225 matches found
CVE-2008-0444
Cross-site scripting XSS vulnerability in Electronic Logbook ELOG before 2.7.0 allows remote attackers to inject arbitrary web script or HTML via subtext parameter to unspecified components...
CVE-2008-0444
CVE-2008-0444 affects Electronic Logbook (ELOG) versions before 2.7.0. The vulnerability is a Cross-site Scripting (XSS) issue that could allow remote attackers to inject arbitrary web script or HTML through the subtext parameter to unspecified components. The available connected sources confirm ...
CVE-2008-0444
Cross-site scripting XSS vulnerability in Electronic Logbook ELOG before 2.7.0 allows remote attackers to inject arbitrary web script or HTML via subtext parameter to unspecified components...
CVE-2008-0444
Removed by vendor...
Buffer overflow
Buffer overflow in the EnumPrintersA function in dapcnfsd.dll 0.6.4.0 in Shaffer Solutions SSC DiskAccess NFS Client allows remote attackers to execute arbitrary code via a long argument, an issue similar to CVE-2006-5854 and CVE-2007-0444...
CVE-2007-0641
Buffer overflow in the EnumPrintersA function in dapcnfsd.dll 0.6.4.0 in Shaffer Solutions SSC DiskAccess NFS Client allows remote attackers to execute arbitrary code via a long argument, an issue similar to CVE-2006-5854 and CVE-2007-0444...
ZDI-07-006: Citrix Metaframe Presentation Server Print Provider Buffer Overflow Vulnerability
ZDI-07-006: Citrix Metaframe Presentation Server Print Provider Buffer Overflow Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-07-006.html January 24, 2007 -- CVE ID: CVE-2007-0444 -- Affected Vendor: Citrix -- Affected Products: Citrix Presentation Server 4.0 Citrix MetaFrame...
Immunity Canvas: CITRIX_PP
Name| citrixpp ---|--- CVE| CVE-2007-0444 Exploit Pack| CANVAS Description| Citrix MetaFrame XP Print Provider Overflow Notes| CVE Name: CVE-2007-0444 VENDOR: Citrix Notes: Platforms Tested: References: http://www.zerodayinitiative.com/advisories/ZDI-07-006.html CVE Url:...
CVE-2007-0444
CVE-2007-0444 affects Citrix Presentation Server 4.0, Citrix MetaFrame Presentation Server 3.0, and Citrix MetaFrame XP 1.0. It is a stack-based/buffer overflow in the print provider library (cpprov.dll) that occurs when long arguments are passed to EnumPrintersW or OpenPrinter, allowing executio...
CVE-2006-0444
CVE-2006-0444 describes a SQL injection in Phpclanwebsite (aka PCW) 1.23.1 (and related mentions) where an attacker can inject arbitrary SQL via the (1) par parameter in the forum post function and (2) poll_id parameter on the poll page. The poll_id vector may also enable XSS from an unquoted err...
CVE-2002-0444
Technical details about CVE-2002-0444 are not provided in the supplied documents. The description notes that Windows 2000 Terminal Server SYSVOL policy application can fail when connections exceed a maximum; monitor for official updates.
CVE-2002-0444
Microsoft Windows 2000 running the Terminal Server 90-day trial version, and possibly other versions, does not apply group policies to incoming users when the number of connections to the SYSVOL share exceeds the maximum, e.g. with a maximum number of licenses, which can allow remote authenticate...
CVE-2004-0444
CVE-2004-0444 involves SYMDNS.SYS in Symantec/Norton firewall and security products (consumer and corporate) and affects NBNS/DNS processing. A remote, unauthenticated attacker can trigger a stack overflow via a manipulated NBNS length field, a heap corruption in NBNS responses, or a DNS processi...
CVE-2004-0444
Multiple vulnerabilities in SYMDNS.SYS for Symantec Norton Internet Security and Professional 2002 through 2004, Norton Personal Firewall 2002 through 2004, Norton AntiSpam 2004, Client Firewall 5.01 and 5.1.1, and Client Security 1.0 through 2.0 allow remote attackers to cause a denial of servic...
CVE-2003-0444
Heap-based buffer overflow in GTKSee 0.5 and 0.5.1 allows remote attackers to execute arbitrary code via a PNG image of certain color depths...
CVE-2003-0444
CVE-2003-0444 corresponds to a heap-based buffer overflow in gtksee, affecting GTKSee 0.5 and 0.5.1. The vulnerability is triggered when loading PNG images of certain color depths, allowing remote code execution. Debian’s security advisory DSA-337-1 fixes this in gtksee by upgrading to a correcte...
CVE-2003-0444
Heap-based buffer overflow in GTKSee 0.5 and 0.5.1 allows remote attackers to execute arbitrary code via a PNG image of certain color depths...
CVE-2002-0444
Microsoft Windows 2000 running the Terminal Server 90-day trial version, and possibly other versions, does not apply group policies to incoming users when the number of connections to the SYSVOL share exceeds the maximum, e.g. with a maximum number of licenses, which can allow remote authenticate...
CVE-2001-0444
CVE-2001-0444 affects Cisco CBOS 2.3.0.053. The vulnerability arises because the router’s output of the show nat (sh nat) command is echoed to the terminal of the next user who connects via Telnet, potentially allowing that user to view sensitive information. The documented impact is partial conf...
CVE-2001-0444
Cisco CBOS 2.3.0.053 sends output of the "sh nat" aka "show nat" command to the terminal of the next user who attempts to connect to the router via telnet, which could allow that user to obtain sensitive information...