CVE-2010-0192

CVE-2010-0192 affects Adobe Reader/Acrobat on Windows and macOS: vulnerable are Acrobat/Reader 9.x before 9.3.2 and 8.x before 8.2.2 . The vulnerability is described as unspecified with potential for denial of service or possibly executing arbitrary code via unknown vectors. Connected advisories ...

Critical: Red Hat Security Advisory: acroread security update

Updated acroread packages that fix several security issues are now available for Red Hat Enterprise Linux 4 Extras and Red Hat Enterprise Linux 5 Supplementary. The Red Hat Security Response Team has rated this update as having critical security impact. Common Vulnerability Scoring System CVSS ba...

CVE-2013-0192

creationtimestamp| type| source ---|---|--- 2009-12-02 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/10274...

Novell eDirectory Multiple Vulnerabilities (Jul 2009) - Windows

Novell eDirectory is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:novell:edirectory";...

CVE-2009-0192

Concrete details found: CVE-2009-0192 affects Novell eDirectory (iMonitor) with a stack-based buffer overflow triggered by a crafted Accept-Language HTTP header, enabling remote code execution on affected versions (notably eDirectory 8.8 SP3 and SP3 FTF3; other versions possibly impacted). Root c...

CVE-2009-0192

creationtimestamp| type| source ---|---|--- 2009-03-02 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/8129...

CVE-2008-0192

Multiple cross-site scripting XSS vulnerabilities in WordPress 2.0.9 and earlier allow remote attackers to inject arbitrary web script or HTML via the popuptitle parameter to 1 wp-admin/post.php or 2 wp-admin/page-new.php...

CVE-2008-0192

CVE-2008-0192 affects WordPress 2.0.9 and earlier. The vulnerability is multiple cross-site scripting (XSS) in which the attacker can inject arbitrary script/HTML via the popuptitle parameter to the admin scripts (wp-admin/post.php and wp-admin/page-new.php). Root cause is improper handling/sanit...

CVE-2008-0192

Multiple cross-site scripting XSS vulnerabilities in WordPress 2.0.9 and earlier allow remote attackers to inject arbitrary web script or HTML via the popuptitle parameter to 1 wp-admin/post.php or 2 wp-admin/page-new.php...

CVE-2007-0192

The CVE-2007-0192 CSRF vulnerability affects MKPortal’s admin.php in the save_main operation (ad_perms) where an attacker can induce privilege changes. The issue is exposed via a crafted getURL in a .swf loaded in an IFRAME, enabling remote modification of privilege settings (All Guests are Admin...

CVE-2006-0192

SQL injection vulnerability in ASPSurvey 1.10 (Login_Validate.asp) allows remote attackers to inject SQL through the Password parameter to login.asp, enabling arbitrary SQL execution. The referenced CVSSv2 metrics indicate network access, low attack complexity, no authentication, and partial impa...

RHEL 2.1 : apache (RHSA-2003:244)

Updated Apache and modssl packages that fix several minor security issues are now available for Red Hat Enterprise Linux. The Apache HTTP server is a powerful, full-featured, efficient, and freely-available Web server. Ben Laurie found a bug in the optional renegotiation code in modssl which can...

CVE-2004-0192

The CVE-2004-0192 entry concerns a Cross-site scripting (XSS) vulnerability in the Management Service of Symantec Gateway Security 2.0. The issue arises when a /sgmi URL contains malicious script that is not quoted in the resulting error page, enabling an attacker to steal cookies and hijack a ma...

BELL-CVE-2003-0192 CVE-2003-0192 does not affect BellSoft software

Bulletin has no description...

CVE-2003-0192

Apache 2 before 2.0.47, and certain versions of modssl for Apache 1.3, do not properly handle "certain sequences of per-directory renegotiations and the SSLCipherSuite directive being used to upgrade from a weak ciphersuite to a strong one," which could cause Apache to use the weak ciphersuite...

CVE-2003-0192

CVE-2003-0192 describes an issue in Apache 2.x before 2.0.47 (and mod_ssl for Apache 1.3) where certain sequences of per-directory renegotiations combined with using SSLCipherSuite to upgrade a weak cipher could cause the server to continue using a weak cipher. The connected advisories confirm af...

CVE-2002-0192

CVE-2002-0193 and CVE-2002-1564 describe Internet Explorer 5.01/5.5/6.0 vulnerabilities. CVE-2002-0193: remote code execution via malformed Content-Disposition/Content-Type headers causing the spoofed file type to be handled by the OS. CVE-2002-1564: cookie-based script in cookies that can expose...

CVE-2001-0192

CVE-2001-0192 describes a buffer overflow in CTRLServer (XMail) that can be triggered via the cfgfileget or domaindel functions, allowing arbitrary command execution. The vulnerability is categorized with a NETWORK attack vector and HIGH impact (complete confidentiality, integrity, and availabili...

CVE-2000-0192

The default installation of Caldera OpenLinux 2.3 includes the CGI program rpmquery, which allows remote attackers to determine what packages are installed on the system...

CVE-2000-0192

The CVE-2000-0192 issue affects the default installation of Caldera OpenLinux 2.3 via the rpm_query CGI, which allows remote attackers to enumerate installed RPMs by accessing the CGI over the web server. This leads to information disclosure about installed services and versions (partial confiden...