220 matches found
CVE-2007-3090
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2008-0591. Reason: This candidate is a duplicate of CVE-2008-0591. Notes: All CVE users should reference CVE-2008-0591 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...
Design/Logic Flaw
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2008-0591. Reason: This candidate is a duplicate of CVE-2008-0591. Notes: All CVE users should reference CVE-2008-0591 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...
CVE-2007-3090
CVE-2007-3090 is rejected/not used and does not represent an active vulnerability entry.
CVE-2007-0591
CVE-2007-0591 describes a PHP remote file inclusion in Vu Le An Virtual Path (VirtualPath) 1.0. The vulnerability occurs in configure.php via the phpbb_root_path parameter, enabling remote PHP code execution. Documents do not specify affected versions beyond 1.0, impact details beyond the describ...
CentOS 3 / 4 : postgresql (CESA-2006:0526)
Updated postgresql packages that fix several security vulnerabilities are now available for Red Hat Enterprise Linux 3 and 4. This update has been rated as having important security impact by the Red Hat Security Response Team. PostgreSQL is an advanced Object-Relational database management syste...
RHEL 3 / 4 : postgresql (RHSA-2006:0526)
Updated postgresql packages that fix several security vulnerabilities are now available for Red Hat Enterprise Linux 3 and 4. This update has been rated as having important security impact by the Red Hat Security Response Team. PostgreSQL is an advanced Object-Relational database management syste...
Important: Red Hat Security Advisory: postgresql security update
Updated postgresql packages that fix several security vulnerabilities are now available for Red Hat Enterprise Linux 3 and 4. This update has been rated as having important security impact by the Red Hat Security Response Team. PostgreSQL is an advanced Object-Relational database management syste...
CVE-2006-0591
CVE-2006-0591 is substantiated in connected advisories for PostgreSQL: it describes an integer signedness bug in password salt generation, causing the salt length to be only half the intended size and slightly easing brute-force on hashed passwords. Remediation is to upgrade to PostgreSQL 7.4.13 ...
CVE-2005-0591
Firefox before 1.0.1 allows remote attackers to spoof the 1 security and 2 download modal dialog boxes, which could be used to trick users into executing script or downloading and executing a file, aka "Firespoofing."...
CVE-2005-0591
CVE-2005-0591 affects Firefox prior to 1.0.1, allowing remote spoofing of the security and download modal dialogs (Firespoofing). Red Hat advisory RHSA-2005:176 and CentOS notes indicate that Firefox was updated and recommend upgrading to Mozilla 1.7.7 to remediate the issue.
CVE-2005-0591
Firefox before 1.0.1 allows remote attackers to spoof the 1 security and 2 download modal dialog boxes, which could be used to trick users into executing script or downloading and executing a file, aka "Firespoofing."...
CVE-2004-0591
Cross-site scripting XSS vulnerability in the printheaderuc function for SqWebMail 4.0.4 and earlier, and possibly 3.x, allows remote attackers to inject arbitrary web script or HRML via 1 e-mail headers or 2 a message with a "message/delivery-status" MIME Content-Type...
CVE-2004-0591
Cross-site scripting XSS vulnerability in the printheaderuc function for SqWebMail 4.0.4 and earlier, and possibly 3.x, allows remote attackers to inject arbitrary web script or HRML via 1 e-mail headers or 2 a message with a "message/delivery-status" MIME Content-Type...
CVE-2004-0591
Cross-site scripting XSS vulnerability in the printheaderuc function for SqWebMail 4.0.4 and earlier, and possibly 3.x, allows remote attackers to inject arbitrary web script or HRML via 1 e-mail headers or 2 a message with a "message/delivery-status" MIME Content-Type...
CVE-2004-0591
CVE-2004-0591 describes a cross-site scripting (XSS) vulnerability in SqWebMail’s print_header_uc function affecting SqWebMail 4.0.4 and earlier (possibly 3.x). An attacker can inject arbitrary script via (1) email headers or (2) a message with a “message/delivery-status” MIME type, executing in ...
CVE-2003-0591
CVE-2003-0591 is rejected/not used and does not represent an active vulnerability entry.
CVE-2001-0591
Directory traversal vulnerability in Oracle JSP 1.0.x through 1.1.1 and Oracle 8.1.7 iAS Release 1.0.2 can allow a remote attacker to read or execute arbitrary .jsp files via a '..' dot dot attack...
CVE-2000-0591
CVE-2000-0591 affects Novell BorderManager 3.0 and 3.5. The vulnerability enables remote attackers to bypass URL filtering by encoding characters in the requested URL, allowing policy evasion. The provided documents do not specify the root cause details, affected subcomponents, exploit availabili...