116 matches found
CVE-2008-0284
Cross-site scripting XSS vulnerability in Simple Machines Forum SMF 1.1.4 and earlier allows remote attackers to inject arbitrary web script or HTML via 1 Itemid or 2 topic arguments...
CVE-2008-0284
CVE-2008-0284 affects Simple Machines Forum (SMF) 1.1.4 and earlier. The vulnerability is a cross-site scripting (XSS) flaw that allows remote attackers to inject arbitrary web script or HTML via the Itemid or topic parameters. Impact described as enabling script execution in the context of the a...
CVE-2007-0284
Technical details (affected products, vulnerable components, impact, or fixes) are not publicly provided in the supplied documents; monitor for updates.
CVE-2006-0284
Technical details about CVE-2006-0284 are not publicly provided in the supplied documents; no specific affected products, versions, or exploit information are disclosed. Monitor for updates.
CVE-2005-0284
SQL injection vulnerability in addentry.php in Woltlab Burning Book 1.0 Gold, 1.1.1e, and possibly other versions, allows remote attackers to execute arbitrary SQL commands via the user-agent parameter...
CVE-2004-0284
Microsoft Internet Explorer 6.0, Outlook 2002, and Outlook 2003 allow remote attackers to cause a denial of service CPU consumption, if "Do not save encrypted pages to disk" is disabled, via a web site or HTML e-mail that contains two null characters %00 after the host name...
CVE-2004-0284
CVE-2004-0284 affects Microsoft Internet Explorer 6.0, Outlook 2002, and Outlook 2003. The vulnerability allows a remote attacker to cause a denial of service (CPU consumption) when the user views a web site or HTML e‑mail that contains two null characters (%00) after the host name, and the setti...
CVE-2003-0284
Adobe Acrobat 5 does not properly validate JavaScript in PDF files, which allows remote attackers to write arbitrary files into the Plug-ins folder that spread to other PDF documents, as demonstrated by the W32.Yourde virus...
CVE-2003-0284
Adobe Acrobat 5 is vulnerable due to a flaw in its JavaScript parsing engine that could allow a malicious PDF to instruct Acrobat to write arbitrary files into the local Plug-ins folder, potentially spreading via other PDFs (notably associated with the W32.Yourde virus). The issue affects Acrobat...
CVE-2002-0284
Winamp 2.78 and 2.77, when opening a wma file that requires a license, sends the full path of the Temporary Internet Files directory to the web page that is processing the license, which could allow malicious web servers to obtain the pathname...
CVE-2002-0284
The CVE-2002-0284 entry affects Winamp versions 2.77 and 2.78. When opening a WMA file that requires a license, Winamp apparently sends the full path of the Temporary Internet Files directory to the web page processing the license, potentially allowing a malicious web server to obtain that pathna...
CVE-2001-0284
The CVE-2001-0284 entry describes a buffer overflow in the IPSEC authentication mechanism for OpenBSD 2.8 and earlier. The underlying issue is in the IPSEC AH (IPv4 option) processing, allowing remote attackers to cause a denial of service and potentially execute arbitrary commands via a malforme...
CVE-2000-0284
The CVE-2000-0284 issue affects University of Washington IMAP Server (UW-IMAP) imapd, specifically involving a buffer overflow in processing command arguments (e.g., LIST, LSUB) that can be triggered by a valid user. The vulnerability enables an authenticated user to potentially execute arbitrary...
CVE-1999-0284
CVE-1999-0284 describes a DoS vulnerability in SMTP HELO handling causing remote crash via a too-long HELO argument, affecting NT mail servers including Ipswitch, Mdaemon, and Exchange. Related advisories in the dataset (e.g., SLMail, Lotus Notes) describe similar HELO-based DoS issues. Root caus...
