78 matches found
CVE-2008-0527
Cisco Unified IP Phone 7935/7936 (SCCP firmware) HTTP server DoS vulnerability (CVE-2008-0527) allows remote reboot via crafted HTTP requests. Impact: device restarts, potentially service disruption. Root cause: internal HTTP server handling at TCP port 80 leads to denial of service. Affected pro...
CVE-2007-0527
SQL injection vulnerability in the isremembered function in class.login.php in Website Baker 2.6.5 and earlier allows remote attackers to execute arbitrary SQL commands via the REMEMBERKEY cookie parameter. NOTE: some of these details are obtained from third party information...
CVE-2006-0527
BIND 4 BIND4 and BIND 8 BIND8, if used as a target forwarder, allows remote attackers to gain privileged access via a "Kashpureff-style DNS cache corruption" attack...
BELL-CVE-2006-0527 CVE-2006-0527 does not affect BellSoft software
Bulletin has no description...
CVE-2006-0527
CVE-2006-0527 affects BIND 4 and BIND 8 when used as a target forwarder; it describes a Kashpureff-style DNS cache corruption that allows remote attackers to gain privileged access. The connected sources corroborate the same vulnerability description across NVD, CVE records, and repository entrie...
CVE-2006-0527
BIND 4 BIND4 and BIND 8 BIND8, if used as a target forwarder, allows remote attackers to gain privileged access via a "Kashpureff-style DNS cache corruption" attack...
CVE-2005-0527
Firefox 1.0 allows remote attackers to execute arbitrary code via plugins that load "privileged content" into frames, as demonstrated using certain XUL events when a user drags a scrollbar two times, aka "Firescrolling."...
CVE-2005-0527
CVE-2005-0527 affects Firefox 1.0 (Mozilla/Firefox family) where plugins can load privileged content into frames, enabling remote code execution as demonstrated by Firescrolling when a user drags a scrollbar twice. Connected advisories show this as part of broader Mozilla/XPCOM plugin access issu...
CVE-2004-0527
CVE-2004-0527 affects KDE Konqueror 2.1.1 and 2.2.2. The issue allows remote attackers to spoof a legitimate URL in the status bar by using A HREF tags with modified alt values that point to the legitimate site, combined with an image map whose href points to the malicious site, enabling a phishi...
CVE-2002-0527
Watchguard SOHO firewall before 5.0.35 is affected by a vulnerability where a remotely sent packet with bad IP options can cause the device to crash and reboot. The issue arises in the IP option handling path of the firewall, leading to a denial of service. No specific exploit details, affected v...
CVE-2001-0527
Affected software: DCScripts DCForum (versions 2000 and earlier). The vulnerability arises from input handling in the registration form: an attacker can insert pipe symbols (|) and newlines into the last name, which creates an extra entry in the registration database and yields additional privile...
CVE-2001-0527
DCScripts DCForum versions 2000 and earlier allow a remote attacker to gain additional privileges by inserting pipe symbols | and newlines into the last name in the registration form, which will create an extra entry in the registration database...
CVE-2000-0527
The CVE-2000-0527 entry concerns the MailStudio 2000 (and earlier) product where the CGI program userreg.cgi is vulnerable. An attacker could remotely execute arbitrary commands by injecting shell metacharacters, enabling full compromise of affected systems. The provided sources consistently desc...
CVE-2000-0527
userreg.cgi CGI program in MailStudio 2000 2.0 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters...
CVE-2000-0527
userreg.cgi CGI program in MailStudio 2000 2.0 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters...
CVE-1999-0527
The permissions for system-critical data in an anonymous FTP account are inappropriate. For example, the root directory is writeable by world, a real password file is obtainable, or executable commands such as "ls" can be overwritten...
CVE-1999-0527
CVE-1999-0527 describes insecure permissions for data in an anonymous FTP account, allowing world-writable root directories, access to the password file, or overwriting executable commands (e.g., ls). The issue is documented across multiple sources (Red Hat CVE page and OpenVAS NASL) with the roo...
CVE-1999-0527
The permissions for system-critical data in an anonymous FTP account are inappropriate. For example, the root directory is writeable by world, a real password file is obtainable, or executable commands such as "ls" can be overwritten...