100 matches found
Fedora Update for mantis FEDORA-2008-0856
The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...
CVE-2009-0404
Multiple cross-site scripting XSS vulnerabilities in Bioinformatics htmLawed 1.1.3 and 1.1.4 allow remote attackers to inject arbitrary web script or HTML via invalid Cascading Style Sheets CSS expressions in the style attribute, which is processed by Internet Explorer 7...
CVE-2009-0404
CVE-2009-0404 affects Bioinformatics htmLawed 1.1.3 and 1.1.4, with multiple XSS vulnerabilities allowing remote injection of arbitrary script/HTML via invalid CSS expressions in the style attribute processed by Internet Explorer 7. The vulnerability details specify the affected component and ent...
CVE-2008-0404
Cross-site scripting XSS vulnerability in Mantis before 1.1.1 allows remote attackers to inject arbitrary web script or HTML via vectors related to the "Most active bugs" summary...
CVE-2008-0404
CVE-2008-0404 is a cross-site scripting (XSS) vulnerability in MantisBT prior to 1.1.1 that allows remote attackers to inject arbitrary script via the "Most active bugs" summary. The NVD entry lists an impact of partial integrity breach with no confidentiality or availability impact, and a base C...
CVE-2007-0404
bin/compile-messages.py in Django 0.95 does not quote argument strings before invoking the msgfmt program through the os.system function, which allows attackers to execute arbitrary commands via shell metacharacters in a 1 .po or 2 .mo file...
CVE-2007-0404
CVE-2007-0404 affects Django 0.95. The vulnerability lies in bin/compile-messages.py, which invokes msgfmt via os.system without quoting argument strings, allowing an attacker to inject shell metacharacters via a (1) .po or (2) .mo file and execute arbitrary commands. The underlying cause is unsa...
CVE-2006-0404
CVE-2006-0404 affects Note-A-Day Weblog 2.2. The issue is improper access control: sensitive data stored under the web document root can be accessed via a direct request to archive/.phpass-admin, exposing encrypted passwords. This is the stated vulnerability and its impact; no explicit remediatio...
CVE-2006-0404
Note-A-Day Weblog 2.2 stores sensitive data under the web document root with insufficient access control, which allows remote attackers to obtain sensitive information via a direct request to archive/.phpass-admin, which contains encrypted passwords...
CVE-2004-0404
logcheck before 1.1.1 allows local users to overwrite arbitrary files via a symlink attack on a temporary directory in /var/tmp...
CVE-2004-0404
logcheck before 1.1.1 allows local users to overwrite arbitrary files via a symlink attack on a temporary directory in /var/tmp...
CVE-2004-0404
CVE-2004-0404 affects the logcheck utility. A local attacker can exploit a symlink attack in a temporary directory under /var/tmp to overwrite arbitrary files. The issue is present in logcheck before version 1.1.1. The vulnerability is documented across multiple sources (NVD/NVD-derived entries, ...
CVE-2004-0404
logcheck before 1.1.1 allows local users to overwrite arbitrary files via a symlink attack on a temporary directory in /var/tmp...
CVE-2003-0404
CVE-2003-0404 affects Vignette StoryServer 4/5 and Vignette V/5 and V/6. Vulnerability: multiple Cross Site Scripting (XSS) via text variables, demonstrated through the errInfo parameter in the default login template. Impact: remote attackers can inject arbitrary HTML and script. Exploitation det...
CVE-2003-0404
Multiple Cross Site Scripting XSS vulnerabilities in Vignette StoryServer 4 and 5, and Vignette V/5 and V/6, allow remote attackers to insert arbitrary HTML and script via text variables, as demonstrated using the errInfo parameter of the default login template...
CVE-2002-0404
Ethereal (network traffic analyzer) is affected by a memory-consumption DoS in the GIOP dissector prior to version 0.9.3. Red Hat and Debian advisories summarize the issue as a vulnerability in Ethereal’s dissectors (GIOP), where memory allocation/consumption can be exploited remotely to impact a...
CVE-2001-0404
Directory traversal vulnerability in JavaServer Web Dev Kit JSWDK 1.0.1 allows remote attackers to read arbitrary files via a .. dot dot in an HTTP request to the WEB-INF directory...
CVE-2001-0404
Vulnerability: Directory traversal in JavaServer Web Dev Kit (JSWDK) 1.0.1 allows remote read of arbitrary files via a .. sequence in an HTTP request targeting the WEB-INF directory. Affected product/component: JSWDK 1.0.1. Root cause: improper path handling enabling traversal to WEB-INF. Impact:...
CVE-1999-0404
CVE-1999-0404 refers to a buffer overflow in the Mail-Max SMTP server for Windows. Multiple connected sources confirm the vulnerability affects Mail-Max, with the root cause being a buffer overflow in the server that can lead to remote command execution. Nessus notes additional remote overflow va...