channel name containing "%" varberlios · konversation | High7.5 | — | 10.3% | Apr 14, 2005 |
31Monitor | CVE-2013-4412No exploit | slim has NULL pointer dereference when using crypt() method from glibc 2.17berlios · slim · CWE-476 | High7.5 | — | 2.9% | Nov 4, 2019 |
31Monitor | CVE-2005-0130No exploit | Certain Perl scripts in Konversation 0.15 allow remote attackers to execute arbitrary commands via shell metacharacters in (1) channel namesberlios · konversation | High7.5 | — | 2.8% | Apr 14, 2005 |
30Monitor | CVE-2005-3864Proof of concept | SQL injection vulnerability in index.php in SourceWell 1.1.2 and earlier allows remote attackers to execute arbitrary SQL commands via the cberlios · sourcewell | High7.5 | — | 1.1% | Nov 29, 2005 |
27Monitor | CVE-2008-6100Proof of concept | Multiple SQL injection vulnerabilities in Discussion Forums 2k 3.3, when magic_quotes_gpc is disabled, allow remote attackers to execute arbberlios · discussion forum 2k · CWE-89 | Medium6.8 | — | 0.9% | Feb 10, 2009 |
21Monitor | CVE-2005-0131No exploit | The Quick Connection dialog in Konversation 0.15 inadvertently uses the user-provided password as the nickname instead of the user-provided berlios · konversation | Medium5.0 | — | 1.7% | Apr 14, 2005 |
- CVE-2004-138850Plan
Format string vulnerability in the gpsd_report function for BerliOS GPD daemon (gpsd, formerly pygps) 1.9.0 through 2.7 allows remote attack
HighCVSS 7.5WeaponizedEPSS 68%berlios · gps daemonDec 31, 2004
- CVE-2005-012933Monitor
The Quick Buttons feature in Konversation 0.15 allows remote attackers to execute certain IRC commands via a channel name containing "%" var
HighCVSS 7.5Proof of conceptEPSS 10%berlios · konversationApr 14, 2005
- CVE-2013-441231Monitor
slim has NULL pointer dereference when using crypt() method from glibc 2.17
HighCVSS 7.5No exploitEPSS 2%berlios · slimNov 4, 2019
- CVE-2005-013031Monitor
Certain Perl scripts in Konversation 0.15 allow remote attackers to execute arbitrary commands via shell metacharacters in (1) channel names
HighCVSS 7.5No exploitEPSS 2%berlios · konversationApr 14, 2005
- CVE-2005-386430Monitor
SQL injection vulnerability in index.php in SourceWell 1.1.2 and earlier allows remote attackers to execute arbitrary SQL commands via the c
HighCVSS 7.5Proof of conceptEPSS 1%berlios · sourcewellNov 29, 2005
- CVE-2008-610027Monitor
Multiple SQL injection vulnerabilities in Discussion Forums 2k 3.3, when magic_quotes_gpc is disabled, allow remote attackers to execute arb
MediumCVSS 6.8Proof of conceptEPSS 0%berlios · discussion forum 2kFeb 10, 2009
- CVE-2005-013121Monitor
The Quick Connection dialog in Konversation 0.15 inadvertently uses the user-provided password as the nickname instead of the user-provided
MediumCVSS 5.0No exploitEPSS 1%berlios · konversationApr 14, 2005