144 matches found
Mozilla Products Multiple Vulnerabilitie Apr-10 (Windows)
The host is installed with Mozilla Firefox/Seamonkey/Thunderbird and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbmozillaprdtsmultvulnwinapr10.nasl 6444 2017-06-27 11:24:02Z santu $ Mozilla Products Multiple Vulnerabilitie Apr-10 Windows Authors: Madhuri D Copyright:...
Fedora Update for seamonkey FEDORA-2010-5840
The remote host is missing an update for the SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...
CVE-2010-0182
The CVE-2010-0182 issue affects Mozilla Firefox (pre-3.5.9 and 3.6.x pre-3.6.2), Thunderbird (pre-3.0.4), and SeaMonkey (pre-2.0.4). The root cause is that XMLDocument::load did not perform the expected nsIContentPolicy checks when loading content via XML documents, allowing crafted content to by...
Mandriva Update for blogtk MDVA-2010:070-1 (blogtk)
Check for the Version of blogtk OpenVAS Vulnerability Test Mandriva Update for blogtk MDVA-2010:070-1 blogtk Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under...
CVE-2009-0182
VUPlayer 2.49 and earlier is affected by a buffer overflow when processing a long URL in a .pls file (File line File1) that allows user-assisted arbitrary code execution. The issue is triggered via a crafted URL in playlist files and has been demonstrated in public advisories; multiple sources (P...
CVE-2009-0182
creationtimestamp| type| source ---|---|--- 2009-01-07 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/7695 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/fileformat/vuplayercue.rb 2025-10-23 21:12:55+00:00| seen...
FreeBSD Ports: mod_dosevasive20
The remote host is missing an update to the system as announced in the referenced advisory. VID 88ff90f2-6e43-11d9-8c87-000a95bc6fae OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...
CVE-2008-0182
CVE-2008-0182 is a CSRF vulnerability in the Liferay Portal Admin portlet (pre-4.4.0). Remote authenticated users could cause actions as other authenticated users through the Shutdown message. Impact is partial integrity compromise; CVSS base score from NVD is 4.3 (Medium). The vulnerability is m...
CVE-2008-0182
Cross-site request forgery CSRF vulnerability in the Admin portlet in Liferay Portal before 4.4.0 allows remote authenticated users to perform unspecified actions as unspecified other authenticated users via the Shutdown message...
Liferay Portal fails to protect against CSRF
Overview Liferay Portal fails to properly protect against Cross-Site Request Forgery CSRF. This may allow a remote attacker to be able to forge requests that Liferay Portal takes action upon. Description Liferay Portal is an enterprise portal solution that uses Java technologies. Liferay Portal...
CVE-2007-0182
CVE-2007-0182 concerns multiple PHP remote file inclusion vulnerabilities in a “magic photo storage” website. The issue arises from unsafely using the _config[site_path] parameter to load files under admin/, include/, and user/ directories (e.g., admin_password.php, add_welcome_text.php, admin_em...
CVE-2006-0182
login.php in ACal Calendar Project 2.2.5 allows remote attackers to bypass authentication by setting the ACalAuthenticate cookie variable to "inside"...
CVE-2006-0182
CVE-2006-0182 affects ACal Calendar Project 2.2.5. The vulnerability in login.php allows remote bypass of authentication by setting the ACalAuthenticate cookie to the literal value “inside,” enabling unauthorized access. Relatedly, CVE-2006-0183 in edit.php permits authenticated users to execute ...
CVE-2006-0183
Direct static code injection vulnerability in edit.php in ACal Calendar Project 2.2.5 allows authenticated users to execute arbitrary PHP code via 1 the edit=header value, which modifies header.php, or 2 the edit=footer value, which modifies footer.php. NOTE: this issue might be resultant from th...
Code injection
Direct static code injection vulnerability in edit.php in ACal Calendar Project 2.2.5 allows authenticated users to execute arbitrary PHP code via 1 the edit=header value, which modifies header.php, or 2 the edit=footer value, which modifies footer.php. NOTE: this issue might be resultant from th...
Samba Long CIFS Passwords Buffer Overrun (CVE-1999-0182)
...
CVE-2005-0182
The moddosevasive module 1.9 and earlier for Apache creates temporary files with predictable filenames, which could allow remote attackers to overwrite arbitrary files via a symlink attack...
CVE-2004-0182
CVE-2004-0182 affects Mailman before 2.0.13. A flaw allows remote attackers to trigger a denial of service (crash) by sending an email message with an empty subject field. Multiple connected sources corroborate this issue and tie it to a DoS in Mailman. Remediation in the public advisories is to ...
