CVE-2016-0735

Apache Ranger 0.5.x before 0.5.2 is affected by a vulnerability where remote authenticated users can bypass parent resource-level access restrictions by mishandling a resource-level exclude policy. Affected versions include 0.5.0 and 0.5.1; the issue enables unintended access control bypass at th...

CVE-2015-0735

CVE-2015-0735 affects Cisco Unified CVP 10.5(1). The vulnerability is a Cross-Site Request Forgery (CSRF) flaw caused by insufficient CSRF protections, enabling an unauthenticated, remote attacker to coerce a logged-in user to perform actions in the browser (in the context of that user). No softw...

Medal Of Honor Allied Assault getinfo Stack Buffer Overflow

No description provided by source. $Id: mohaagetinfo.rb 9262 2010-05-09 17:45:00Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

CVE-2013-0735

CVE-2013-0735 affects the WordPress Mingle Forum plugin (pre-1.0.34) via wpf.class.php . The vulnerability is described as multiple SQL injection flaws that allow remote attackers to execute arbitrary SQL commands through the id parameter in actions such as viewtopic (1) remove_post, (2) sticky, ...

CVE-2014-0735

Cross-site scripting XSS vulnerability in the IP Manager Assistant IPMA interface in Cisco Unified Communications Manager Unified CM 10.01 and earlier allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCum46470...

CVE-2014-0735

Cisco Unified Communications Manager IPMA (IPMA interface) is affected by CVE-2014-0735 (Bug CSCum46470): an XSS via crafted URLs due to insufficient input validation in the IP Manager Assistant. Affected product: Cisco Unified CM IPMA, version 10.0(1) and earlier. Impact per sources: remote atta...

CVE-2012-0735

IBM Rational AppScan Enterprise 5.x and 8.x before 8.5.0.1 are affected by CVE-2012-0735 due to improper scanning of file: URLs, which can allow a man-in-the-middle to obtain sensitive information via a crafted URI. The impact is information disclosure and potential unspecified additional impact....

CVE-2011-0735

Cross-site scripting XSS vulnerability in Adobe ColdFusion before 9.0.1 CHF1 allows remote attackers to inject arbitrary web script or HTML via vectors involving a "tag script."...

CVE-2011-0735

Adobe ColdFusion before 9.0.1 CHF1 is vulnerable to cross-site scripting (XSS) via vectors involving a “tag script.” The issue allows remote attackers to inject arbitrary web script or HTML. The connected documents do not provide exploit details or remediation steps.

CVE-2004-0735

creationtimestamp| type| source ---|---|--- 2010-05-09 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/16695 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/games/mohaagetinfo.rb 2025-02-06 03:13:38+00:00| seen|...

Medal of Honor Allied Assault - getinfo Stack Buffer Overflow (Metasploit)

$Id: mohaagetinfo.rb 9262 2010-05-09 17:45:00Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/...

CVE-2010-0735

CVE-2010-0735 is a duplicate of CVE-2010-0969 (Rejected reason in the initial entry). Connected documents describe CVE-2010-0969 as a remote denial-of-service vulnerability in Unbound DNS resolver, caused by improper allocation of sock_list structures before version 1.4.3. Affected product: Unbound

CVE-2010-0735

...

Medal Of Honor Allied Assault getinfo Stack Overflow

$Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'Medal Of Hon...

CVE-2009-0735

The vulnerability CVE-2009-0735 affects Papoo CMS 3.6, specifically in lib/classes/message_class.php. When register_globals is enabled and magic_quotes_gpc is disabled, a directory traversal via the pfadhier parameter (.. path) can allow remote attackers to read, and possibly execute, arbitrary f...

Medal of Honor Allied Assault getinfo Stack Buffer Overflow

This module exploits a stack based buffer overflow in the getinfo command of Medal Of Honor Allied Assault. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Medal of Honor Allied Assault getinfo...

CVE-2008-0735

CVE-2008-0735 pertains to AuraCMS 2.2, where a flaw in mod/gallery/ajax/gallery_data.php allows an attacker to inject SQL via the albums parameter. The documented impact is the ability to execute arbitrary SQL commands remotely, indicating complete confidentiality, integrity, and availability imp...

CVE-2007-0735

CVE-2007-0735 describes a use-after-free vulnerability in Apple Mac OS X Libinfo (affecting OS X 10.3.9–10.4.9). The flaw allows remote attackers to crash the application or potentially execute arbitrary code through crafted web pages that trigger error conditions and access deallocated memory. T...

RHEL 4 : thunderbird (RHSA-2006:0735)

The remote Redhat Enterprise Linux 4 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2006:0735 advisory. - security flaw CVE-2006-5462, CVE-2006-5463, CVE-2006-5464, CVE-2006-5747 - seamonkey 1.0.6 multiple vulnerabilities CVE-2006-5748 Note tha...

CVE-2006-0735

CVE-2006-0735 describes a cross-site scripting (XSS) vulnerability in BBcode.pm within M. Blom HTML::BBCode 1.04 and earlier. The flaw allows remote attackers to inject arbitrary JavaScript via a javascript: URI in (1) the img tag or (2) the url tag of BBCode, when used in products such as My Blo...