86 matches found
Fedora Update for imp FEDORA-2010-11399
The remote host is missing an update for the SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...
Fedora Update for imp FEDORA-2010-11432
The remote host is missing an update for the SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...
Fedora Update for horde FEDORA-2010-11392
The remote host is missing an update for the SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...
Fedora Update for horde FEDORA-2010-11445
The remote host is missing an update for the SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...
Fedora 13 : imp-4.3.7-1.fc13 (2010-11399)
Upgrade to 4.3.7 which fixes CVE-2010-0463 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEV...
Fedora 12 : imp-4.3.7-1.fc12 (2010-11432)
Upgrade to 4.3.7 which fixes CVE-2010-0463 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEV...
CVE-2010-0463
Horde IMP 4.3.6 and earlier does not request that the web browser avoid DNS prefetching of domain names contained in e-mail messages, which makes it easier for remote attackers to determine the network location of the webmail user by logging DNS requests...
CVE-2010-0463
CVE-2010-0463 affects Horde IMP 4.3.6 and earlier. The vulnerability arises because Horde IMP does not prevent DNS prefetching of domain names contained in e‑mail messages, enabling remote attackers to infer the webmail user’s network location by logging DNS requests. The NVD entry lists a CVSS v...
CVE-2009-0463
CVE-2009-0463 affects Groone GLinks 2.1. A PHP remote file include vulnerability in includes/header.php allows an attacker to inject a URL via the abspath parameter to execute arbitrary PHP code. Root cause: improper handling of abspath enabling remote file inclusion. Impact: arbitrary code execu...
CVE-2009-0463
creationtimestamp| type| source ---|---|--- 2009-02-03 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/7954...
CVE-2008-0463
The CVE-2008-0463 entry concerns a Cross-site Scripting (XSS) vulnerability in the Drupal Workflow module, affecting versions 4.7.x before 4.7.x-1.2 and 5.x before 5.x-1.2. The issue involves the ability for remote attackers to inject arbitrary web script or HTML via unspecified vectors involving...
CVE-2007-0463
CVE-2007-0463 describes a format-string vulnerability in Apple Software Update 2.0.5 on Mac OS X 10.4.8. The flaw allows remote attackers to trigger a denial of service (app crash) or execute arbitrary code via format string specifiers in (1) SWUTMP, (2) SUCATALOG filenames, or the (3) applicatio...
CVE-2003-0463
CVE-2003-0463 is rejected/not used; this entry does not represent an active vulnerability.
CVE-2006-0463
CVE-2006-0463 involves IdeoContent Manager and is described as a Cross-site scripting (XSS) vulnerability. The vulnerability allows remote attackers to inject arbitrary web script or HTML via (1) the goto_id parameter to index.php or (2) the page parameter to news_full.php. The connected document...
CVE-2006-0463
Cross-site scripting XSS vulnerability in IdeoContent Manager allows remote attackers to inject arbitrary web script or HTML via the 1 gotoid parameter to index.php or 2 page parameter to newsfull.php...
CVE-2005-0463
The CVE-2005-0463 entry pertains to Ulog-php before v1.0 with probable SQL injection flaws due to input validation issues in (1) host.php, (2) port.php, and (3) index.php. Public data provide no confirmed impact or exploit details. CVSS suggests HIGH severity (7.5), but explicit exploitation stat...
CVE-2002-0463
home.php in ARSC Really Simple Chat 1.0.1 and earlier allows remote attackers to determine the full pathname of the web server via an invalid language in the arsclanguage parameter, which leaks the pathname in an error message...
CVE-2002-0463
ARSC (Really Simple Chat) version 1.0.1 and earlier is affected by an information disclosure vulnerability. An invalid arsc_language value allows remote attackers to cause an error message that reveals the full pathname of the web server, exposing partial confidentiality. The CVE entry notes this...