97 matches found
FreeBSD Ports: gaim, ja-gaim, ko-gaim, ru-gaim
The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
[SECURITY] [DSA 1569-3] New cacti packages fix regression
------------------------------------------------------------------------ Debian Security Advisory DSA-1569-3 [email protected] http://www.debian.org/security/ Thijs Kinkhorst July 15, 2008 http://www.debian.org/security/faq -...
GLSA-200803-18 : Cacti: Multiple vulnerabilities
The remote host is affected by the vulnerability described in GLSA-200803-18 Cacti: Multiple vulnerabilities The following inputs are not properly sanitized before being processed: 'viewtype' parameter in the file graph.php, 'filter' parameter in the file graphview.php, 'action' and 'loginusernam...
CVE-2008-0785
CVE-2008-0785 affects Cacti 0.8.7 before 0.8.7b and 0.8.6 before 0.8.6k. The vulnerability is due to multiple SQL injection flaws in the web frontend, exploitable by remote authenticated users via: (1) graph_view.php with graph_list, (2) tree.php with leaf_id and id, (3) graph_xport.php with loca...
Immunity Canvas: FLIP_INCLUDE
Name| flipinclude ---|--- CVE| CVE-2007-0785 Exploit Pack| CANVAS Description| Flip 2.01 = Remote File Include Notes| CVSS: 7.5 Repeatability: Infinite VENDOR: Small Axe Solutions CVE Url: https://vulners.com/cve/CVE-2007-0785 CVE Name: CVE-2007-0785...
CVE-2007-0785
The CVE-2007-0785 issue affects Flipsource Flip 2.01-final 1.0 and earlier, where a PHP remote file inclusion in previewtheme.php via the inc_path parameter enables arbitrary PHP code execution. The root cause is a vulnerable inclusion path that accepts attacker-controlled URLs. In public disclos...
CVE-2006-0785
Absolute path traversal vulnerability in include.php of PHPKIT
CVE-2005-0785
CVE-2005-0785 describes a cross-site scripting (XSS) vulnerability in YaBB 2.0 rc1, specifically in the YaBB.pl usersrecentposts action. The issue arises from unsafely handling the username parameter, allowing an attacker to inject arbitrary web script or HTML that could run in a victim’s browser...
CVE-2004-0785
CVE-2004-0785 affects Gaim (pre-0.82). The advisory states multiple buffer overflows that allow remote attackers to cause denial of service and potentially execute arbitrary code via (1) RTF messages, (2) an excessively long hostname from DNS, or (3) an overly long URL not properly decoded. Produ...
CVE-2003-0785
ipmasq before 3.5.12, in certain configurations, may forward packets to the external interface even if the packets are not associated with an established connection, which could allow remote attackers to bypass intended filtering...
CVE-2003-0785
...
CVE-2003-0785
ipmasq before 3.5.12, in certain configurations, may forward packets to the external interface even if the packets are not associated with an established connection, which could allow remote attackers to bypass intended filtering...
CVE-2003-0785
CVE-2003-0785 affects ipmasq (pre-3.5.12) where faulty filtering rules can forward traffic from the external interface for internal hosts even when not established, bypassing filtering. Root cause: improper packet-filtering rules in ipmasq. Impact: remote attacker could bypass access control on a...
CVE-2002-0785
AOL Instant Messenger (AIM) is affected by CVE-2002-0785: remote attackers can cause a crash (DoS) by sending an AddBuddy link where the ScreenName parameter contains a very long list of comma-separated values, potentially triggering a buffer overflow. This description reflects the vulnerability ...
CVE-2001-0785
Directory traversal in Webpaging interface in Internet Software Solutions Air Messenger LAN Server AMLServer 3.4.2 allows allows remote attackers to read arbitrary files via a .. dot dot attack...
CVE-2001-0785
Affects Internet Software Solutions Air Messenger LAN Server (AMLServer) 3.4.2. The Webpaging interface contains a directory-traversal flaw that lets remote attackers read arbitrary files via a .. path. Root cause: directory traversal in the Webpaging interface. Impact: partial confidentiality lo...
CVE-1999-0785
The CVE-1999-0785 entry concerns the INN inndstart component, where a local attacker can gain root privileges through the pathrun parameter in the inn.conf file. This aligns across NVD/Red Hat/CVE records. The vulnerability enables local privilege escalation by manipulating configuration to influ...