114 matches found
CVE-2006-0945
PHP remote file include vulnerability in admin/index.php in Archangel Weblog 0.90.02 allows remote authenticated administrators to execute arbitrary PHP code via a URL ending in a NULL %00 in the index parameter...
CVE-2005-0945
CVE-2005-0945 describes a stored/reflected Cross-site scripting (XSS) vulnerability in ACS Blog 1.1.1, where remote attackers can inject arbitrary script via onmouseover or onload events in (1) img, (2) link, or (3) mail tags. The NVD entry lists a base score of 4.3 (Medium) with network attack v...
CVE-2004-0945
The CVE covers Mitel 3300 ICP web management interface prior to version 4.2.2.11. The vulnerability allows remote authenticated users to exhaust resources by opening a large number of active sessions, exceeding the system’s maximum and causing a denial of service. The underlying cause is uncontro...
CVE-2003-0945
The Web Database Manager in web-tools for SAP DB before 7.4.03.30 generates predictable session IDs, which allows remote attackers to conduct unauthorized activities...
CVE-2003-0945
CVE-2003-0945 affects SAP DB Web-tools Web Database Manager prior to 7.4.03.30. The vulnerability stems from generating predictable session IDs in the Web Database Manager, with IDs placed in the URL, enabling remote attackers to perform unauthorized activities. The issue is addressed by SAP with...
CVE-2003-0945
The Web Database Manager in web-tools for SAP DB before 7.4.03.30 generates predictable session IDs, which allows remote attackers to conduct unauthorized activities...
CVE-2002-0945
Buffer overflow in SeaNox Devwex allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a long HTTP GET request...
CVE-2002-0945
CVE-2002-0945 describes a buffer overflow in SeaNox Devwex that can be triggered by a long HTTP GET request, allowing remote attackers to cause a denial of service and potentially execute arbitrary code. The available connected sources corroborate the basic impact (DoS and potential code executio...
CVE-2001-0945
CVE-2001-0945 describes a buffer overflow in Outlook Express 5.0–5.02 for Macintosh triggered by an email message containing a long line, allowing remote attackers to cause a denial of service. The underlying issue is a buffer overflow in handling long lines; impact is a denial of service with pa...
CVE-2001-0945
Buffer overflow in Outlook Express 5.0 through 5.02 for Macintosh allows remote attackers to cause a denial of service via an e-mail message that contains a long line...
CVE-2000-0945
The web configuration interface for Catalyst 3500 XL switches allows remote attackers to execute arbitrary commands without authentication when the enable password is not set, via a URL containing the /exec/ directory...
CVE-2000-0945
CVE-2000-0945 affects Cisco Catalyst 3500 XL devices where the web configuration interface exposes an HTTP path /exec/ and allows remote command execution when the enable password is not set. Provided connected documents describe that an unauthenticated user can trigger arbitrary commands by requ...
CVE-1999-0945
CVE-1999-0945 describes a buffer overflow in the Internet Mail Service (IMS) of Microsoft Exchange 5.5 and 5.0. The underlying issue allows remote attackers to cause a denial of service by sending AUTH or AUTHINFO commands. The connected records confirm the affected products and versions and the ...
CVE-1999-0945
Buffer overflow in Internet Mail Service IMS for Microsoft Exchange 5.5 and 5.0 allows remote attackers to conduct a denial of service via AUTH or AUTHINFO commands...