140 matches found
CVE-2008-0219
SQL injection vulnerability in soportehorizontalw.php in PHP Webquest 2.6 allows remote attackers to execute arbitrary SQL commands via the idactividad parameter, a different vector than CVE-2007-4920...
CVE-2007-0219
Microsoft Internet Explorer 5.01, 6, and 7 uses certain COM objects from 1 Msb1fren.dll, 2 Htmlmm.ocx, and 3 Blnmgrps.dll as ActiveX controls, which allows remote attackers to execute arbitrary code via unspecified vectors, a different issue than CVE-2006-4697...
CVE-2007-0219
CVE-2007-0219 affects Microsoft Internet Explorer 5.01/6/7 via COM objects instantiated as ActiveX controls. The vulnerability arises when IE tries to instantiate COM objects (not intended for IE) such as those in Imjpcksid.dll, Htmlmm.ocx, and Blnmgrps.dll, leading to remote code execution. Open...
MS07-016: Cumulative Security Update for Internet Explorer (928090)
The remote host is missing the IE cumulative security update 92808. The remote version of IE is vulnerable to several flaws that could allow an attacker to execute arbitrary code on the remote host. Tenable Network Security, Inc. include"compat.inc"; if description scriptid24340;...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in usercp.php in MyBulletinBoard MyBB 1.02 allow remote attackers to inject arbitrary web script or HTML via the 1 notepad parameter in a notepad action and 2 signature parameter in an editsig action. NOTE: These are different attack vectors, and...
CVE-2006-0219
CVE-2006-0219 affects MyBulletinBoard (MyBB) prior to 1.0.2. The advisory notes that the update path may omit/include older copies of critical files, enabling (1) SQL injection via an attachment name handled by inc/functions_upload.php (related to CVE-2005-4602) and (2) other issues tied to threa...
CVE-2005-0219
Multiple cross-site scripting XSS vulnerabilities in Gallery 1.3.4-pl1 allow remote attackers to inject arbitrary web script or HTML via 1 the index field in addcomment.php, 2 setalbumName, 3 slideindex, 4 slidefull, 5 slideloop, 6 slidepause, 7 slidedir fields in slideshowlow.php, or 8 username...
CVE-2005-0219
CVE-2005-0219 : The connected sources describe multiple XSS vulnerabilities in Gallery 1.3.4-pl1, allowing remote attackers to inject arbitrary script/HTML via fields in add_comment.php (index), slideshow_low.php (set_albumName, slide_index, slide_full, slide_loop, slide_pause, slide_dir), and se...
CVE-2004-0219
isakmpd in OpenBSD 3.4 and earlier allows remote attackers to cause a denial of service crash via an ISAKMP packet with a malformed IPSEC SA payload, as demonstrated by the Striker ISAKMP Protocol Test Suite...
CVE-2004-0219
OpenBSD isakmpd vulnerability CVE-2004-0219 stems from flaws in ISAKMP packet handling, where malformed IPSEC SA payloads can trigger out-of-bounds reads and crash the daemon, causing remote denial of service. Affected: OpenBSD 3.4 and earlier (and related OpenBSD patches for -current/-stable). E...
CVE-2003-0219
Kerio Personal Firewall (KPF) is affected by CVE-2003-0219 through versions up to 2.1.4 due to a design flaw in the remote administration authentication that enables replay of a previously captured session to issue administrator commands. CORE Security advisories (BID 7179/7180) describe two issu...
CVE-2002-0219
Buffer overflow in 1 sastcpd in SAS/Base 8.0 and 8.1 or 2 objspawn in SAS/Integration Technologies 8.0 and 8.1 allows local users to execute arbitrary code via large command line argument...
CVE-2002-0219
CVE-2002-0219 affects SAS products: SAS/Base 8.0/8.1 (sastcpd) and SAS/Integration Technologies 8.0/8.1 (objspawn). The root cause is a buffer overflow triggered by a large command line argument, allowing a local user to execute arbitrary code. Impact is reported as local code execution with full...
CVE-2002-0219
Buffer overflow in 1 sastcpd in SAS/Base 8.0 and 8.1 or 2 objspawn in SAS/Integration Technologies 8.0 and 8.1 allows local users to execute arbitrary code via large command line argument...
CVE-2001-0219
Vulnerability in Support Tools Manager xstm,cstm,stm in HP-UX 11.11 and earlier allows local users to cause a denial of service...
CVE-2001-0219
The CVE-2001-0219 entry maps to a vulnerability in the HP-UX Support Tools Manager (xstm, cstm, stm). Affected HP-UX versions include 11.11 and earlier (notably 11.11, 11.00, and 10.20 per CERT). Local attackers can cause a denial-of-service condition. HP has released patches for affected version...
CVE-2000-0219
Red Hat 6.0 is affected: local root escalation via booting into single-user mode and interrupting at the password prompt. The Nessus entry notes the attacker with physical access can gain root via LILO/GRUB boot menus. Remediation guidance in the provided docs is limited; consider disabling or pr...
CVE-1999-0219
CVE-1999-0219 is a buffer overflow in FTP Serv-U 2.5 that allows a remote authenticated user to cause a denial of service (crash) by sending a long CWD or LS command. Multiple sources in the connected documents corroborate the DoS via command handling overflow; the condition is triggered by exces...
