101 matches found
HP OpenView Performance Insight Server 'doPost()' Remote Arbitrary Code Execution Vulnerability
HP OpenView Performance Insight Server is prone to a remote code-execution vulnerability. An attacker can exploit this issue to execute arbitrary code with SYSTEM-level privileges. Successful exploits will completely compromise affected computers. OpenVAS Vulnerability Test $Id:...
HP OpenView Performance Insight Server 'doPost()' Remote Arbitrary Code Execution Vulnerability
HP OpenView Performance Insight Server is prone to a remote code-execution vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
CVE-2011-0276
HP OpenView Performance Insight Server (OVPI) versions 5.2, 5.3, 5.31, 5.4, and 5.41 are affected by a remote code execution vulnerability due to a hidden account in the com.trinagy.security.XMLUserManager Java class. The vulnerability allows an attacker to trigger the doPost() method of com.trin...
CVE-2010-0276
Technical details about CVE-2010-0276 are not publicly available in the provided connected documents. The records describe the issue in IBM Lotus iNotes with an unspecified impact and attack vectors; no concrete vulnerability specifics are present. Monitor for updates.
CVE-2009-0276
CVE-2009-0276 affects Google Chrome (V8 JavaScript engine) prior to 1.0.154.46. A cross-domain vulnerability lets a crafted script bypass the Same Origin Policy, enabling reading the full URL of another frame and potentially other sensitive data, or modifying the URL of the target frame. The vuln...
CVE-2009-0276
Removed by vendor...
CVE-2008-0276
The CVE-2008-0276 entry describes a Cross-site scripting (XSS) vulnerability in the Drupal Devel module prior to 5.x-0.1, where a site variable is not properly escaped, allowing remote attackers to inject arbitrary script or HTML. This affects the Devel module for Drupal and is tied to the lack o...
CVE-2007-0276
Technical details about CVE-2007-0276 are not publicly available in the provided documents. Monitor for updates and consult official advisories for any affected Oracle Database components and fixes.
CVE-2005-0276
CVE-2005-0276 : The 3Com 3CDaemon 2.0 revision 10 FTP service is affected by multiple format string vulnerabilities in commands (username, cd, delete, rename, rmdir, literal, stat, CWD) that can cause a remote denial of service (application crash). This assessment is based on the NVD description;...
CVE-2004-0276
The getrealstring function in Monkey HTTP Daemon monkeyd 0.8.1 and earlier allows remote attackers to cause a denial of service crash via an HTTP request with a sequence of "%" characters and a missing Host field...
CVE-2004-0276
The CVE-2004-0276 entry concerns Monkey HTTP Daemon (monkeyd) versions up to and including 0.8.1. The vulnerability is in the get_real_string function, where processing an HTTP request containing a sequence of "%" characters and a missing Host header can cause the daemon to crash, resulting in a ...
CVE-2003-0276
Buffer overflow in Pi3Web 2.0.1 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a GET request with a large number of / characters...
CVE-2003-0276
Buffer overflow in Pi3Web 2.0.1 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a GET request with a large number of / characters...
CVE-2002-0276
CVE-2002-0276 describes a buffer overflow in various decoders of Ettercap ≤ 0.6.3.1 when running on networks with MTU > 2000, allowing remote attackers to execute arbitrary code via large packets. The entry specifies the affected software (Ettercap) and version range, the root cause (buffer ov...
CVE-2002-0276
Buffer overflow in various decoders in Ettercap 0.6.3.1 and earlier, when running on networks with an MTU greater than 2000, allows remote attackers to execute arbitrary code via large packets...
CVE-2001-0276
The vulnerability CVE-2001-0276 affects BadBlue Personal Edition (1.02.07) where ext.dll can be invoked directly without arguments, causing an error message that reveals the server’s physical path. This is a path disclosure issue in the web server software. The available connected documents confi...
CVE-2001-0276
ext.dll in BadBlue 1.02.07 Personal Edition web server allows remote attackers to determine the physical path of the server by directly calling ext.dll without any arguments, which produces an error message that contains the path...
CVE-2000-0276
BeOS 4.5 and 5.0 are affected by CVE-2000-0276: local users can cause a denial of service through malformed direct system calls using interrupt 37. The vulnerability is described as affecting BeOS versions 4.5 and 5.0, with a partial impact on availability. The provided documents do not detail ex...