Debian: Security Advisory (DSA-1082-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2007-0124

Affected software: Drupal before 4.6.11 and 4.7 before 4.7.5 when using MySQL. The vulnerability allows remote authenticated users to cause a denial of service by poisoning the page cache via unspecified vectors, triggering erroneous 404 errors for existing pages. Root cause and exploit details a...

DSA-1067-1 kernel-source-2.4.16 - several

Bulletin has no description...

CVE-2006-0124

CVE-2006-0124 describes a cross-site scripting (XSS) vulnerability in the ADN Forum 1.0b product, specifically in the crear.php script. The issue arises from the titulo parameter, used for the “Topic name” field, allowing remote attackers to inject arbitrary web script or HTML. The available reco...

CVE-2006-0124

Cross-site scripting XSS vulnerability in crear.php in ADN Forum 1.0b allows remote attackers to inject arbitrary web script or HTML via the titulo parameter, which is used by the "Topic name" field...

CVE-2005-0124

Technical details about CVE-2005-0124 are not provided in the supplied documents. No concrete affected product/version or root cause information is present here; monitor for updates from official advisories.

CVE-2003-0124

man before 1.5l allows attackers to execute arbitrary code via a malformed man file with improper quotes, which causes the myxsprintf function to return a string with the value "unsafe," which is then executed as a program via a system call if it is in the search path of the user who runs man...

CVE-2003-0124

CVE-2003-0124 affects the man utility prior to version 1.5l. A bug in a malformed man file can cause a program named “unsafe” to be executed when it is found in the user’s PATH, via a system call. This is a local escalation/vector issue, with potential arbitrary code execution on affected systems...

CVE-2004-0124

The DCOM RPC interface for Microsoft Windows NT 4.0, 2000, XP, and Server 2003 allows remote attackers to cause network communications via an "alter context" call that contains additional data, aka the "Object Identity Vulnerability."...

CVE-2004-0124

CVE-2004-0124 describes an information disclosure flaw in how Microsoft Windows COM object identifiers are created, enabling an attacker to coax a system into opening network ports via specially crafted RPC messages. This is part of MS04-012 RPC/DCOM updates; the impact is described as enabling a...

CVE-2003-0124

man before 1.5l allows attackers to execute arbitrary code via a malformed man file with improper quotes, which causes the myxsprintf function to return a string with the value "unsafe," which is then executed as a program via a system call if it is in the search path of the user who runs man...

CVE-2002-0124

MDG Computer Services Web Server 4D/eCommerce 3.5.3 is affected by a directory traversal vulnerability exposed via a URL containing ../ and URL-encoded slashes in the HTTP request. This vulnerability allows remote attackers to access restricted paths within the server. The CVE entry describes the...

CVE-2001-0124

CVE-2001-0124 describes a buffer overflow in the Solaris utility exrecover on Solaris 2.6 and earlier, potentially allowing a local user to gain privileges via a long command line argument. The connected documents do not specify a vendor patch/version or a remediation. The exploitation status is ...

CVE-1999-0124

The CVE-1999-0124 issue affects UMN gopher and gopher+ versions 1.12 and 2.0x, enabling an intruder to read any files accessible by the gopher daemon due to the underlying vulnerability. Red Hat and other sources confirm impact on the gopher daemon. Remediation guidance in PT-1993-1000 indicates ...

CVE-2000-0124

CVE-2000-0124 affects surfCONTROL SuperScout. The vulnerability arises because it does not properly assign a category to web sites that end with a dot, which could allow bypassing web access restrictions. The NVD entry lists a low base score (CVSS2 2.1) with local attack vector, unauthenticated a...