176 matches found
[security bulletin] HPSBUX02366 SSRT080120 rev.1 - HPUX Running useradd(1M), Local Unauthorized Access
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c01539431 Version: 1 HPSBUX02366 SSRT080120 rev.1 - HPUX Running useradd1M, Local Unauthorized Access NOTICE: The information in this Security Bulletin should be acted upon as soon as possible...
Gentoo Security Advisory GLSA 200507-14 (mozilla)
The remote host is missing updates announced in advisory GLSA 200507-14. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...
CVE-2008-0719
The CVE-2008-0719 entry describes an SQL injection vulnerability in the customer_testimonials.php script of the osCommerce Customer Testimonials 3 and 3.1 Addon for osCommerce Online Merchant 2.2. The flaw allows remote attackers to manipulate database queries via the testimonial_id parameter, po...
CVE-2007-0719
Apple ColorSync contains a stack-based buffer overflow that may allow a remote attacker to execute arbitrary code by convincing a user to open an image with a specially crafted ColorSync profile. Affected products are Mac OS X 10.3.9 and 10.4 through 10.4.8, where ColorSync processing is used by ...
CVE-2006-0719
The provided data confirms a SQL injection vulnerability in PHP Classifieds, affecting versions 6.18–6.20. The flaw resides in member_login.php where the (1) username parameter (used for the E-mail address field) and (2) password parameter can be leveraged by remote attackers to execute arbitrary...
CVE-2005-0719
The CVE-2005-0719 entry concerns an unknown vulnerability in the systems message queue of HP Tru64 Unix, affecting versions 4.0F PK8 through 5.1B-2/PK4. The issue enables local users to trigger a denial of service by crashing processes (e.g., nfsstat, pfstat, arp, ogated, rarpd, route, sendmail, ...
CVE-2004-0719
The CVE-2004-0719 frame-injection vulnerability affects Internet Explorer on Windows (IE6 on XP) and IE for Mac 5.2.3, arising from insufficient protection against framing content across domains, enabling content injection and potential site spoofing. Exploitation details are not fully provided i...
CVE-2004-0719
Internet Explorer for Mac 5.2.3, Internet Explorer 6 on Windows XP, and possibly other versions, does not properly prevent a frame in one domain from injecting content into a frame that belongs to another domain, which facilitates web site spoofing and other attacks, aka the frame injection...
Immunity Canvas: MS04_011_SSLPCT
Name| ms04011sslpct ---|--- CVE| CVE-2003-0719 Exploit Pack| CANVAS Description| Microsoft SSL PCT Hello Overflow Notes| References: http://www.microsoft.com/technet/security/bulletin/MS04-011.mspx CVE Name: CVE-2003-0719 VENDOR: Microsoft Notes: Repeatability: One shot MSADV: MS04-011-SSL-PCT Da...
CVE-2003-0719
CVE-2003-0719 is a buffer overflow in the Microsoft SSL library’s Private Communications Transport (PCT) implementation. The vulnerability allows remote code execution via crafted PCT 1.0 handshake packets on affected Windows family systems (NT 4.0 SP6a, 2000 SP2–SP4, XP SP1, Server 2003, NetMeet...
CVE-2002-0719
SQL injection vulnerability in the function that services for Microsoft Content Management Server MCMS 2001 allows remote attackers to execute arbitrary commands via an MCMS resource request for image files or other files...
CVE-2001-0719
This CVE affects Microsoft Windows Media Player 6.4, where a buffer overflow in handling Advanced Streaming Format (ASF) files can allow remote execution of arbitrary code. The vulnerability is triggered by a malformed ASF file, with a network attack vector, no authentication, and no user interac...
CVE-2001-0719
Buffer overflow in Microsoft Windows Media Player 6.4 allows remote attackers to execute arbitrary code via a malformed Advanced Streaming Format ASF file...
CVE-2000-0719
CVE-2000-0719 concerns VariCAD 7.0, where world-writable files enable local users to replace VariCAD binaries with a Trojan horse program. The vulnerability arises from permissions/ownership allowing overwrite of executable components. Reported impact is local code integrity compromise; no exploi...
CVE-1999-0719
The CVE-1999-0719 entry relates to the Guile plugin for the Gnumeric spreadsheet package, where the underlying issue allows attackers to execute arbitrary code. The NVD metrics indicate a local attack vector with low complexity and no authentication required, yielding partial impacts on confident...