114 matches found
CVE-2007-0121
CVE-2007-0121 is an XSS vulnerability in RI Blog 1.3 (search.asp) that allows remote attackers to inject arbitrary script/HTML via the q parameter. Public records cite a CVSS v2 base score of 6.8 (Medium), with network attack vector and partial impact to confidentiality, integrity, and availabili...
CVE-2006-0121
Multiple memory leaks in IBM Lotus Notes and Domino Server before 6.5.5 allow attackers to cause a denial of service memory consumption and crash via unknown vectors related to 1 unspecified vectors during the SSL handshake SPR MKIN67MQVW, 2 the stash file during the SSL handshake SPR MKIN693QUT,...
CVE-2006-0121
CVE-2006-0121 affects IBM Lotus Notes and Domino Server prior to 6.5.5. The issue consists of multiple memory leaks that can cause a denial of service (memory consumption and crash) via unknown vectors related to (1) SSL handshake vectors and (2) the stash file during the SSL handshake (SPR# MKIN...
CVE-2005-0121
CVE-2005-0121 concerns the FreeBSD/golddig vulnerability set. The available connected sources confirm two local buffer overflow issues in golddig 2.0 and earlier: one in the map-name handling when a very long command-line map name is supplied, and another in processing the USER environment variab...
CVE-2004-0121
Technical details about CVE-2004-0121 are not publicly available in the provided connected documents. The material only restates the issue in Outlook 2002 without specifics. Monitor for updates.
CVE-2004-0121
Argument injection vulnerability in Microsoft Outlook 2002 does not sufficiently filter parameters of mailto: URLs when using them as arguments when calling OUTLOOK.EXE, which allows remote attackers to use script code in the Local Machine zone and execute arbitrary programs...
MS04-009: Vulnerability in Outlook could allow code execution (828040)
The remote host is running a version of outlook that could allow Internet Explorer to execute script code in the Local Machine zone and therefore let an attacker execute arbitrary programs on this host. To exploit this bug, an attacker would need to send an special HTML message to a user of this...
CVE-2003-0121
Clearswift MAILsweeper 4.x allows remote attackers to bypass attachment detection via an attachment that does not specify a MIME-Version header field, which is processed by some mail clients...
CVE-2002-0121
PHP 4.0 through 4.1.1 stores session IDs in temporary files whose name contains the session ID, which allows local users to hijack web connections...
CVE-2002-0121
The CVE-2002-0121 entry affects PHP 4.0 through 4.1.1, where session IDs are stored in temporary files whose names contain the session ID, enabling local users to hijack web connections. The provided documents describe the vulnerable mechanism and impact (local hijack) but do not include remediat...
CVE-2001-0121
CVE-2001-0121 affects ImageCast Control Center 4.1.0. A remote attacker can cause a denial of service (resource exhaustion or system crash) by sending a long string to port 12002. Based on the NVD entry, attack vector is Network, access complexity Low, no authentication, with partial availability...
CVE-2001-0121
ImageCast Control Center 4.1.0 allows remote attackers to cause a denial of service resource exhaustion or system crash via a long string to port 12002...
CVE-2000-0121
The CVE-2000-0121 entry concerns the Recycle Bin utility in Windows NT and Windows 2000. The root cause is that a local attacker can create a subdirectory named with the victim’s SID inside the recycler directory, enabling read or modification of files by the attacker. This constitutes a local pr...
CVE-1999-0121
This CVE (CVE-1999-0121) concerns a buffer overflow in the dtaction command that yields root access. The affected component is the dtaction utility; root cause is a buffer overflow, enabling local, unauthorized code execution with complete confidentiality, integrity, and availability impact per t...