112 matches found
CVE-2011-0470
Removed by vendor...
CVE-2011-0470
Google Chrome before 8.0.552.237 and Chrome OS before 8.0.552.344 are affected by a vulnerability in handling extensions notifications that can be exploited to crash the application (denial of service). The provided documents state the issue but do not give explicit exploitation details or a conf...
CVE-2010-0470
CVE-2010-0470 describes a stored/reflected cross-site scripting (XSS) vulnerability in the scvrtsrv.cmd interface of the Comtrend CT-507IT ADSL Router, allowing remote attackers to inject arbitrary web script or HTML via the srvName parameter. The cited sources (NVD and Red Hat, among others) con...
CVE-2010-0470
creationtimestamp| type| source ---|---|--- 2010-01-29 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/33580...
Solaris Update for tip 111504-02
Check for the Version of tip OpenVAS Vulnerability Test Solaris Update for tip 111504-02 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of the GNU...
CVE-2009-0470
CVE-2009-0470 concerns Cisco IOS 12.4(23) with cross-site scripting (XSS) vulnerabilities in the HTTP server. The flaw allows remote attackers to inject arbitrary web script or HTML via PATH_INFO to the default URI under (1) level/15/exec/-/ and (2) exec/. This is a separate issue from CVE-2008-3...
CVE-2009-0470
Multiple cross-site scripting XSS vulnerabilities in the HTTP server in Cisco IOS 12.423 allow remote attackers to inject arbitrary web script or HTML via the PATHINFO to the default URI under 1 level/15/exec/-/ or 2 exec/, a different vulnerability than CVE-2008-3821...
CVE-2009-0470
creationtimestamp| type| source ---|---|--- 2009-02-04 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/32776...
Gentoo Security Advisory GLSA 200502-22 (wpa_supplicant)
The remote host is missing updates announced in advisory GLSA 200502-22. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...
CVE-2008-0470
A certain ActiveX control in Comodo AntiVirus 2.0 allows remote attackers to execute arbitrary commands via the ExecuteStr method...
CVE-2008-0470
CVE-2008-0470 involves a vulnerability in Comodo Antivirus 2.0 where a specific ActiveX control allows remote attackers to execute arbitrary commands through the ExecuteStr method. The connected documents confirm the affected product and the root cause (ActiveX control enabling remote command exe...
Solaris 10 (sparc) : 124997-01 (deprecated)
SunOS 5.10: /usr/bin/tip patch. Date this patch was last updated by Sun : Jan/18/07 This plugin has been deprecated and either replaced with individual 124997 patch-revision plugins, or deemed non-security related. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. @DEPRECATED@ Disabled on...
CVE-2007-0470
CVE-2007-0470 references multiple unknown vulnerabilities in the SunOS tip utility on Solaris 8/9/10 that enable local privilege escalation to the uucp account. The CVE is addressed by Sun patch 124998-01 for Solaris 10 x86 and 124997-01 for Solaris 10 SPARC, and related advisories note installin...
Solaris 9 (x86) : 123369-01
SunOS 5.9x86: tip patch. Date this patch was last updated by Sun : Jan/12/07 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if description...
Solaris 9 (sparc) : 123368-01
SunOS 5.9: tip patch. Date this patch was last updated by Sun : Jan/12/07 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid24220...
CVE-2006-0470
CVE-2006-0470 describes an XSS vulnerability in MyBB 1.02’s search.php where the sortby and sortordr parameters are not properly handled during redirection. An attacker could inject arbitrary script/HTML by manipulating these parameters, leading to possible remote script execution in the context ...
CVE-2005-0470
The CVE-2005-0470 issue affects wpa_supplicant prior to 0.2.7, where a buffer overflow in handling EAPOL-Key frames can cause a denial of service (segmentation fault) via remote attacker-supplied data. Affected component is the wpa_supplicant software; root cause is improper validation/handling o...
Solaris 8 (x86) : 111505-02
SunOS 5.8x86: tip patch. Date this patch was last updated by Sun : Jan/12/07 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if description...
Solaris 8 (sparc) : 111504-02
SunOS 5.8: tip patch. Date this patch was last updated by Sun : Jan/12/07 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid13373...
CVE-2004-0470
BEA WebLogic Server and WebLogic Express 7.0 through SP5 and 8.1 through SP2, when editing weblogic.xml using WebLogic Builder or the SecurityRoleAssignmentMBean.toXML method, inadvertently removes security-role-assignment tags when weblogic.xml does not have a principal-name tag, which can remov...