CVE-2009-0535

CVE-2009-0535 describes a directory traversal in export.php of Thyme 1.3 and earlier, where, when register_globals is disabled, an attacker can read arbitrary files by supplying a .. in the export_to parameter. The NVD entry scores this as 7.5/10 (HIGH) with network access, low attack complexity,...

CVE-2009-0535

creationtimestamp| type| source ---|---|--- 2009-02-10 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/8029...

Gentoo Security Advisory GLSA 200407-02 (Kernel)

The remote host is missing updates announced in advisory GLSA 200407-02. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Gentoo Security Advisory GLSA 200502-33 (mediawiki)

The remote host is missing updates announced in advisory GLSA 200502-33. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Cisco服务控制引擎SSH服务器多个拒绝服务漏洞

BUGTRAQ ID: 29316 CVECAN ID: CVE-2008-0534,CVE-2008-0535,CVE-2008-0536 Cisco服务控制引擎（SCE）设备提供高性能的高级应用层带宽优化、状态应用检查、基于会话的分类和网络通讯控制等功能。 SSH登录行为漏洞 在SSH登录行为期间可能触发影响SCE SSH服务器的漏洞，导致系统不稳定或SCE重载。如果在积极间隔期间调用了特定的SSH进程的话，就会导致临时的资源不可用。 这个漏洞在Cisco Bug ID中记录为CSCsi68582，所分配的CVE ID为CVE-2008-0534。 SSH登录行为导致非法输入/输出操...

CVE-2008-0535

CVE-2008-0535 affects Cisco Service Control Engine (SCE) SSH server (and Icon Labs Iconfidant SSH) with multiple DoS through SSH login behavior and attempts to change authentication methods. Root cause: SSH credential handling during authentication can trigger instability, potentially causing dev...

CVE-2007-0535

CVE-2007-0535 (and related CVE-2007-0504) affect Vote! Pro 4.0 and possibly earlier, via eval injection in poll_frame.php where the poll_id parameter is passed to eval. This allows remote attackers to execute arbitrary code due to unsanitized input in PHP scripts; vectors are not fully detailed b...

CVE-2006-0535

Technical details for CVE-2006-0535 are not publicly available in the provided documents. No affected product/version or fix is specified here. Monitor for updates.

CVE-2005-0535

MediaWiki is affected by a CSRF vulnerability (CVE-2005-0535) in 1.3.x prior to 1.3.11 and 1.4 beta prior to 1.4 RC1, allowing remote attackers to perform actions as authenticated users. The issue is documented across multiple sources (NVD entry, Gentoo GLSA-200502-33, and related advisories), wi...

CVE-2005-0535

Cross-site request forgery CSRF vulnerability in MediaWiki 1.3.x before 1.3.11 and 1.4 beta before 1.4 rc1 allows remote attackers to perform unauthorized actions as authenticated MediaWiki users...

CVE-2005-0535

Cross-site request forgery CSRF vulnerability in MediaWiki 1.3.x before 1.3.11 and 1.4 beta before 1.4 rc1 allows remote attackers to perform unauthorized actions as authenticated MediaWiki users...

CVE-2005-0535

Cross-site request forgery CSRF vulnerability in MediaWiki 1.3.x before 1.3.11 and 1.4 beta before 1.4 rc1 allows remote attackers to perform unauthorized actions as authenticated MediaWiki users...

CVE-2004-0535

CVE-2004-0535 relates to the Linux kernel's e1000 NIC driver (2.4.x and earlier) where memory used by the driver was not properly initialized before access. This could permit a local attacker to read portions of kernel memory. The issue is documented and linked to several vendor advisories (e.g.,...

CVE-2004-0535

The e1000 driver for Linux kernel 2.4.26 and earlier does not properly initialize memory before using it, which allows local users to read portions of kernel memory. NOTE: this issue was originally incorrectly reported as a "buffer overflow" by some sources...

CVE-2003-0535

CVE-2003-0535 is a local privilege-escalation vulnerability in the xbl package (version 1.0k and earlier) caused by a buffer overflow triggered by a long -display command line option. Reports (notably Debian DSA-345) describe local attackers gaining gid 'games' privileges. Debian fixed the issue ...

CVE-2002-0535

CVE-2002-0535 covers cross-site scripting in PostBoard 2.0.1 and earlier. The vulnerability enables remote attackers to execute script in the context of other users via (1) an IMG tag when BBCode is enabled, or (2) in a topic title. Documents confirm affected software/version and the underlying a...

CVE-2001-0535

The CVE-2001-0535 issue affects ColdFusion Server 4.x Exampleapps, where access checks do not correctly limit requests from outside the local host domain. This enables remote attackers to spoof the HTTP Host (CGI.Host) to the Web Publish and Email example scripts, allowing upload, read, or execut...

CVE-2001-0535

Example applications Exampleapps in ColdFusion Server 4.x do not properly restrict prevent access from outside the local host's domain, which allows remote attackers to conduct upload, read, or execute files by spoofing the "HTTP Host" CGI.Host variable in 1 the "Web Publish" example script, and ...

CVE-2000-0535

CVE-2000-0535 affects OpenSSL 0.9.4 and OpenSSH on FreeBSD, where FreeBSD Alpha's missing /dev/random or /dev/urandom leads to weak cryptographic keys. The issue arises from improper device checks, resulting in keys that may be easier to break. The provided documents describe the root cause and a...

CVE-2000-0535

OpenSSL 0.9.4 and OpenSSH for FreeBSD do not properly check for the existence of the /dev/random or /dev/urandom devices, which are absent on FreeBSD Alpha systems, which causes them to produce weak keys which may be more easily broken...