CVE-2008-0628

The XML parsing code in Sun Java Runtime Environment JDK and JRE 6 Update 3 and earlier processes external entity references even when the "external general entities" property is false, which allows remote attackers to conduct XML external entity XXE attacks and cause a denial of service or acces...

CVE-2008-0628

CVE-2008-0628 affects Sun Java Runtime Environment (JRE/JDK) 6 Update 3 and earlier. The XML parsing code processes external entity references even when the “external general entities” property is false, enabling an XXE attack that can cause denial of service or allow access to restricted resourc...

CVE-2007-0628

CVE-2007-0628 concerns multiple XSS vulnerabilities in Sun Java System Access Manager versions 6.1, 6.2, 6 2005Q1 (6.3), and 7 2005Q4 (7.0) prior to 20070129. The flaws allow remote attackers to inject arbitrary web script or HTML through the goto or gx-charset parameters. The NVD entry lists a C...

CVE-2006-0628

CVE-2006-0628 affects Dale Ray MyQuiz 1.01 (myquiz.pl). The vulnerability allows remote attackers to execute arbitrary shell commands via metacharacters in the URL, which are not properly handled in PATH_INFO. CVSS: 7.5 (HIGH) with network attack vector and no user interaction required; impact to...

CVE-2005-0628

CVE-2005-0628 describes multiple cross-site scripting (XSS) vulnerabilities in Forumwa 1.0. The flaws permit remote attackers to inject arbitrary web script or HTML via (1) the keyword parameter in search.php or (2) the body or (3) the subject of a forum message. The vulnerability is associated w...

CVE-2004-0628

Stack-based buffer overflow in MySQL 4.1.x before 4.1.3, and 5.0, allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a long scramble string...

CVE-2004-0628

CVE-2004-0628 is a stack-based buffer overflow in MySQL 4.1.x before 4.1.3 and in MySQL 5.0, exploitable by sending a long scramble string to the authentication workflow. This can allow a remote attacker to cause a denial of service (crash) and, potentially, execute arbitrary code. Root cause: im...

CVE-2004-0628

Stack-based buffer overflow in MySQL 4.1.x before 4.1.3, and 5.0, allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a long scramble string...

CVE-2003-0628

PeopleSoft Gateway Administration servlet gateway.administration in PeopleTools 8.43 and earlier allows remote attackers to obtain the full pathnames for server-side include SSI files via an HTTP request with an invalid value...

CVE-2002-0628

The issue affects Polycom ViewStation Telnet service prior to version 7.2.4. The Telnet implementation does not restrict failed login attempts, enabling brute‑force guesses of usernames and passwords. Impact is described as remote authentication bypass via brute force. A fix is available: upgrade...

CVE-2002-0628

The Telnet service for Polycom ViewStation before 7.2.4 does not restrict the number of failed login attempts, which makes it easier for remote attackers to guess usernames and passwords via a brute force attack...

CVE-2001-0628

Microsoft Word 2000 does not check AutoRecovery .asd files for macros, which allows a local attacker to execute arbitrary macros with the user ID of the Word user...

CVE-2001-0628

Summary : CVE-2001-0628 affects Microsoft Word 2000. The issue: Word 2000 does not check AutoRecovery (.asd) files for macros, allowing a local attacker to execute arbitrary macros with the Word user’s ID. What’s affected : Word 2000; vulnerability details describe macro execution via unverified ...

CVE-2000-0628

The CVE-2000-0628 entry concerns the Apache::ASP 1.93 and earlier, where the source.asp example script in the Apache ASP module allows remote attackers to modify files. The vulnerability pertains to the source.asp file (/site/eg/source.asp in exposed deployments) which comes with the Apache::ASP ...

CVE-2000-0628

The source.asp example script in the Apache ASP module Apache::ASP 1.93 and earlier allows remote attackers to modify files...

CVE-2000-0628

The source.asp example script in the Apache ASP module Apache::ASP 1.93 and earlier allows remote attackers to modify files...

CVE-1999-0628

The rwho/rwhod service is running, which exposes machine status and user information...

CVE-1999-0628

The CVE-1999-0628 issue involves the rwho/rwhod service, which exposes machine status and user information. Documents reference the vulnerable component as the rwho/rwhod service; no specific product/vendor/version is named. The impact description indicates partial confidentiality exposure, with ...