86 matches found
MailEnable Webmail Cross Site Scripting
ME020567: MailEnable webmail cross-site scripting vulnerability CWE-79 References: CVE-2012-0389 Discovered by: Sajjad Pourali, Narendra Shinde and Shahab NamaziKhah Vendor advisory: http://www.mailenable.com/kb/Content/Article.asp?ID=me020567 Vendor contact: 2012-01-04 09:49:36 UTC Vendor...
MailEnable Webmail - Cross-Site Scripting
ME020567: MailEnable webmail cross-site scripting vulnerability CWE-79 References: CVE-2012-0389 Discovered by: Sajjad Pourali, Narendra Shinde and Shahab NamaziKhah Vendor advisory: http://www.mailenable.com/kb/Content/Article.asp?ID=me020567 Vendor contact: 2012-01-04 09:49:36 UTC Vendor...
CVE-2012-0389
creationtimestamp| type| source ---|---|--- 2012-01-12 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/36547 2012-01-13 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/18447...
CVE-2011-0389
CVE-2011-0389 is a vulnerability in Cisco TelePresence Multipoint Switch (CTMS) devices affecting software 1.0.x, 1.1.x, 1.5.x and 1.6.x. A remote, unauthenticated attacker can crash the call control process by sending a crafted RTCP UDP packet, causing a denial of service. The Cisco advisory and...
CVE-2010-0389
The admin server in Sun Java System Web Server 7.0 Update 6 allows remote attackers to cause a denial of service NULL pointer dereference and daemon crash via an HTTP request that lacks a method token...
CVE-2010-0389
CVE-2010-0389 affects Sun Java System Web Server 7.0 Update 6 (admin server). The vulnerability is a NULL pointer dereference in the admin server that can be triggered by an HTTP request missing a method token, leading to a denial of service (daemon crash). OpenVAS/OpenVAS-derived entries and Red...
CVE-2009-0389
WoW ActiveX 2.x is vulnerable to multiple remote code execution (RCE) vulnerabilities in the Web On Windows WOW ActiveX control. The CVE-2009-0389 description cites insecure methods (WriteIniFileString, ShellExecute) that can lead to arbitrary file writes or execution, and possible registry acces...
CVE-2008-0389
CVE-2008-0389 affects IBM WebSphere Application Server (WAS) versions 6.0–6.0.2.25, 6.1–6.1.0.14, and 5.1.1.x before 5.1.1.18, specifically the serveServletsByClassnameEnabled feature. The initial sources provide an unspecified vulnerability with unknown impact and attack vectors; no concrete exp...
CVE-2007-0389
The CVE-2007-0389 issue affects ArsDigita Community System (ACS) 3.4.10 and earlier and ArsDigita Community Education Solution (ACES) 1.1. It is a directory traversal vulnerability that lets an attacker read arbitrary files by sending URIs containing double-encoded sequences like .%252e/. The pro...
CVE-2006-0389
CVE-2006-0389 describes a cross-site scripting (XSS) vulnerability in Syndication (Safari RSS) on Mac OS X 10.4 through 10.4.5. The flaw allows remote attackers to execute arbitrary JavaScript via unspecified vectors involving RSS feeds, in the context of the affected user’s browser. Affected pro...
Mac OS X Multiple Vulnerabilities (Security Update 2006-001)
The remote host is running Apple Mac OS X, but lacks Security Update 2006-001. This security update contains fixes for the following applications : apachemodphp automount Bom Directory Services iChat IPSec LaunchServices LibSystem loginwindow Mail rsync Safari Syndication C Tenable Network...
CVE-2005-0389
CVE-2005-0389 is a duplicate of CVE-2005-0814. The connected sources (NVD/OSV/OpenVAS) describe an unknown vulnerability in Lysator LSH’s lshd for Lysator LSH 1.x and 2.x up to 2.0.1 that can allow remote denial of service. The publicly available detail for CVE-2005-0814 confirms the affected com...
CVE-2004-0389
RealNetworks Helix Universal Server 9.0.1 and 9.0.2 allows remote attackers to cause a denial of service crash via malformed requests that trigger a null dereference, as demonstrated using 1 GETPARAMETER or 2 DESCRIBE requests...
CVE-2004-0389
RealNetworks Helix Universal Server (RealServer) versions 9.0.1–9.0.2 are affected by a remote denial-of-service due to malformed GET_PARAMETER or DESCRIBE requests triggering a null dereference, causing crashes. The issue is documented in CVE-2004-0389 and reflected in advisories/plugins. Mitiga...
CVE-2004-0389
RealNetworks Helix Universal Server 9.0.1 and 9.0.2 allows remote attackers to cause a denial of service crash via malformed requests that trigger a null dereference, as demonstrated using 1 GETPARAMETER or 2 DESCRIBE requests...
CVE-2003-0389
Cross-site scripting XSS vulnerability in the secure redirect function of RSA ACE/Agent 5.0 for Windows, and 5.x for Web, allows remote attackers to insert arbitrary web script and possibly cause users to enter a passphrase via a GET request containing the script...
CVE-2003-0389
RSA ACE/Agent (Web) 5.x is affected by an XSS vulnerability in the secure redirect/login handling. Public advisories (SEC-CONSULT/Sec-20051025-1) reference RSA ACE/Agent Web 5.1 and 5.1.1 as vulnerable, exploitable via an unfiltered parameter (e.g., GET or form field like postdata) on web login f...
CVE-2002-0389
CVE-2002-0389 concerns Pipermail in Mailman, where private mail messages are stored with predictable filenames in a world-executable directory, allowing local users to read private mailing list archives. The connected advisories corroborate the issue within Mailman and reference multiple CVEs (no...
