Lucene search
+L

90 matches found

CVE
CVE
added 2010/03/25 8:31 p.m.85 views

CVE-2010-0579

Cisco IOS Software SIP weaknesses (CVE-2010-0579) allow unauthenticated, remote attackers to trigger a device reload via malformed SIP messages; the issue affects Cisco IOS 12.3 and 12.4 with SIP enabled and is addressed by Cisco advisories (e.g., Cisco-SA-20100324-SIP) with official fixes. In th...

7.8CVSS6.6AI score0.02542EPSS
SaveExploits1References4Affected Software1
OSV
OSV
added 2009/04/16 3:12 p.m.11 views

CVE-2009-0579

Linux-PAM before 1.0.4 does not enforce the minimum password age MINDAYS as specified in /etc/shadow, which allows local users to bypass intended security policy and change their passwords sooner than specified...

6.7AI score
SaveExploits0References8
CVE
CVE
added 2009/04/16 3:0 p.m.68 views

CVE-2009-0579

CVE-2009-0579 affects Linux-PAM before 1.0.4. The vulnerability is that PAM does not enforce the minimum password age (MINDAYS) as specified in /etc/shadow, allowing local users to bypass the intended security policy and change their passwords sooner than allowed. Connected documents corroborate ...

4.6CVSS6.5AI score0.00351EPSS
SaveExploits0References7Affected Software1
Debian CVE
Debian CVE
added 2009/04/16 3:0 p.m.40 views

CVE-2009-0579

Linux-PAM before 1.0.4 does not enforce the minimum password age MINDAYS as specified in /etc/shadow, which allows local users to bypass intended security policy and change their passwords sooner than specified...

4.6CVSS6.2AI score0.00351EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2009/04/15 12:0 a.m.36 views

Fedora 9 : pam-1.0.4-4.fc9 (2009-3231)

Update to new minor upstream release. Minor security issue fixes and bug fixes. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without...

6.6CVSS5.3AI score0.01929EPSS
SaveExploits1References5
OpenVAS
OpenVAS
added 2008/09/24 12:0 a.m.31 views

Gentoo Security Advisory GLSA 200603-03 (MPlayer)

The remote host is missing updates announced in advisory GLSA 200603-03. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

7.5CVSS0.7AI score0.05209EPSS
SaveExploits0
OpenVAS
OpenVAS
added 2008/09/24 12:0 a.m.22 views

Gentoo Security Advisory GLSA 200603-03 (MPlayer)

The remote host is missing updates announced in advisory GLSA 200603-03. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.5AI score
SaveExploits0References4
OpenVAS
OpenVAS
added 2008/09/04 12:0 a.m.24 views

FreeBSD Ports: mplayer, mplayer-gtk, mplayer-esound, mplayer-gtk-esound

The remote host is missing an update to the system as announced in the referenced advisory. VID 104beb63-af4d-11da-8414-0013d4a4a40e OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

7.5CVSS0.3AI score0.03946EPSS
SaveExploits0
CVE
CVE
added 2008/02/05 2:0 a.m.51 views

CVE-2008-0579

CVE-2008-0579 : A SQL injection vulnerability is present in Joomla!’s buslicense component (com_buslicense) in index.php, exploitable via the aid parameter in a list action, potentially enabling remote arbitrary SQL execution. Exploits are documented (e.g., Exploit-DB 5011). No remediation detail...

7.5CVSS8.4AI score0.0114EPSS
SaveExploits1References3Affected Software1
CVE
CVE
added 2007/01/30 5:0 p.m.51 views

CVE-2007-0579

CVE-2007-0579 affects Horde Groupware Webmail Edition before 1.0 and Groupware before 1.0. Unspecified vulnerability in the calendar component allows remote attackers to include certain files via unspecified vectors. No further technical details or remediation are provided in the accessible docum...

5.1CVSS6.7AI score0.01372EPSS
SaveExploits0References6Affected Software1
CVE
CVE
added 2006/02/08 1:0 a.m.59 views

CVE-2006-0579

CVE-2006-0579 affects MPlayer up to the 1.0pre7ty2 line, due to two integer/heap overflows in ASF demuxing code: new_demux_packet in libmpdemux/demuxer.h and demux_asf_read_packet in libmpdemux/demux_asf.c. The flaws enable remote attackers to execute arbitrary code by feeding a crafted ASF file ...

7.5CVSS7.1AI score0.03946EPSS
SaveExploits0References6Affected Software1
CVE
CVE
added 2005/02/27 5:0 a.m.37 views

CVE-2005-0579

Affected software: nxagent in FreeNX before 0.2.8. Issue: missing handling of an unset XAUTHORITY environment variable. Impact: local users can access the X server without X authentication. Notes: the records do not specify a patch version or remediation steps. If true fixes or mitigations exist,...

4.6CVSS6.7AI score0.00404EPSS
SaveExploits1References2Affected Software1
Cvelist
Cvelist
added 2005/02/27 5:0 a.m.20 views

CVE-2005-0579

nxagent in FreeNX before 0.2.8 does not properly handle when the XAUTHORITY environment variable is not set, which allows local users to access the X server without X authentication...

6.2AI score0.00404EPSS
SaveExploits1References2
NVD
NVD
added 2005/02/25 5:0 a.m.15 views

CVE-2005-0579

nxagent in FreeNX before 0.2.8 does not properly handle when the XAUTHORITY environment variable is not set, which allows local users to access the X server without X authentication...

4.6CVSS6.2AI score0.00404EPSS
SaveExploits1References2
OSV
OSV
added 2004/08/06 4:0 a.m.8 views

CVE-2004-0579

Format string vulnerability in super before 3.23 allows local users to execute arbitrary code as root...

7AI score
SaveExploits0References3
CVE
CVE
added 2004/06/23 4:0 a.m.68 views

CVE-2004-0579

The CVE-2004-0579 entry concerns the Debian-related format-string vulnerability in the program named “super.” Public documentation in the connected sources confirms that this flaw exists in versions prior to 3.23 and allows a local user to execute arbitrary code with root privileges due to a faul...

7.2CVSS7AI score0.00429EPSS
SaveExploits0References2Affected Software1
Debian CVE
Debian CVE
added 2004/06/23 4:0 a.m.56 views

CVE-2004-0579

Format string vulnerability in super before 3.23 allows local users to execute arbitrary code as root...

7.2CVSS6.1AI score0.00429EPSS
SaveExploits0
CVE
CVE
added 2003/07/17 4:0 a.m.46 views

CVE-2003-0579

CVE-2003-0579 affects IBM U2 UniVerse before or at version 10.0.0.9, where uvadmsh trusts a user-supplied -uv.install command line option to locate and run uv.install. The flaw lets a local attacker cause execution of uv.install by supplying a pathname under the attacker’s control, enabling privi...

4.6CVSS7.1AI score0.00879EPSS
SaveExploits2References2Affected Software1
Cvelist
Cvelist
added 2003/07/17 4:0 a.m.22 views

CVE-2003-0579

uvadmsh in IBM U2 UniVerse 10.0.0.9 and earlier trusts the user-supplied -uv.install command line option to find and execute the uv.install program, which allows local users to gain privileges by providing a pathname that is under control of the user...

6.7AI score0.00879EPSS
SaveExploits2References2
NVD
NVD
added 2002/06/18 4:0 a.m.12 views

CVE-2002-0579

WorkforceROI Xpede 4.1 allows remote attackers to gain privileges as an Xpede administrator via a direct HTTP request to the /admin/adminproc.asp script, which does not prompt for a password...

7.5CVSS6.9AI score0.01571EPSS
SaveExploits0References3
Rows per page
Query Builder