CVE-2006-0070

CVE-2006-0070 affects Drupal. The issue is a cross-site scripting (XSS) vector via an IMG tag containing an unusual encoded Javascript function name, demonstrated with variations of the alert() function. The connected sources confirm affected Drupal versions prior to 4.5.6 and prior to 4.6.4 when...

CVE-2006-0070

Drupal allows remote attackers to conduct cross-site scripting XSS attacks via an IMG tag with an unusual encoded Javascript function name, as demonstrated using variations of the alert function. NOTE: a followup by the vendor suggests that the issue does not exist in 4.5.6 or 4.6.4 when "Filtere...

Remote Code Execution in ezContents

ezContents has been found to contain a vulnerability that would allow a remote attacker to cause the PHP script to include an external PHP file and execute its content. SPDX-FileCopyrightText: 2004 Noam Rathaus Some text descriptions might be excerpted from a referenced sources, and are Copyright...

CVE-2005-0070

CVE-2005-0070 affects synaesthesia up to version 2.1 where the binary is installed setuid root and does not drop privileges while reading user configuration/mixer files, allowing local users to read arbitrary files. Public sources detail a privilege-escalation issue with synaesthesia and Debian’s...

CVE-2003-0070

VTE, as used by default in gnome-terminal terminal emulator 2.2 and as an option in gnome-terminal 2.0, allows attackers to modify the window title via a certain character escape sequence and then insert it back to the command line in the user's terminal, e.g. when the user views a file containin...

CVE-2003-0070

CVE-2003-0070 affects VTE as used by gnome-terminal; the vte_sequence_handler_window_manipulation routine fails to sanitize certain escape sequences, allowing an attacker to modify the window title and inject it back into the command line, potentially enabling arbitrary command execution. This is...

CVE-2003-0070

VTE, as used by default in gnome-terminal terminal emulator 2.2 and as an option in gnome-terminal 2.0, allows attackers to modify the window title via a certain character escape sequence and then insert it back to the command line in the user's terminal, e.g. when the user views a file containin...

CVE-2004-0070

CVE-2004-0070 describes a remote code execution vulnerability in the ezContents package, specifically in the module.php game that handles a link parameter. The OpenVAS entry for this CVE notes that ezContents can be forced to include an external PHP file, causing the remote attacker’s code to be ...

CVE-2003-0070

VTE, as used by default in gnome-terminal terminal emulator 2.2 and as an option in gnome-terminal 2.0, allows attackers to modify the window title via a certain character escape sequence and then insert it back to the command line in the user's terminal, e.g. when the user views a file containin...

CVE-2002-0070

CVE-2002-0070 describes a buffer overflow in the Windows Shell (the Windows Desktop environment) that can allow arbitrary code execution. The vulnerability stems from an unchecked buffer in the URL handler mapping for applications that have been partially removed; if an application with custom UR...

CVE-2001-0070

Buffer overflow in 1st Up Mail Server 4.1 allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long MAIL FROM command...

CVE-2001-0070

The CVE-2001-0070 entry concerns a buffer overflow in 1st Up Mail Server 4.1. The vulnerability is triggered by a long MAIL FROM command, enabling remote attackers to cause a denial of service and potentially execute arbitrary commands. Affected software is 1st Up Mail Server 4.1; the root cause ...

CVE-2001-0070

Buffer overflow in 1st Up Mail Server 4.1 allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long MAIL FROM command...

CVE-2000-0070

NtImpersonateClientOfPort local procedure call in Windows NT 4.0 allows local users to gain privileges, aka "Spoofed LPC Port Request."...

CVE-2000-0070

CVE-2000-0070 affects Windows NT 4.0 via the NtImpersonateClientOfPort local procedure call, enabling local privilege escalation. The vulnerability allows a local user to gain complete control (confidentiality, integrity, and availability flags impacted) through impersonation of a port request. T...

CVE-2000-0070

NtImpersonateClientOfPort local procedure call in Windows NT 4.0 allows local users to gain privileges, aka "Spoofed LPC Port Request."...

CVE-1999-0070

test-cgi program allows an attacker to list files on the server...

CVE-1999-0070

CVE-1999-0070 is associated with the generic test-cgi script vulnerability where an attacker can list files on the server. Red Hat and CVE listings confirm the issue stems from the test-cgi script. The Nessus plugin details an information-disclosure/remote command-execution style flaw: the script...

CVE-2024-0070

...

CVE-2024-0070

CVE-2024-0070: The NVIDIA GPU Driver Temporal Coherence Flaw allows kernel memory access from user space through α-resonance at 587 kHz. The exploit hinges on GPU clock harmonics (base 1417 MHz, boost 1530 MHz, memory 7000 MHz) aligning with 587 kHz; this resonance is exploited to create memory p...