194 matches found
Symantec Web Gateway管理接口"username" SQL注入漏洞
CVE ID：CVE-2011-0549 Symantec Web Gateway是一款Web安全网关硬件设备。 通过"username"参数传递给管理接口中的forget.php的输入在用于SQL查询之前缺少过滤，攻击者可以通过SQL注入攻击获得敏感信息或操作数据库。 Symantec Web Gateway 4.x 厂商解决方案 用户可参考如下供应商提供的安全公告获得补丁信息：...
ZDI-11-233: Symantec Web Gateway forget.php SQL Injection Vulnerability
ZDI-11-233: Symantec Web Gateway forget.php SQL Injection Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-11-233 July 7, 2011 -- CVE ID: CVE-2011-0549 -- CVSS: 7.5, AV:N/AC:L/Au:N/C:P/I:P/A:P -- Affected Vendors: Symantec -- Affected Products: Symantec Web Gateway -- TippingPointTM...
CVE-2011-0549
Concretely, CVE-2011-0549 affects Symantec Web Gateway 4.5.x, where the forget.php management interface passes the username parameter unfiltered, enabling remote SQL injection. The vulnerability allows an unauthenticated attacker to manipulate the backend database; CVSSv2 is 7.5 (HIGH). Vendor ad...
Symantec Web Gateway Blind SQL Injection
SUMMARY Symantecs Web Gateway management GUI is susceptible to blind SQL injection which could result in the injection of arbitrary code into the backend database. AFFECTED PRODUCTS Product | Version | Solution ---|---|--- Symantec Web Gateway | 4.5.x | Upgrade to Symantec Web Gateway 5.0.1 ISSUE...
Critical: Red Hat Security Advisory: java-1.6.0-ibm security update
Updated java-1.6.0-ibm packages that fix one security issue are now available for Red Hat Enterprise Linux 4 Extras and 5 Supplementary. The Red Hat Security Response Team has rated this update as having critical security impact. A Common Vulnerability Scoring System CVSS base score, which gives ...
CVE-2010-0549
The CVE-2010-0549 entry affects Xerox WorkCentre 6400 Series (System Software 060.070.109.11407–060.070.109.29510) and Net Controller (060.079.11410–060.079.29310). A vulnerability in the Network Controller allows remote attackers to access the device’s directory structure by sending a crafted Po...
Microsoft Excel畸形对象解析多个缓冲区溢出漏洞(MS09-021)
BUGTRAQ ID: 35215,35241,35242,35243,35244,35245,35246 CVECAN ID: CVE-2009-0549,CVE-2009-0557,CVE-2009-0558,CVE-2009-0559,CVE-2009-0560,CVE-2009-0561,CVE-2009-1134 Excel是微软Office套件中的电子表格工具。...
Microsoft Office Excel Remote Code Execution Vulnerabilities (969462)
This host is missing a critical security update according to Microsoft Bulletin MS09-021. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
CVE-2009-0549
Excel in Microsoft Office 2000 SP3, Office XP SP3, Office 2003 SP3, and Office 2004 and 2008 for Mac; Open XML File Format Converter for Mac; and Microsoft Office Excel Viewer 2003 SP3 allow remote attackers to execute arbitrary code via a crafted Excel file with a malformed record object, aka...
CVE-2009-0549
CVE-2009-0549 (Record Pointer Corruption Vulnerability) affects Microsoft Office Excel and related components (Excel Viewer, Office for Mac, Open XML Converter) across multiple versions, enabling remote code execution when a user opens a specially crafted Excel file. The issue is caused by malfor...
MS09-021: Vulnerabilities in Microsoft Office Excel Could Allow Remote Code Execution (969462)
The remote host contains a version of Microsoft Excel / Excel Viewer / 2007 Microsoft Office system or the Microsoft Office Compatibility Pack that is affected by several buffer overflow and memory corruption vulnerabilities. If an attacker can trick a user on the affected host into opening a...
Microsoft Excel BRAI Record Pointer Corruption (MS09-021; CVE-2009-0549)
Microsoft Excel is a popular spreadsheet application. A remote code execution vulnerability has been identified in the Microsoft Excel. The vulnerability is due to a memory corruption error in Microsoft Excel when loading specially crafted Excel files that include a malformed record object. The...
CentOS Update for firefox CESA-2008:0549 centos4 x86_64
Check for the Version of firefox OpenVAS Vulnerability Test CentOS Update for firefox CESA-2008:0549 centos4 x8664 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...
CVE-2008-0549
The CVE-2008-0549 issue affects Steamcast 0.9.75 and earlier, due to an integer overflow in the OggHeaderParse function. This vulnerability can allow remote authenticated users to cause a denial of service via a long Ogg tag, resulting in a daemon crash. No further details on remediation are prov...
CVE-2007-0549
The CVE-2007-0549 entry describes a Cross-site Scripting (XSS) flaw in list3.php of 212cafeBoard 6.30 Beta, exploitable by supplying crafted content via the user parameter. This is the only concrete detail provided in the connected documents: the affected software is 212cafeBoard (version: 6.30 B...
CVE-2006-0549
Technical details about CVE-2005-0549 are not publicly available in the provided connected documents. Monitor for updates from Oracle advisories and vulnerability databases before drawing conclusions about impact or remediation.
CVE-2006-0549
SQL injection vulnerability in the SYS.DBMSMETADATAUTIL package in Oracle Database 10g, and possibly earlier versions, might allow remote attackers to execute arbitrary SQL commands via unknown vectors. NOTE: due to the lack of relevant details from the Oracle advisory, a separate CVE is being...
Sun Solaris AnswerBook2 - Multiple Cross-Site Scripting Vulnerabilities
Sun Solaris AnswerBook2 is reported prone to multiple cross-site scripting vulnerabilities because the software fails to properly sanitize user-supplied data. Exploits will allow arbitrary HTML and script code to run in a victim's browser, allowing the attacker to steal cookie-based credentials a...
Sun Solaris AnswerBook2 - Multiple Cross-Site Scripting Vulnerabilities
Sun Solaris AnswerBook2 - Multiple Cross-Site Scripting Vulnerabilities Sun Solaris AnswerBook2 is reported prone to multiple cross-site scripting vulnerabilities because the software fails to properly sanitize user-supplied data. Exploits will allow arbitrary HTML and script code to run in a...