93 matches found
CVE-2006-0484
CVE-2006-0484 describes a directory traversal vulnerability in Vis.pl, part of the FACE CONTROL product. The flaw allows remote attackers to read arbitrary files by supplying a .. (dot dot) payload in parameters that open a file, with examples such as (1) s or (2) p. The available documents provi...
CVE-2005-0484
Format string vulnerability in gprostats for GProFTPD before 8.1.9 may allow remote attackers to execute arbitrary code via an FTP transfer with a crafted filename that causes format string specifiers to be inserted into the ProFTPD transfer log...
CVE-2004-0484
The CVE-2004-0484 entry concerns Microsoft Internet Explorer 6.0.2800, specifically the mshtml.dll component. A crafted HTML table containing a form that spans multiple td elements and references a CSS “float: left” class in a stylesheet link located after the table can trigger a null dereference...
CVE-2004-0484
mshtml.dll in Microsoft Internet Explorer 6.0.2800 allows remote attackers to cause a denial of service crash via a table containing a form that crosses multiple td elements, and whose "float: left" class is defined in a link to a CSS stylesheet after the end of the table, which may trigger a nul...
CVE-2003-0484
Cross-site scripting XSS vulnerability in viewtopic.php for phpBB allows remote attackers to insert arbitrary web script via the topicid parameter...
CVE-2003-0484
CVE-2003-0484 is an XSS vulnerability in phpBB's viewtopic.php where an attacker can inject arbitrary script via the topic_id parameter. Affected: phpBB (viewtopic.php); Impact: partial confidentiality, integrity, and availability concerns at the browser level due to script execution. CVSS2 base ...
CVE-2002-0484
moveuploadedfile in PHP does not does not check for the base directory openbasedir, which could allow remote attackers to upload files to unintended locations on the system...
CVE-2002-0484
The CVE-2002-0484 entry describes a PHP vulnerability in move_uploaded_file where the function does not check the base directory (open_basedir). This can allow remote attackers to upload files to locations outside the intended directory. The primary affected component is PHP’s file-upload handlin...
CVE-2001-0484
CVE-2001-0484 : Tektronix PhaserLink 850 allows remote attackers to access configuration pages (_ncl_subjects.shtml, _ncl_items.shtml) without authentication, enabling modification of configuration information and causing a Denial of Service by accessing those pages. Affected software: PhaserLink...
Tektronix PhaserLink Multiple Admin Page Unauthenticated Configuration Manipulation
The file /nclitems.shtml or /nclsubjects.shtml exists on the remote web server. If the remote host is a Tektronix printer, then this page allows anyone to reconfigure it without any authentication means whatsoever. An attacker may use this flaw to conduct a denial of service attack against your...
CVE-2000-0484
Small HTTP Server ver 3.06 contains a memory corruption bug causing a memory overflow. The overflowed buffer crashes into a Structured Exception Handler resulting in a Denial of Service...
CVE-2000-0484
The CVE-2000-0484 entry describes a memory corruption flaw in Small HTTP Server v3.06 that leads to a memory overflow and a crash of the Structured Exception Handler, resulting in a Denial of Service. The affected component is the server’s memory handling for requests; the root cause is a memory ...
CVE-1999-0484
The consolidated data confirms CVE-1999-0484 is a vulnerability described as a buffer overflow in OpenBSD ping. The Red Hat and CVE records reproduce the same description. No technical specifics are provided in the connected documents regarding affected versions, exact root cause details, exploit...