204 matches found
CVE-2011-0185
Format string vulnerability in the debug-logging feature in Application Firewall in Apple Mac OS X before 10.7.2 allows local users to gain privileges via a crafted name of an executable file...
CVE-2011-0185
The CVE-2011-0185 entry concerns a format-string vulnerability in the Application Firewall’s debug-logging feature on Apple Mac OS X prior to 10.7.2, allowing local privilege escalation via a crafted executable name. Affected product: Mac OS X (Application Firewall). Root cause: format string iss...
SLES10: Security update for Websphere Community Edition
The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: websphere-asce More details may also be found by searching for the SuSE Enterprise Server 10 patch database linked in the references. SPDX-FileCopyrightText:...
CVE-2009-0185
Heap-based buffer overflow in Apple QuickTime before 7.6.2 allows remote attackers to execute arbitrary code or cause a denial of service application crash via crafted MS ADPCM encoded audio data in an AVI movie file...
CVE-2009-0185
Apple QuickTime before 7.6.2 is affected by a heap-based buffer overflow in processing MS ADPCM encoded audio data within AVI files, enabling potential remote code execution or crash (DoS). Public docs list CVE-2009-0185 among a set of related QuickTime vulnerabilities; remediation is to update t...
CVE-2009-0185
Heap-based buffer overflow in Apple QuickTime before 7.6.2 allows remote attackers to execute arbitrary code or cause a denial of service application crash via crafted MS ADPCM encoded audio data in an AVI movie file...
QuickTime < 7.6.2 Multiple Vulnerabilities (Mac OS X)
The version of QuickTime installed on the remote Mac OS X host is older than 7.6.2. Such versions contain several vulnerabilities : - A heap buffer overflow in QuickTime's handling of MS ADPCM encoded audio data may lead to an application crash or arbitrary code execution. CVE-2009-0185 - A memor...
Debian Security Advisory DSA 457-1 (wu-ftpd)
The remote host is missing an update to wu-ftpd announced via advisory DSA 457-1. OpenVAS Vulnerability Test $Id: deb4571.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 457-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...
CVE-2008-0185
CVE-2008-0185 affects NetRisk 1.9.7 (and possibly earlier) and is caused by an SQL injection in index.php where the pid parameter in a profile page (profile.php) is not properly sanitized. This allows remote attackers to execute arbitrary SQL commands. The NVD entry documents a base score of 7.5 ...
CVE-2007-0185
DWR (Getahead Direct Web Remoting) before version 1.1.4 is vulnerable to denial of service due to memory exhaustion triggered by a large number of batched calls; the specific vectors are not detailed in the provided documents. No remediation details are present here.
CVE-2006-0185
Multiple cross-site scripting vulnerabilities in the 1 Pool or 2 News Modules in Php-Nuke allow remote attackers to inject arbitrary web script or HTML via javascript in the SRC attribute of an IMG tag...
CVE-2005-0185
CVE-2005-0185 describes a stack-based buffer overflow in NodeManager Professional 2.00 . The overflow occurs via a LinkDown-Trap packet containing a long OCTET-STRING in the Trap variable-bindings field, enabling an unauthenticated remote attacker to potentially execute arbitrary commands. The pr...
CVE-2004-0185
CVE-2004-0185 describes a buffer overflow in wu-ftpd’s S/KEY authentication path (skey_challenge in ftpd.c) for version 2.6.2, allowing remote code execution or denial-of-service via a long s/key name. Connected records corroborate a remote overflow vulnerability in Wu-FTPd with S/KEY support, an...
CVE-2004-0185
Buffer overflow in the skeychallenge function in ftpd.c for wu-ftp daemon wu-ftpd 2.6.2 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a s/key SKEY request with a long name...
CVE-2004-0185
Buffer overflow in the skeychallenge function in ftpd.c for wu-ftp daemon wu-ftpd 2.6.2 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a s/key SKEY request with a long name...
CVE-2004-0187
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2004-0185. Reason: This candidate is a reservation duplicate of CVE-2004-0185. Notes: All CVE users should reference CVE-2004-0185 instead of this candidate. All references and descriptions in this candidate have been removed to...
CVE-2004-0185
Buffer overflow in the skeychallenge function in ftpd.c for wu-ftp daemon wu-ftpd 2.6.2 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a s/key SKEY request with a long name...
CVE-2002-0185
The CVE-2002-0185 issue affects Apache mod_python versions 2.7.6 and earlier, where a module indirectly imported by a published module can be accessed via the publisher, allowing remote attackers to call potentially dangerous functions from the imported module. The OpenVAS/NVD/CVE listings corrob...
CVE-2002-0185
modpython version 2.7.6 and earlier allows a module indirectly imported by a published module to then be accessed via the publisher, which allows remote attackers to call possibly dangerous functions from the imported module...
CVE-2002-0185
modpython version 2.7.6 and earlier allows a module indirectly imported by a published module to then be accessed via the publisher, which allows remote attackers to call possibly dangerous functions from the imported module...