Lycos

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Lycos records in CISA KEV

No Lycos vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Htmlgear Guestgear 2 records LOW Fileuploader.dll 1 record MEDIUM

Records

3 records

TI-2008-00418 CVE-2008-0443 · GHSA-rc3c-f7cp-vmq8

Heap-based buffer overflow in the FileUploader.FUploadCtl.1 ActiveX control in…

MEDIUM 57

Heap-based buffer overflow in the FileUploader.FUploadCtl.1 ActiveX control in FileUploader.dll 2.0.0.2 in Lycos FileUploader Module allows remote attackers to execute arbitrary code via a long HandwriterFilename propert…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.12797 Published 2008-01-24 No fix listed CWE-119

TI-2006-02716 CVE-2006-2808 · GHSA-6x43-g877-7xwp

Cross-site scripting (XSS) vulnerability in Lycos Tripod htmlGEAR guestGEAR (aka Guest…

LOW 33

Cross-site scripting (XSS) vulnerability in Lycos Tripod htmlGEAR guestGEAR (aka Guest Gear) allows remote attackers to inject arbitrary web script or HTML via a guestbook post containing a javascript URI in the SRC attr…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.01222 Published 2006-06-05 No fix listed

TI-2002-01415 CVE-2002-1493 · GHSA-cjfx-9fmj-c733

Cross-site scripting (XSS) vulnerability in Lycos HTMLGear guestbook allows remote…

LOW 24

Cross-site scripting (XSS) vulnerability in Lycos HTMLGear guestbook allows remote attackers to inject arbitrary script via (1) STYLE attributes or (2) SRC attributes in an IMG tag.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01736 Published 2004-09-01 No fix listed

Open these records in search →

Critical	1
High	0
Medium	2
Low	0
No CVSS	0