101 matches found
CVE-2012-0551
Unspecified vulnerability in the Java Runtime Environment JRE in Oracle Java SE 7 update 4 and earlier and 6 update 32 and earlier, and the GlassFish Enterprise Server component in Oracle Sun Products Suite GlassFish Enterprise Server 3.1.1, allows remote attackers to affect confidentiality and...
CVE-2012-0551
Technical details for CVE-2012-0551 are not publicly available in the provided documents; no affected products, root cause, impact, or fixes are described here. Monitor for updates.
Symantec Endpoint Protection Manager Cross-Site Request Forgery and Cross-Site Scripting
SUMMARY Symantec Endpoint Protection Manager 12.1 web console is susceptible to cross-site scripting and cross-site request forgery that could potentially lead to arbitrary code execution. AFFECTED PRODUCTS Product | Version | Build | Solutions ---|---|---|--- Symantec Endpoint Protection | 12.1 ...
CVE-2011-0551
Symantec Endpoint Protection Manager Web Console is affected by CSRF (CVE-2011-0551) in SEP 11.0 RU6 up to 11.0.6300, enabling an unauthenticated/remote actor to hijack an administrator’s session to create new admin accounts. OpenVAS entries and Symantec advisories also note XSS/CSRF issues in SE...
CVE-2010-0551
CVE-2010-0551 affects Geo++ GNCASTER 1.4.0.7 and earlier. The HTTP authentication implementation allows remote attackers to read authentication headers from other users by sending a large request with an incorrect authentication attempt, resulting in memory disclosure (often called a memory leak)...
CVE-2010-0551
HTTP authentication implementation in Geo++ GNCASTER 1.4.0.7 and earlier allows remote attackers to read authentication headers of other users via a large request with an incorrect authentication attempt, which includes sensitive memory in the response. NOTE: this is referred to as a "memory leak...
CVE-2009-0551
CVE-2009-0551 describes a Page Transition Memory Corruption vulnerability in Internet Explorer affecting IE6/7 on Windows XP, Windows Server 2003, and IE7 on Windows 7-era builds, where improper handling of transition errors between consecutive HTTP documents could allow remote code execution via...
CVE-2008-0551
CVE-2008-0551 documents a vulnerability in the NamoInstaller.NamoInstall.1 ActiveX control (NamoInstaller.dll, version 3.0.0.1 and earlier) used with Sejoong Namo ActiveSquare 6. The flaw allows remote attackers to trigger arbitrary code execution by passing a URL argument to the Install method. ...
Debian Security Advisory DSA 423-1 (kernel-image-2.4.17-ia64)
The remote host is missing an update to kernel-image-2.4.17-ia64 announced via advisory DSA 423-1. OpenVAS Vulnerability Test $Id: deb4231.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 423-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...
Debian Security Advisory DSA 423-1 (kernel-image-2.4.17-ia64)
The remote host is missing an update to kernel-image-2.4.17-ia64 announced via advisory DSA 423-1. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-on...
CVE-2007-0551
CMSimple 2.7 is affected by CVE-2007-0551 via multiple PHP remote file inclusion vulnerabilities in cms.php, allowing an attacker to execute arbitrary PHP code through the pth[file][config] or pth[file][image] parameters. The issue stems from including user-supplied URLs, enabling code execution ...
CVE-2006-0551
Technical details for CVE-2006-0551 are not publicly provided in the supplied documents. Monitoring for updates is advised, as the corpus does not specify affected versions, vectors, or remediation information.
CVE-2005-0551
CVE-2005-0551 corresponds to a local privilege-elevation vulnerability in CSRSS (Client Server Runtime Subsystem) via WINSRV.DLL handling a console window FaceName string. A stack-based buffer overflow in CONSOLE_STATE_INFO (FaceName[32]) can be triggered by a crafted console window, enabling a l...
RHEL 2.1 : kernel (RHSA-2003:239)
Updated kernel packages that address various security vulnerabilities are now available for Red Hat Enterprise Linux. The Linux kernel handles the basic functions of the operating system. Security issues have been found that affect the versions of the Linux kernel shipped with Red Hat Enterprise...
CVE-2003-0551
The CVE-2003-0551 entry concerns the STP protocol in Linux 2.4.x. According to the sources, STP input processing did not properly verify certain lengths, which could allow attackers to cause a denial of service. Public documents reference Red Hat RHSA-2003:239 and Debian DSA advisories (DSA-423-1...
CVE-2002-0551
Cross-site scripting vulnerability in Dynamic Guestbook 3.0 allows remote attackers to execute code in clients who access guestbook pages via the parameters 1 name, 2 mail, or 3 kommentar...
CVE-2002-0551
CVE-2002-0551 describes a cross-site scripting vulnerability in Dynamic Guestbook 3.0. The issue allows remote attackers to cause client-side execution of code when users access guestbook pages with the parameters name, mail, or kommentar. The CVSS v2 base score is 7.5 (HIGH), with network attack...
CVE-2000-0551
The CVE-2000-0551 entry concerns Danware NetOp 6.0, whose file transfer mechanism reportedly does not require authentication. This allows remote attackers to access and modify arbitrary files, per the description. The connected documents confirm the affected product and the underlying issue (unau...
CVE-2001-0551
CVE-2001-0551 corresponds to a buffer overflow in the CDE Print Viewer (dtprintinfo) that enables a local attacker to execute arbitrary code, potentially as root, by overflowing the Help window search field via the clipboard. Connected advisories confirm impact on multiple platforms (Solaris 2.4–...