106 matches found
Mandriva Update for java-1.6.0-openjdk MDVSA-2012:021 (java-1.6.0-openjdk)
The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...
Oracle Java SE JDK Multiple Vulnerabilities - 03 - (Feb 2012) - Windows
Oracle Java SE JDK is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
RHEL 5 / 6 : java-1.6.0-sun (RHSA-2012:0139)
The remote Redhat Enterprise Linux 5 / 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2012:0139 advisory. - OpenJDK: JavaSound incorrect bounds check Sound, 7088367 CVE-2011-3563 - OpenJDK: AtomicReferenceArray insufficient array type check...
CVE-2012-0498
CVE-2012-0498 is a vulnerability in the Java Runtime Environment (JRE) bundled with IBM Cognos BI. The IBM bulletin states an unspecified vulnerability could allow attackers to affect confidentiality, integrity, and availability by rendering crafted images, with IBM noting a patched JRE version a...
CVE-2011-0498
Nokia Multimedia Player 1.00.55.5010 (and possibly other versions) is affected by a stack-based buffer overflow in the playlist processing of .npl files. The vulnerability allows user-assisted remote attackers to crash the application and potentially execute arbitrary code. Root cause is a buffer...
CVE-2010-0498
Directory Services in Apple Mac OS X before 10.6.3 does not properly perform authorization during processing of record names, which allows local users to gain privileges via unspecified vectors...
CVE-2010-0498
CVE-2010-0498 affects Directory Services in Apple Mac OS X before 10.6.3. A faulty authorization check during processing of record names may allow a local user to gain privileges. The entry is addressed by Apple’s Mac OS X 10.6.3 Security Update (Security Update 2010-002). No exploit details are ...
CentOS Update for cups CESA-2008:0498 centos4 x86_64
Check for the Version of cups OpenVAS Vulnerability Test CentOS Update for cups CESA-2008:0498 centos4 x8664 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under...
CVE-2009-0498
CVE-2009-0498 affects Virtual GuestBook (vgbook) 2.1. The data store is placed under the web root with insufficient access control, permitting remote attackers to directly download the database file (guestbook.mdb). This is a file-read access issue driven by improper access restrictions on web-ac...
CVE-2009-0498
creationtimestamp| type| source ---|---|--- 2009-01-13 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/7744...
CVE-2008-0498
CVE-2008-0498 affects the Bigware Shop 2.0 platform. The vulnerability resides in the file main_bigware_53.tpl.php, where the pollid parameter in a poll results action to main_bigware_53.php is vulnerable to SQL injection. The issue allows remote attackers to potentially execute arbitrary SQL com...
Remote file inclusion
PHP remote file inclusion vulnerability in chat.php in MySpeach 1.9 allows remote attackers to execute arbitrary PHP code via a URL in the myroot parameter, a different vector than CVE-2007-0498...
CVE-2007-0498
MySpeach 2.1 beta (and possibly earlier) is affected by CVE-2007-0498 via up.php, allowing remote PHP code execution through a URL parameter my[root]. This is a PHP remote file inclusion vulnerability with a base score of 7.5 (HIGH) and network attack vector, per NVD, and the documents do not pro...
CVE-2006-0498
CVE-2006-0498 describes multiple cross-site scripting (XSS) vulnerabilities in PHP GEN prior to 1.4, allowing remote attackers to inject arbitrary web script or HTML via unknown attack vectors. The connected documents corroborate the flaw across several sources (NVD entry and multiple mirrors), s...
TFTP Directory Traversal Vulnerabilities - Active Check
The TFTP Trivial File Transfer Protocol allows remote users to read files without having to log in. This may be a big security flaw, especially if tftpd the TFTP server is not well configured by the admin of the remote host. SPDX-FileCopyrightText: 2005 Michel Arboi Some text descriptions might b...
CVE-2005-0498
The CVE-2005-0498 issue affects the Gigafast router (CompUSA router). A remote attacker can bypass the login by making a direct request to backup.cfg, which exposes the administrator password in plaintext. This results in partial confidentiality and partial integrity/availability impact per CVSS ...
CVE-2003-0498
CVE-2003-0498 affects InterSystems Caché Database 5.x. The vulnerability arises because /cachesys/csp is installed with insecure permissions, allowing local attackers to add server-side scripts or modify files that run with root privileges, enabling arbitrary code execution. The issue is document...
CVE-2002-0498
Etnus TotalView 5.0.0-4 installs certain files with UID 5039 and GID 59, which could allow local users with that UID or GID to modify the files and gain privileges as other TotalView users...
CVE-2002-0498
CVE-2002-0498 affects Etnus TotalView 5.0.0-4, where certain files are installed with UID 5039 and GID 59. This ownership mishandling could allow local users with that UID/GID to modify those files and gain privileges as other TotalView users. No exploit details are provided in the supplied docum...
CVE-2001-0498
Transparent Network Substrate TNS over Net8 SQLNet in Oracle 8i 8.1.7 and earlier allows remote attackers to cause a denial of service via a malformed SQLNet connection request with a large offset in the header extension...