Microsoft Windows Authentication Verification Remote Code Execution Vulnerability (981210)

This host is missing a critical security update according to Microsoft Bulletin MS10-019. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

CVE-2009-0487

Cross-site scripting XSS vulnerability in Mahara before 1.0.9 allows remote attackers to inject arbitrary web script or HTML via a crafted forum post...

CVE-2009-0487

CVE-2009-0487 concerns Mahara prior to 1.0.9. It is a cross-site scripting (XSS) vulnerability that allows remote attackers to inject arbitrary web script or HTML via a crafted forum post. Multiple sources in connected documents corroborate that this is an XSS issue affecting Mahara versions befo...

CVE-2008-0487

CVE-2008-0487 involves multiple SQL injection vulnerabilities in login.asp of ASPired2Protect. The vulnerability allows remote attackers to append or modify SQL commands via the (1) username and (2) password parameters, potentially exposing or altering data. The primary affected component is the ...

CVE-2007-0487

The CVE-2007-0487 issue is a PHP remote file inclusion in FreeForum 0.9.0 (index.php) exploitable via the fpath parameter, allowing remote code execution. This vulnerability is associated with FreeForum 0.9.0’s index.php and the fpath parameter, and descriptions note that third-party researchers ...

CVE-2006-0487

Technical details for CVE-2006-0487 are not publicly available in the provided documents. No concrete information on affected components, root cause, or remediation is supplied here; monitor for updates.

CVE-2005-0487

Cross-site scripting XSS vulnerability in index.php for Kayako ESupport 2.3.1, and possibly other versions, allows remote attackers to inject arbitrary HTML and web script via the nav parameter...

CVE-2005-0487

CVE-2005-0487 affects Kayako ESupport 2.3.1 (and possibly other versions). The vulnerability is a cross-site scripting (XSS) flaw in index.php exposed via the nav parameter, allowing remote attackers to inject arbitrary HTML/script. The NVD entry lists a base CVSS v2 score of 6.8 (MEDIUM) with ne...

CVE-2004-0487

A certain ActiveX control in Symantec Norton AntiVirus 2004 allows remote attackers to cause a denial of service resource consumption and possibly execute arbitrary programs...

CVE-2004-0487

Summary: CVE-2004-0487 corresponds to a vulnerability in Symantec Norton AntiVirus 2004 involving a vulnerable ActiveX control. The connected advisory confirms a remote attacker could trigger a denial-of-service condition by calling a specific method of this ActiveX control, with potential for ar...

CVE-2004-0487

A certain ActiveX control in Symantec Norton AntiVirus 2004 allows remote attackers to cause a denial of service resource consumption and possibly execute arbitrary programs...

CVE-2003-0487

Kerio MailServer 5.6.3 is affected by multiple buffer-overflow flaws that can be triggered by overly long parameters in specific modules (showuser in do_subscribe; folder in add_acl and list; user in do_map). These vulnerabilities allow remote authenticated users to cause a denial of service and,...

CVE-2002-0487

CVE-2002-0487 affects Intellisol Xpede 4.1, where passwords are stored in plaintext within a Javascript “session timeout” re-authentication capability. The underlying issue is plaintext password storage in a source file/cache accessible to the local user, enabling a local attacker to read credent...

CVE-2001-0487

AIX SNMP server snmpd allows remote attackers to cause a denial of service via a RST during the TCP connection...

CVE-2001-0487

CVE-2001-0487 affects the AIX SNMP server (snmpd) and allows remote attackers to cause a denial of service by sending a RST during the TCP connection. The provided documents do not specify the exact vulnerable component version range, affected product family beyond “AIX SNMP server snmpd,” or any...

CVE-2000-0487

CVE-2000-0487 : The Protected Store in Windows 2000 does not properly select the strongest available encryption, defaulting to 40-bit instead of 56-bit DES. The description confirms a weak encryption fallback, with referenced advisory MS00-032. No exploitation details are provided in the initial ...

CVE-1999-0487

The vulnerability CVE-1999-0487 affects the DHTML Edit ActiveX control (dhtmled.ocx) used by Internet Explorer. The control can read arbitrary local files, enabling an attacker to exfiltrate data through the browser. Concrete details confirm affected software and root cause: Internet Explorer wit...

CVE-1999-0487

The DHTML Edit ActiveX control in Internet Explorer allows remote attackers to read arbitrary files...