CVE-2012-0917

Cross-site scripting XSS vulnerability in Hitachi IT Operations Analyzer 02-01, 02-51 through 02-51-01, and 02-53 through 02-53-02 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2012-0917

Hitachi IT Operations Analyzer is affected by a Cross-Site Scripting (XSS) vulnerability. Affected versions include 02-01, 02-51 through 02-51-01, and 02-53 through 02-53-02. The issue allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. The root cause is elevat...

CVE-2011-0917

creationtimestamp| type| source ---|---|--- 2011-02-18 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/16190...

CVE-2011-0917

Buffer overflow in nLDAP.exe in IBM Lotus Domino allows remote attackers to execute arbitrary code via a long string in an LDAP Bind operation, aka SPR KLYH87LMVX...

CVE-2011-0917

IBM Lotus Domino LDAP Bind Request vulnerability (CVE-2011-0917) stems from a buffer overflow in nLDAP.exe when handling a long string in LDAP Bind operations, enabling remote code execution over the LDAP port (389). The issue is documented across multiple advisories (e.g., ZDI-11-047, OpenVAS, a...

CVE-2000-0917

creationtimestamp| type| source ---|---|--- 2010-07-03 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/16842 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/misc/lprngformatstring.rb 2025-02-06 03:13:37+00:00| seen|...

CVE-2010-0917

Stack-based buffer overflow in VBScript in Microsoft Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP2, when Internet Explorer is used, might allow user-assisted remote attackers to execute arbitrary code via a long string in the fourth argument aka helpfile argument to the MsgBox function,...

CVE-2010-0917

CVE-2010-0917 is a distinct VBScript vulnerability causing a stack-based buffer overflow via the MsgBox fourth argument when Internet Explorer is used, affecting VBScript.dll on Windows 2000 SP4, XP SP2/SP3, and Windows Server 2003 SP2. An attacker-user interaction in IE could enable code executi...

CVE-2009-0917

Cross-site scripting XSS vulnerability in DFLabs PTK 1.0.0 through 1.0.4 allows remote attackers to inject arbitrary web script or HTML by providing a forensic image containing HTML documents, which are rendered in web browsers during inspection by PTK. NOTE: the vendor states that the product is...

CVE-2009-0917

CVE-2009-0917 describes a cross-site scripting (XSS) vulnerability in DFLabs PTK versions 1.0.0 through 1.0.4. The issue occurs when a forensic image containing HTML documents is provided, causing HTML/Script content to be rendered in browsers during PTK inspection. This allows remote attackers t...

Fedora Core 10 FEDORA-2009-0917 (tor)

The remote host is missing an update to tor announced via advisory FEDORA-2009-0917. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

CVE-2008-0917

In the connected documents, CVE-2008-0917 is described as a cross-site scripting (XSS) vulnerability in multiple Tor World CGI scripts, including Tor Search 1.1 and earlier, I-Navigator 4.0, Mobile Frontier 2.1, Diary.cgi 1.5 and earlier, Tor News 1.21 and earlier, Simple BBS 1.3 and earlier, Int...

CVE-2007-0917

The Intrusion Prevention System IPS feature for Cisco IOS 12.4XE to 12.3T allows remote attackers to bypass IPS signatures that use regular expressions via fragmented packets...

CVE-2007-0917

CVE-2007-0917 affects Cisco IOS IPS (IPS feature set) on IOS 12.4XE to 12.3T. The vulnerability allows remote attackers to bypass IPS signatures that use regular expressions by sending fragmented IP packets, potentially enabling evasion of signature inspection. Related Cisco advisories note addit...

Multiple Products Directory Server LDAP Buffer Overflows (CVE-2006-0468; CVE-2006-0580; CVE-2006-0647; CVE-2006-0717; CVE-2006-4510; CVE-2011-0917)

...

CVE-2006-0917

Technical details about CVE-2006-0917 are not provided in the connected documents; available sources describe cookies disclosure via a vulnerable link but do not specify affected versions, root cause, or remediation in these inputs.

CVE-2004-0917

The default installation of Vignette Application Portal installs the diagnostic utility without authentication requirements, which allows remote attackers to gain sensitive information, such as server and OS version, and conduct unauthorized activities via an HTTP request to /diag...

CVE-2004-0917

CVE-2004-0917 affects Vignette Application Portal. The default installation exposes an unauthenticated diagnostic utility accessible at /portal/diag (and related paths), enabling remote attackers to disclose sensitive information about the server, OS version, database parameters, and Vignette con...

CVE-2004-0917

The default installation of Vignette Application Portal installs the diagnostic utility without authentication requirements, which allows remote attackers to gain sensitive information, such as server and OS version, and conduct unauthorized activities via an HTTP request to /diag...

CVE-2002-0917

CGIScript.net csPassword.cgi stores .htpasswd files under the web document root, which could allow remote authenticated users to download the file and crack the passwords of other users...