77 matches found
Moderate: Red Hat Security Advisory: qspice-client security update
An updated qspice-client package that fixes one security issue is now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity ratin...
CVE-2010-0632
CVE-2010-0632 describes an SQL injection in the Parkview Consultants SimpleFAQ (com_simplefaq) Joomla! extension, allowing remote attackers to execute arbitrary SQL commands via the catid parameter in a display action to index.php. Affected software: Joomla! component SimpleFAQ (com_simplefaq). R...
CVE-2010-0632
SQL injection vulnerability in the Parkview Consultants SimpleFAQ comsimplefaq component for Joomla! allows remote attackers to execute arbitrary SQL commands via the catid parameter in a display action to index.php...
CVE-2010-0632
creationtimestamp| type| source ---|---|--- 2010-01-30 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/11294...
CVE-2008-0632
LightBlog 9.5 is affected by an unrestricted file upload vulnerability in cp_upload_image.php. The root cause is uploading a file with an executable extension and then accessing it via a direct request in the blog’s root directory, enabling remote code execution. No remediation details are provid...
CVE-2007-0632
CVE-2007-0632 describes an SQL injection in artreplydelete.asp on ASP EDGE 1.3a and earlier. The vulnerability arises through a username cookie, allowing remote attackers to execute arbitrary SQL commands. Exploitation details are not provided in the connected documents. No remediation details ar...
CVE-2006-0632
The CVE-2006-0632 entry affects phpBB 2.0.19. The gen_rand_string function uses insufficiently random data (small value space) to generate the activation key (validation ID) sent by e-mail when establishing a password, enabling remote attackers to obtain the key and modify passwords for existing ...
CVE-2005-0632
CVE-2005-0632 concerns PHPNews, an open‑source PHP-based news application. The vulnerability is a remote file include in the script auth.php , allowing an attacker to execute arbitrary PHP code via the path parameter on PHPNews versions 1.2.4 (and possibly 1.2.3). Root cause is a missing validati...
CVE-2004-0632
CVE-2004-0632: Adobe Reader/Acrobat Reader 6.x is vulnerable to a buffer overflow caused by improper handling of NULL characters when splitting a filename path into components, allowing remote code execution via a crafted file with a long extension. The issue affects Adobe Reader 6.0 (and 6.0.x v...
CVE-2003-0632
Buffer overflow in the Oracle Applications Web Report Review FNDWRR CGI program FNDWRR.exe of Oracle E-Business Suite 11.0 and 11.5.1 through 11.5.8 may allow remote attackers to execute arbitrary code via a long URL...
CVE-2003-0632
Buffer overflow in the Oracle Applications Web Report Review FNDWRR CGI program FNDWRR.exe of Oracle E-Business Suite 11.0 and 11.5.1 through 11.5.8 may allow remote attackers to execute arbitrary code via a long URL...
CVE-2002-0632
Vulnerability in SGI BDS Bulk Data Service BDSPro 2.4 and earlier allows clients to read arbitrary files on a BDS server...
CVE-2001-0632
Sun Chili!Soft 3.5.2 on Linux and 3.6 on AIX are affected by CVE-2001-0632 due to a default admin username/password created during default installation, enabling a remote attacker to gain additional privileges. The NVD entry assigns a CVSS v2 base score of 7.5 (HIGH) with network access, no authe...
CVE-2000-0632
The CVE-2000-0632 entry concerns a buffer overflow in the web archive component of L-Soft Listserv 1.8d and earlier. The vulnerability allows remote attackers to execute arbitrary commands via a long query string. Public sources (NVD/CVE records and CVE List) consistently describe this as a remot...
CVE-2000-0632
Buffer overflow in the web archive component of L-Soft Listserv 1.8d and earlier allows remote attackers to execute arbitrary commands via a long query string...
CVE-1999-0632
CVE-1999-0632 corresponds to the RPC portmapper service. The connected documents confirm the RPC portmapper is running and that the vulnerability is described as a privilege-escalation issue affecting confidentiality, integrity, and availability in various environments (e.g., F5 BIG-IP advisories...
