verity

Top products

The 7 most recently published vulnerabilities affecting verity.

• CVE-2006-5819Verity Ultraseek before 5.7 allows remote attackers to use the server as a proxy for web attacks and host scanning via a direct request to the highlight/index.html script.10.0Nov 18, 2006
• CVE-2006-5970Verity Ultraseek before 5.7 allows remote attackers to obtain sensitive information via direct requests with (1) a null ("%00") terminated url parameter to help/urlstatusgo.html; or missing paramet...5.0Nov 18, 2006
• CVE-2006-5971Absolute path traversal vulnerability in admin/logfile.txt in Verity Ultraseek before 5.6.2 allows remote attackers to read arbitrary files via the name variable.5.0Nov 18, 2006
• CVE-2002-1651Cross-site scripting (XSS) vulnerability in Verity Search97 allows remote attackers to insert arbitrary web content and steal sensitive information from other clients, possibly due to certain error...4.3Mar 28, 2005
• CVE-2005-0514Cross-site scripting (XSS) vulnerability in Verity Ultraseek before 5.3.3 allows remote attackers to inject arbitrary HTML and web script via search parameters.4.3Feb 23, 2005
• CVE-2004-0050Verity Ultraseek before 5.2.2 allows remote attackers to obtain the full pathname of the document root via an MS-DOS device name in the web search option, such as (1) NUL, (2) CON, (3) AUX, (4) COM...5.0May 6, 2004
• CVE-2002-0370Buffer overflow in the ZIP capability for multiple products allows remote attackers to cause a denial of service or execute arbitrary code via ZIP files containing entries with long filenames, incl...7.5Oct 5, 2002