CVE-2010-0285

gnome-screensaver 2.14.3, 2.22.2, 2.27.x, 2.28.0, and 2.28.3, when the X configuration enables the extend screen option, allows physically proximate attackers to bypass screen locking, access an unattended workstation, and view half of the GNOME desktop by attaching an external monitor...

openSUSE Security Update : gnome-screensaver (gnome-screensaver-1973)

gnome-screensaver was updated to the stable release 2.28.3, fixing various bugs and security issues. Following security issues have been fixed: When resuming a system gnome-screensaver does not lock external displays that got connected while the system was suspended CVE-2010-0285: CVSS v2 Base...

openSUSE Security Update : gnome-screensaver (gnome-screensaver-1837)

When resuming a system gnome-screensaver doesn't lock external displays that got connected while the system was suspended CVE-2010-0285. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update...

openSUSE Security Update : gnome-screensaver (gnome-screensaver-1837)

When resuming a system gnome-screensaver doesn't lock external displays that got connected while the system was suspended CVE-2010-0285. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update...

CVE-2009-0285

CVE-2009-0285 describes a cross-site scripting (XSS) vulnerability in the error.asp page of BBSXP 5.13 and earlier . The weakness is exploitable via the message parameter , enabling remote attackers to inject arbitrary web script or HTML. The provided documents confirm the vulnerability and affec...

CVE-2009-0285

Cross-site scripting XSS vulnerability in error.asp in BBSXP 5.13 and earlier allows remote attackers to inject arbitrary web script or HTML via the message parameter...

CVE-2009-0285

creationtimestamp| type| source ---|---|--- 2009-01-23 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/32748...

[Backports-security-announce] Security Update for ngircd

Gerfried Fuchs uploaded new packages for ngircd which fixed the following security problem: CVE-2008-0285, Debian Bug 461067 ngIRCd 0.10.x before 0.10.4 and 0.11.0 before 0.11.0-pre2 allows remote attackers to cause a denial of service crash via crafted IRC PART message, which triggers an invalid...

Gentoo Security Advisory GLSA 200801-13 (ngircd)

The remote host is missing updates announced in advisory GLSA 200801-13. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Gentoo Security Advisory GLSA 200801-13 (ngircd)

The remote host is missing updates announced in advisory GLSA 200801-13. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

[ GLSA 200801-13 ] ngIRCd: Denial of Service

Gentoo Linux Security Advisory GLSA 200801-13:02 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - http://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -...

CVE-2008-0285

ngIRCd 0.10.x before 0.10.4 and 0.11.0 before 0.11.0-pre2 allows remote attackers to cause a denial of service crash via crafted IRC PART message, which triggers an invalid dereference...

CVE-2008-0285

ngIRCd is affected by CVE-2008-0285: versions 0.10.x before 0.10.4 and 0.11.0 before 0.11.0-pre2 are vulnerable. The flaw occurs in the IRC_PART() handling in irc-channel.c, where insufficient parameter checks can dereference a null/invalid pointer, allowing a remote attacker to crash the daemon ...

CVE-2007-0285

CVE-2007-0285 affects Oracle software including Application Server (9.0.4.3, 10.1.2.0.2, 10.1.2.2), Collaboration Suite (9.0.4.2, 10.1.2), and E-Business Suite/Applications 11.5.10CU2, with the vulnerability tied to Oracle Reports Developer (REP01). The description notes an unspecified vulnerabil...

CVE-2006-0285

CVE-2006-0285 is an unspecified vulnerability in the Java Net component of Oracle Database Server (versions 8.1.7.4, 9.0.1.5, 9.0.1.5 FIPS, 9.2.0.7, 10.1.0.4) and Oracle Application Server (1.0.2.2, 9.0.4.2, 10.1.2.0.2). The available documents describe the issue as having unspecified impact and ...

CVE-2005-0285

Webseries Payment Application does not properly restrict privileged operations, which allows remote authenticated users to gain privileges by directly accessing certain URLs...

CVE-2005-0285

The CVE-2005-0285 entry concerns Webseries Payment Application with an improper restriction of privileged operations, allowing remote authenticated users to gain privileges by directly accessing privileged URLs. The primary impact is privilege escalation; no concrete remediation or fix details ar...

CVE-2004-0285

PHP remote file inclusion vulnerabilities in include/footer.inc.php in 1 AllMyVisitors, 2 AllMyLinks, and 3 AllMyGuests allow remote attackers to execute arbitrary PHP code via a URL in the AMVconfigcfgserverpath parameter...

CVE-2004-0285

PHP remote file inclusion vulnerabilities in include/footer.inc.php in 1 AllMyVisitors, 2 AllMyLinks, and 3 AllMyGuests allow remote attackers to execute arbitrary PHP code via a URL in the AMVconfigcfgserverpath parameter...

CVE-2004-0285

The CVE-2004-0285 issue is a PHP remote file inclusion in include/footer.inc.php affecting AllMyVisitors, AllMyLinks, and AllMyGuests. An attacker can execute arbitrary PHP code by supplying a URL in the _AMVconfig[cfg_serverpath] parameter, enabling code execution over the network. The vulnerabi...