CVE-2013-0322

Cross-site scripting XSS vulnerability in Views in the Ubercart module 7.x-3.x before 7.x-3.4 for Drupal allows remote attackers to inject arbitrary web script or HTML via the full name field...

CVE-2013-0322

CVE-2013-0322 affects the Drupal Ubercart module (7.x-3.x) prior to 7.x-3.4, with the XSS vulnerability arising in the Views integration when processing the full name field. The root cause is unsanitized output in the full name field, allowing remote attackers to inject arbitrary script/HTML. Pub...

SA-CONTRIB-2013-020 - Ubercart - Cross site scripting (XSS)

The Ubercart module for Drupal provides a shopping cart and e-commerce features for Drupal. The "full name" field in Views did not properly sanitize output. The vulnerability is mitigated by the fact that an attacker must get far enough in the checkout process to store their name with an order. C...

CVE-2011-0322

CVE-2011-0322 affects EMC RSA Access Manager Server (versions 5.5.x, 6.0.x, 6.1.x). The root cause is improper input handling that could let an attacker gain unauthorized access to protected resources via unknown vectors. The vulnerability is rated with a base score of 7.5 (HIGH) by CVSSv2. Publi...

CVE-2000-0322

creationtimestamp| type| source ---|---|--- 2010-10-18 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/16858 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/piranhapasswdexec.rb 2025-02-06 03:13:37+00:00| seen|...

RedHat Piranha Virtual Server Package passwd.php3 Arbitrary Command Execution

$Id: piranhapasswdexec.rb 8497 2010-02-14 20:27:24Z patrickw $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

CVE-2010-0322

The CVE-2010-0322 entry concerns the MK-AnydropdownMenu (mk_anydropdownmenu) TYPO3 extension, affected in version 0.3.28 and earlier. The root cause is an SQL injection vulnerability in the extension’s init function, enabling remote attackers to execute arbitrary SQL commands via unspecified vect...

[SECURITY] [DSA 1794-1] New Linux 2.6.18 packages fix several vulnerabilities

---------------------------------------------------------------------- Debian Security Advisory DSA-1794-1 [email protected] http://www.debian.org/security/ dann frazier May 6, 2009 http://www.debian.org/security/faq - ----------------------------------------------------------------------...

CentOS Security Advisory CESA-2009:0331 (kernel)

The remote host is missing updates to kernel announced in advisory CESA-2009:0331. CESA-2009:0331 63902 2 $Id: ovcesa20090331.nasl 6650 2017-07-10 11:43:12Z cfischer $ Description: Auto-generated from advisory CESA-2009:0331 kernel Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...

RedHat Security Advisory RHSA-2009:0326

The remote host is missing updates to the kernel announced in advisory RHSA-2009:0326. Security fixes: memory leaks were found on some error paths in the icmpsend function in the Linux kernel. This could, potentially, cause the network connectivity to cease. CVE-2009-0778, Important Chris Evans...

CentOS Security Advisory CESA-2009:0326 (kernel)

The remote host is missing updates to kernel announced in advisory CESA-2009:0326. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR GPL-3.0-on...

Debian: Security Advisory (DSA-1749-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SuSE Security Advisory SUSE-SA:2009:010 (kernel)

The remote host is missing updates announced in advisory SUSE-SA:2009:010. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR GPL-3.0-only...

CVE-2009-0322

drivers/firmware/dellrbu.c in the Linux kernel before 2.6.27.13, and 2.6.28.x before 2.6.28.2, allows local users to cause a denial of service system crash via a read system call that specifies zero bytes from the 1 imagetype or 2 packetsize file in /sys/devices/platform/dellrbu/...

CVE-2009-0322

drivers/firmware/dellrbu.c in the Linux kernel before 2.6.27.13, and 2.6.28.x before 2.6.28.2, allows local users to cause a denial of service system crash via a read system call that specifies zero bytes from the 1 imagetype or 2 packetsize file in /sys/devices/platform/dellrbu/...

CVE-2009-0322

CVE-2009-0322 affects the Linux kernel Dell RBU (Remote BIOS Update) driver: reading zero bytes from image_type or packet_size under /sys/devices/platform/dell_rbu/ can cause a local DoS (system crash). Concrete references in connected advisories show affected kernels include 2.6.27.x (before 2.6...

Immunity Canvas: I2OMGMT

Name| i2omgmt ---|--- CVE| CVE-2008-0322 Exploit Pack| CANVAS Description| i2omgmt.sys I2OFltrParamsGetSet Privilege Escalation Notes| CVE Name: CVE-2008-0322 Repeatability: One Shot CVS URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=2008-0322 Date public: 05/13/2008 CVE Url:...

CVE-2008-0322

The CVE-2008-0322 issue affects the I2O Utility Filter driver (i2omgmt.sys) version 5.1.2600.2180 on Windows XP. The .\

CVE-2008-0322

The I2O Utility Filter driver i2omgmt.sys 5.1.2600.2180 for Microsoft Windows XP sets Everyone/Write permissions for the "\.\I2OExc" device interface, which allows local users to gain privileges. NOTE: this issue can be leveraged to overwrite arbitrary memory and execute code via an IOCTL call...

MS07-069: Cumulative Security Update for Internet Explorer (942615)

The remote host is missing the IE cumulative security update 942615. The remote version of IE is vulnerable to several flaws that could allow an attacker to execute arbitrary code on the remote host. Tenable Network Security, Inc. include"compat.inc"; if description scriptid29313;...