130 matches found
CVE-2010-0934
CVE-2010-0934 affects Perforce Server 2008.1, where the triggers functionality can be abused by remote authenticated users with super privileges to execute arbitrary operating-system commands via a p4 client invocation combined with the form-in trigger script. The Red Hat, NVD, and OpenVAS record...
CVE-2010-0934
The triggers functionality in Perforce Server 2008.1 allows remote authenticated users with super privileges to execute arbitrary operating-system commands by using a "p4 client" command in conjunction with the form-in trigger script...
[Backports-security-announce] Security Update for ejabberd
Gerfried Fuchs uploaded new packages for ejabberd which fixed the following security problems: CVE-2009-0934, Debian BTS 520852 Cross-site scripting XSS vulnerability in ejabberd before 2.0.4 allows remote attackers to inject arbitrary web script or HTML via unknown vectors related to links and M...
FreeBSD Ports: ejabberd
The remote host is missing an update to the system as announced in the referenced advisory. VID cf91c1e4-2b6d-11de-931b-00e0815b8da8 OpenVAS Vulnerability Test $ Description: Auto generated from VID cf91c1e4-2b6d-11de-931b-00e0815b8da8 Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...
Debian Security Advisory DSA 1774-1 (ejabberd)
The remote host is missing an update to ejabberd announced via advisory DSA 1774-1. OpenVAS Vulnerability Test $Id: deb17741.nasl 6615 2017-07-07 12:09:52Z cfischer $ Description: Auto-generated from advisory DSA 1774-1 ejabberd Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...
Fedora Core 9 FEDORA-2009-2747 (ejabberd)
The remote host is missing an update to ejabberd announced via advisory FEDORA-2009-2747. OpenVAS Vulnerability Test $Id: fcore20092747.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-2747 ejabberd Authors: Thomas Reinke Copyright: Copyright c 2009...
Fedora Core 10 FEDORA-2009-2746 (ejabberd)
The remote host is missing an update to ejabberd announced via advisory FEDORA-2009-2746. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by t...
Fedora Core 9 FEDORA-2009-2747 (ejabberd)
The remote host is missing an update to ejabberd announced via advisory FEDORA-2009-2747. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by t...
CVE-2009-0934
Cross-site scripting XSS vulnerability in ejabberd before 2.0.4 allows remote attackers to inject arbitrary web script or HTML via unknown vectors related to links and MUC logs...
CVE-2009-0934
Cross-site scripting XSS vulnerability in ejabberd before 2.0.4 allows remote attackers to inject arbitrary web script or HTML via unknown vectors related to links and MUC logs...
CVE-2009-0934
CVE-2009-0934 describes a cross-site scripting (XSS) vulnerability in ejabberd up to version 2.0.4, where remote attackers could inject arbitrary web script or HTML via unknown vectors related to links and MUC logs. Public advisories confirm the issue as remote and require upgrading to a fixed re...
CVE-2009-0934
Cross-site scripting XSS vulnerability in ejabberd before 2.0.4 allows remote attackers to inject arbitrary web script or HTML via unknown vectors related to links and MUC logs...
CVE-2008-0934
The CVE-2008-0934 entry documents a SQL injection in the NukeC 2.1 module for PHP-Nuke, exploitable via the id_catg parameter in a ViewCatg action. Affected component/file: modules.php; vulnerability type: SQL injection allowing remote arbitrary SQL execution. Impact details in sources indicate p...
CVE-2007-0934
CVE-2007-0934 is a Microsoft Visio memory-corruption/remote code-execution issue in the version-number handling of Visio files (.VSD/.VSS/.VST). A crafted Visio file could be opened by a user to trigger arbitrary code execution. The related CVE-2007-0936 (Visio Document Packaging) covers improper...
Office Files (CVE-2006-1308; CVE-2006-1540; CVE-2006-3431; CVE-2007-0934; CVE-2007-0936)
...
CVE-2006-0934
CVE-2006-0934 describes a cross-site scripting (XSS) vulnerability in webinsta Limbo 1.0.4.2. The flaw allows remote attackers to inject arbitrary web script or HTML via the message field in the Contact Form. The available sources confirm the vulnerability but do not provide explicit exploit deta...
Detection of various dangerous CGI scripts (HTTP) - Active Check
Various CGI scripts have known vulnerabilities tracked via the via the referenced CVEs. SPDX-FileCopyrightText: 2003 John Lampe Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only Also cove...
CVE-2005-0934
CVE-2005-0934 involves multiple cross-site scripting (XSS) vulnerabilities in WackoWiki R4 . The connected records confirm the affected product and the vulnerability class, indicating that remote attackers can inject arbitrary web script or HTML through unknown vectors in the application. The und...
CVE-2004-0934
CVE-2004-0934 affects Kaspersky antivirus engines 3.x through 4.x. The connected material shows a ZIP archive header manipulation vulnerability where both the local and global headers can be set to zero, allowing the compressed file to be opened while bypassing protection. A PoC exists in ZIP han...
CVE-2003-0934
Symbol Access Portable Data Terminal PDT 8100 does not hide the default WEP keys if they are not changed, which could allow attackers to retrieve the keys and gain access to the wireless network...