107 matches found
CVE-2010-0339
SQL injection vulnerability in the User Links vm19userlinks extension 0.1.1 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...
Oracle Database Server XDB PITRIG_TRUNCATE Procedure Buffer Overflow (CVE-2008-0339)
Oracle Database Server is an enterprise-level relational database application suite. To extend the functionality of the Oracle Database Server, extra packages of related program objects, e.g., procedures, functions, variables, constants, cursors, and exceptions, are provided in order to better...
CVE-2009-0339
SQL injection vulnerability in incwebblogmanager.asp in DMXReady Blog Manager allows remote attackers to execute arbitrary SQL commands via the itemID parameter in a view action...
CVE-2009-0339
The CVE-2009-0339 entry concerns a SQL injection in inc_webblogmanager.asp of the DMXReady Blog Manager, exploitable via the itemID parameter in a view action. This vulnerability allows remote attackers to execute arbitrary SQL commands, with potential impact on confidentiality, integrity, and av...
Oracle XDB component PITRIG_TRUNCATE buffer overflow
Added: 02/01/2008 CVE: CVE-2008-0339 BID: 27229 OSVDB: 40300 Background The PITRIGTRUNCATE function is included in the XDB.XDBPITRIGPKG package which is included with Oracle Database. Problem A buffer overflow vulnerability in the PITRIGTRUNCATE function allows remote, authenticated attackers to...
CVE-2008-0339
Oracle Database Server XDB PITRIG_TRUNCATE buffer overflow (CVE-2008-0339) affects Oracle Database Server 10g/10.1.0.5 with XDB.XDB_PITRIG_PKG. A remote, authenticated attacker can exploit a buffer overflow in PITRIG_TRUNCATE by supplying long OWNER/NAME arguments, potentially executing arbitrary...
CVE-2007-0339
The CVE describes a SQL injection in Scriptme SMe FileMailer 1.21 through the login form (index.php). The vulnerability allows remote attackers to execute arbitrary SQL commands via the Password field (ps parameter). Root cause is unsafe handling of input in the login process, enabling database c...
CVE-2006-0339
CVE-2006-0339 affects BitComet Client 0.60. A buffer overflow in handling a torrent publisher name URI can be triggered remotely by a specially crafted torrent file, potentially allowing arbitrary code execution. Mitigation in the public docs is to update to the latest version of BitComet. Exploi...
KLA10088 ACE vulnerability in BitComet
A buffer overflow was found in the BitComet. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited from the network via a specially designed publisher URI. Original advisories - Related products BitComet-Client CVE list CVE-2006-0339 high...
CVE-2005-0339
CVE-2005-0339 describes a buffer overflow in Foxmail 2.0 that can be triggered by a long MAIL FROM command over the network. The consequence is a denial of service and the possibility of arbitrary code execution by a remote attacker. The provided documents do not specify impacted versions beyond ...
CVE-2004-0339
Cross-site scripting XSS vulnerability in ViewTopic.php in phpBB, possibly 2.0.6c and earlier, allows remote attackers to execute arbitrary script or HTML as other users via the postorder parameter...
CVE-2004-0339
Cross-site scripting XSS vulnerability in ViewTopic.php in phpBB, possibly 2.0.6c and earlier, allows remote attackers to execute arbitrary script or HTML as other users via the postorder parameter...
CVE-2003-0339
Multiple heap-based buffer overflows in WsMp3 daemon WsMp3d 0.0.10 and earlier allow remote attackers to execute arbitrary code via long HTTP requests...
CVE-2003-0339
CVE-2003-0339 affects the WsMp3 daemon (WsMp3d) 0.0.10 and earlier. The vulnerability consists of multiple heap-based buffer overflows in handling long HTTP requests, enabling remote code execution. According to NVD metrics, it is a NETWORK, LOW-attack complexity, NO authentication requirement vu...
CVE-2003-0339
Multiple heap-based buffer overflows in WsMp3 daemon WsMp3d 0.0.10 and earlier allow remote attackers to execute arbitrary code via long HTTP requests...
CVE-2002-0339
Cisco IOS CVE-2002-0339 affects IOS 11.1CC–12.2 with Cisco Express Forwarding (CEF) enabled. The issue leaks fragments of previously processed packets by padding MAC-level packets to match the IP length, using data from earlier packets. Impact is information disclosure via network access; attacke...
CVE-2002-0339
Cisco IOS 11.1CC through 12.2 with Cisco Express Forwarding CEF enabled includes portions of previous packets in the padding of a MAC level packet when the MAC packet's length is less than the IP level packet length...
CVE-2002-0339
Cisco IOS 11.1CC through 12.2 with Cisco Express Forwarding CEF enabled includes portions of previous packets in the padding of a MAC level packet when the MAC packet's length is less than the IP level packet length...
CVE-2001-0339
Summary: CVE-2001-0339 corresponds to a Web page spoofing vulnerability in Internet Explorer 5.5 and earlier, where the address bar could display a URL different from the actual page, enabling phishing-type spoofing. The connected OpenVAS entries reference Internet Explorer patches (e.g., 890923/...
CVE-2001-0339
Internet Explorer 5.5 and earlier allows remote attackers to display a URL in the address bar that is different than the URL that is actually being displayed, which could be used in web site spoofing attacks, aka the "Web page spoofing vulnerability."...