MariaDB 5.2.0 < 5.2.14 Multiple Vulnerabilities

The version of MariaDB installed on the remote host is prior to 5.2.14. It is, therefore, affected by multiple vulnerabilities as referenced in the 5.2.14 advisory. - Unspecified vulnerability in the Server component in Oracle MySQL 5.1.66 and earlier, and 5.5.28 and earlier, allows local users t...

RedHat Update for mysql RHSA-2013:0219-01

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scripttagname:"affected", value:"mys...

Moderate: Red Hat Security Advisory: mysql security update

Updated mysql packages that fix several security issues are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, are...

Ubuntu: Security Advisory (USN-1703-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2013-0375

MiracleLinux 4 security advisory AXSA:2013-100:02 references CVE-2013-0375 as one of several fixes for Oracle MySQL Server 5.1.x. The advisory indicates a remote vulnerability in the Server component related to Server Replication affecting MySQL 5.1.66 and earlier (and 5.5.28 and earlier in other...

CVE-2011-0375

Cisco TelePresence endpoint devices running software 1.2.x–1.6.x are affected by a CGI Command Injection vulnerability (CVE-2011-0375) in the CGI implementation, requiring a remote, authenticated attacker to submit a malformed request to impact the device. The Cisco advisory lists multiple concur...

RealPlayer for Windows < Build 12.0.0.319 Multiple Buffer Overflows

According to its build number, the installed version of RealPlayer on the remote Windows host has multiple buffer overflow vulnerabilities : - A RealPlayer 'ASM' Rulebook heap-based overflow. CVE-2009-4241 - A RealPlayer 'GIF' file heap overflow. CVE-2009-4242 - A RealPlayer media overflow 'http'...

Cross site scripting

Cross-site scripting XSS vulnerability in productlist.php in JCE-Tech PHP Calendars, downloaded 2010-01-11, allows remote attackers to inject arbitrary web script or HTML via the cat parameter. NOTE: this issue is reportedly resultant from a forced SQL error message that occurs from exploitation ...

CVE-2010-0375

CVE-2010-0375 concerns a SQL injection vulnerability in product_list.php of JCE-Tech PHP Calendars, exploitable via the cat parameter to execute arbitrary SQL commands. The vulnerability is documented across multiple sources (NVD/NVD-derived listings, CVE records, and third-party references) with...

CVE-2010-0375

SQL injection vulnerability in productlist.php in JCE-Tech PHP Calendars, downloaded 2010-01-11, allows remote attackers to execute arbitrary SQL commands via the cat parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2010-0376

CVE-2010-0376 is an XSS vulnerability in JCE-Tech PHP Calendars, specifically in product_list.php where the cat parameter can be exploited to inject arbitrary HTML/Script. The issue is described as arising from a forced SQL error message related to CVE-2010-0375. Connected sources confirm the vul...

CVE-2010-0376

Cross-site scripting XSS vulnerability in productlist.php in JCE-Tech PHP Calendars, downloaded 2010-01-11, allows remote attackers to inject arbitrary web script or HTML via the cat parameter. NOTE: this issue is reportedly resultant from a forced SQL error message that occurs from exploitation ...

CVE-2009-0375

CVE-2009-0375 corresponds to a remote code execution vulnerability in RealNetworks RealPlayer involving IVR file handling. The issue arises from incorrect handling of a filename length field in an IVR file, which can trigger a memory overwrite with a 0x00 byte, enabling arbitrary code execution. ...

CVE-2008-0375

Technical details about CVE-2008-0375 are not publicly available in the provided connected documents; no concrete vulnerable component, impact, or remediation is disclosed here. Monitor for updates.

joomla150beta-sql.txt

Hi, These bugs were published in full-disclosure about 2 weeks ago CVE : CVE-2007-0373, CVE-2007-0374 and CVE-2007-0375, CVE-2007-0387 . In Mambo 4.6.1 and Joomla 1.0.11 and 1.5 Beta , the 'id' parameter can cause sql injection when cancelling content editting . Other versions maybe affected too...

CVE-2007-0375

Joomla! 1.5.0 Beta allows remote attackers to obtain sensitive information via a direct request for 1 plugins/user/example.php; 2 gmail.php, 3 example.php, or 4 ldap.php in plugins/authentication/; 5 modules/modmainmenu/menu.php; or other unspecified PHP scripts, which reveals the path in various...

CVE-2007-0375

Joomla! 1.5.0 Beta allows remote attackers to obtain sensitive information via a direct request for 1 plugins/user/example.php; 2 gmail.php, 3 example.php, or 4 ldap.php in plugins/authentication/; 5 modules/modmainmenu/menu.php; or other unspecified PHP scripts, which reveals the path in various...

CVE-2007-0375

Joomla! 1.5.0 Beta is affected by CVE-2007-0375. Remote attackers can obtain sensitive information by directly requesting specific PHP scripts (e.g., plugins/user/example.php, gmail.php, example.php, ldap.php in plugins/authentication; modules/mod_mainmenu/menu.php). The root cause is a jimport f...

CVE-2006-0375

The CVE-2006-0375 entry applies to Advantage Century Telecommunication (ACT) P202S IP Phone, running firmware 1.1.21 on VxWorks. The issue is a hardcoded NTP server (Taiwan) that could let an attacker supply false time, block time information, or perform related attacks. The available connected d...

CVE-2005-0375

CVE-2005-0375 affects SGallery 1.01 via imageview.php. When (1) idalbum or (2) idimage is unset, an error in sql_fetch_row reveals the installation path, exposing sensitive information. This is a partial confidentiality impact described by the NVD score (base 5.0). The connected records confirm t...