CVE-2013-0332

Multiple directory traversal vulnerabilities in ZoneMinder 1.24.x before 1.24.4 allow remote attackers to read arbitrary files via a .. dot dot in the 1 view, 2 request, or 3 action parameter...

CVE-2013-0332

ZoneMinder 1.24.x before 1.24.4 is affected by multiple directory traversal vulnerabilities that allow remote attackers to read arbitrary files via .. in the view, request, or action parameters. This root cause is a local/file access flaw in the handling of user-supplied paths, enabling file expo...

Debian DSA-2640-1 : zoneminder - several issues

Multiple vulnerabilities were discovered in zoneminder, a Linux video camera security and surveillance solution. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2013-0232 Brendan Coles discovered that zoneminder is prone to an arbitrary command execution...

[SECURITY] [DSA 2640-1] zoneminder security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2640-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso March 14, 2013 http://www.debian.org/security/faq -...

Debian Security Advisory DSA 2640-1 (zoneminder - several issues)

Multiple vulnerabilities were discovered in zoneminder, a Linux video camera security and surveillance solution. The Common Vulnerabilities and Exposures project identifies the following problems: CVE-2013-0232 Brendan Coles discovered that zoneminder is prone to an arbitrary command execution...

DSA-2640-1 zoneminder - several issues

Bulletin has no description...

Debian: Security Advisory (DSA-2640-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2013-0332

creationtimestamp| type| source ---|---|--- 2013-01-24 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/24310...

CentOS Update for scsi-target-utils CESA-2011:0332 centos5 i386

Check for the Version of scsi-target-utils OpenVAS Vulnerability Test CentOS Update for scsi-target-utils CESA-2011:0332 centos5 i386 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute i...

CVE-2011-0332

CVE-2011-0332 affects Foxit Reader prior to 4.3.1.0218 and Foxit Phantom prior to 2.3.3.1112. The issue is an ICC parsing integer overflow that can trigger a heap-based buffer overflow via crafted ICC chunks in a PDF, enabling remote code execution. Multiple connected sources (NVD/NIST entry, Ope...

CentOS Update for firefox CESA-2010:0332 centos4 i386

Check for the Version of firefox OpenVAS Vulnerability Test CentOS Update for firefox CESA-2010:0332 centos4 i386 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

CentOS 4 : firefox (CESA-2010:0332)

Updated firefox packages that fix several security issues are now available for Red Hat Enterprise Linux 4 and 5. The Red Hat Security Response Team has rated this update as having critical security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings...

CVE-2010-0332

SQL injection vulnerability in the TV21 Talkshow tv21talkshow extension 1.0.1 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2010-0332

CVE-2010-0332 describes an SQL injection in the TYPO3 TV21 Talkshow extension (tv21_talkshow) version 1.0.1 and earlier. The vulnerability allows remote attackers to execute arbitrary SQL commands via unspecified vectors, impacting TYPO3 installations with the affected extension. Connected source...

CVE-2010-0332

SQL injection vulnerability in the TV21 Talkshow tv21talkshow extension 1.0.1 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2009-0332

CVE-2009-0332 affects AV Book Library prior to 1.1, with multiple SQL injection flaws in components including admin/edit.php, admin/add.php, and lib/book_search.php. The root cause is unsanitized/unspecified parameters enabling remote attackers to execute arbitrary SQL commands. The CVE has a Hig...

CVE-2008-0332

CVE-2008-0332 corresponds to a directory traversal vulnerability in aria 0.99-6, affecting arias/help/effect.php where an attacker can cause local file inclusion and execution through crafted page parameters. The NVD entry notes a network-exposed vector with low attack complexity and no authentic...

CVE-2007-0332

CVE-2007-0332 affects the web application component in liens_dynamiques 2.1, where two admin endpoints (admin/adminlien.php3 and admin/modif.php3) do not require authentication. This allows remote attackers to perform unauthorized administrative actions by crafting a direct request. The public re...

CVE-2006-0332

CVE-2006-0332 affects Pantomime in Ecartis 1.0.0 snapshot 20050909. The vulnerability arises because e-mail attachments are stored in a publicly accessible directory, which may allow remote attackers to upload arbitrary files. The available documents identify the affected product/version and the ...

CVE-2005-0332

The CVE-2005-0332 entry concerns DeskNow Mail and Collaboration Server (v2.5.12) with two directory traversal flaws. The first allows remote upload (and possible JSP-based execution) through the AttachmentsKey parameter to attachment.do, enabling files to be placed outside the intended directory....