59 matches found
OpenSC has an unspecified vulnerability (CNVD-2019-45406)
OpenSC is an open source smart card tool and middleware. A security vulnerability exists in OpenSC versions 0.19.0 and earlier and versions 0.20.x through 0.20.0-rc3. No detailed vulnerability details are provided at this time...
OpenSC buffer overflow vulnerability (CNVD-2020-09613)
OpenSC is an open source smart card tool and middleware. A buffer overflow vulnerability exists in OpenSC versions 0.19.0 and earlier and versions 0.20.x through 0.20.0-rc3, which can be exploited by remote attackers to execute arbitrary code on a system...
mysql: C API unspecified vulnerability (CPU Jul 2020)
Vulnerability in the MySQL Client product of Oracle MySQL component: C API. Supported versions that are affected are 5.6.48 and prior, 5.7.30 and prior and 8.0.20 and prior. Difficult to exploit vulnerability allows low privileged attacker with network access via multiple protocols to compromise...
Apache Rave 0.11 - 0.20 - User Information Disclosure
No description provided by source. CVE-2013-1814: Apache Rave exposes User over API Severity: Important Vendor: The Apache Software Foundation Versions Affected: Rave 0.11 to 0.20 Description: Rave returns the full user object, including the salted and hashed password, via the User RPC API. This...
X-Changer 0.20 Multiple SQL Injection Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/17322/info X-Changer is prone to multiple SQL-injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. A successful exploit...
[SECURITY] Fedora 19 Update: spice-gtk-0.20-6.fc19
Client libraries for SPICE desktop servers...
Fedora 19 : spice-gtk-0.20-6.fc19 (2013-17109)
Fix CVE-2013-4324 Insecure calling of polkit via polkitunixprocessnew Add a few upstream patches fixing bugs in spice-gtk 0.20 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean...
UBUNTU-CVE-2012-4460
The serializing/deserializing functions in the qpid::framing::Buffer class in Apache Qpid 0.20 and earlier allow remote attackers to cause a denial of service assertion failure and daemon exit via unspecified vectors. NOTE: this issue could also trigger an out-of-bounds read, but it might not...
Apache Rave User Information Disclosure Vulnerability
Apache Rave is prone to an information disclosure vulnerability. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:apache:rave";...
PT-2013-1674 · Apache · Apache Qpid
Name of the Vulnerable Software and Affected Versions: Apache Qpid versions 0.20 and earlier Description: The issue affects the serializing/deserializing functions in the qpid::framing::Buffer class, allowing remote attackers to cause a denial of service through unspecified vectors, potentially...
Apache Rave User Exposure
CVE-2013-1814: Apache Rave exposes User over API Severity: Important Vendor: The Apache Software Foundation Versions Affected: Rave 0.11 to 0.20 Description: Rave returns the full user object, including the salted and hashed password, via the User RPC API. This endpoint is only available to...
qpid-cpp: crash due to qpid::framing::Buffer::checkAvailable() wraparound
Integer overflow in the qpid::framing::Buffer::checkAvailable function in Apache Qpid 0.20 and earlier allows remote attackers to cause a denial of service crash via a crafted message, which triggers an out-of-bounds read...
Code injection
rrdedit in netmrg 0.20 allows local users to overwrite arbitrary files via a symlink attack on 1 /tmp/.xml and 2 /tmp/.backup temporary files...
CVE-2007-4836
CVE-2007-4836 describes a Cross-site Scripting (XSS) vulnerability in phpMyQuote 0.20, exposed via index.php. The issue allows remote attackers to inject arbitrary web script or HTML through the id parameter in an edit action. The connected documents confirm the affected software and the vulnerab...
CVE-2007-4835
The CVE-2007-4835 entry describes an SQL injection in phpMyQuote 0.20, exploitable via the id parameter in an edit action of index.php. The vulnerability allows remote attackers to execute arbitrary SQL commands, as indicated by the description and multiple sources (NVD entry). The root cause is ...
phpMyQuote 0.20 Version Multiple Sql And Xss Vulnerabilities
/////////////// Yollubunlar.org /////////////// title: phpMyQuote 0.20 Version Multiple Sql And Xss Vulnerabilities Author : Yollubunlar.Org Orginal Article: http://yollubunlar.org/phpmyquote-020-version-multiple-sql-and-xss-vulnerabilities-3501.html MainPage:...
PHPMyQuote 0.20 - index.php SQL Injection Cross-Site Scripting
PHPMyQuote 0.20 - index.php SQL Injection Cross-Site Scripting source: https://www.securityfocus.com/bid/25615/info phpMyQuote is prone to multiple input-validation vulnerabilities, including a cross-site scripting issue and an SQL-injection issue, because the application fails to sanitize...
X-Changer 0.20 - Multiple SQL Injections
X-Changer 0.20 - Multiple SQL Injections source: https://www.securityfocus.com/bid/17322/info X-Changer is prone to multiple SQL-injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. A successful...