115 matches found
CVE-2013-0966
The Apple modhfsapple module for the Apache HTTP Server in Apple Mac OS X before 10.8.3 does not properly handle ignorable Unicode characters, which allows remote attackers to bypass intended directory authentication requirements via a crafted pathname in a URI...
CVE-2013-0966
CVE-2013-0966 affects Apple’s mod_hfs_apple module for the Apache HTTP Server on Mac OS X prior to 10.8.3. The root cause is improper handling of ignorable Unicode characters in URIs, enabling a remote attacker to bypass the intended HTTP authentication by crafting a URI pathname. Public details ...
CentOS Update for firefox CESA-2010:0966 centos4 x86_64
The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...
Cisco Unified Operations Manager Multiple Vulnerabilities - SOS-11-006
Sense of Security - Security Advisory - SOS-11-006 Release Date. 18-May-2011 Last Update. - Vendor Notification Date. 28-Feb-2011 Product. Cisco Unified Operations Manager Common Services Framework Help Servlet Common Services Device Center CiscoWorks Homepage Note: All of the above products are...
CVE-2011-0966
CVE-2011-0966 is a directory traversal vulnerability in Cisco Unified Operations Manager/CuOM related to the cwhp/auditLog.do endpoint of the Homepage Auditing component (Cisco Works Common Services 3.3 and earlier). An attacker can read arbitrary files by supplying a crafted file parameter (.. p...
Cisco Unified Operations Manager Multiple Vulnerabilities - SOS-11-006
Exploit for windows platform in category remote exploits Sense of Security - Security Advisory - SOS-11-006 Release Date. 18-May-2011 Last Update. - Vendor Notification Date. 28-Feb-2011 Product. Cisco Unified Operations Manager Common Services Framework Help Servlet Common Services Device Center...
CVE-2011-0966
creationtimestamp| type| source ---|---|--- 2011-05-18 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/35781 2011-05-18 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/17304...
Cisco Unified Operations Manager - Multiple Vulnerabilities
Sense of Security - Security Advisory - SOS-11-006 Release Date. 18-May-2011 Last Update. - Vendor Notification Date. 28-Feb-2011 Product. Cisco Unified Operations Manager Common Services Framework Help Servlet Common Services Device Center CiscoWorks Homepage Note: All of the above products are...
firefox security update
CentOS Errata and Security Advisory CESA-2010:0966 Updated firefox packages that fix several security issues are now available for Red Hat Enterprise Linux 4, 5, and 6. The Red Hat Security Response Team has rated this update as having critical security impact. Common Vulnerability Scoring System...
CVE-2010-0966
PHP remote file inclusion vulnerability in inc/config.php in deV!Lz Clanportal DZCP 1.5.2, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the basePath parameter...
CVE-2010-0966
CVE-2010-0966 affects the PHP-based DZCP/deV!L`z Clanportal 1.5.2. The vulnerability is a PHP remote file inclusion in inc/config.php when register_globals is enabled, allowing an attacker to cause arbitrary PHP code execution by supplying a crafted URL for the basePath parameter. The CVE Descrip...
CVE-2010-0966
creationtimestamp| type| source ---|---|--- 2010-03-14 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/11735...
CVE-2009-0966
Affected product/variant: YABSoft Mega File Hosting 1.2 (cross.php). Vulnerability: PHP remote file inclusion via the url parameter in cross.php, enabling execution of arbitrary PHP code. NOTE: can also include and execute arbitrary local files using .. sequences. Impact (as documented): arbitrar...
CVE-2009-0966
creationtimestamp| type| source ---|---|--- 2009-03-17 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/8230...
Gentoo Security Advisory GLSA 200504-05 (Gaim)
The remote host is missing updates announced in advisory GLSA 200504-05. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2007-0966
The CVE-2007-0966 issue affects Cisco's Firewall Services Module (FWSM) versions 3.x prior to 3.1(3.11). When the embedded HTTPS server is enabled, crafted HTTPS traffic can trigger a remote DoS that reboots/reloads the device. Root cause is an error in handling certain HTTPS requests by the embe...
CentOS 3 / 4 : gaim (CESA-2005:365)
An updated gaim package that fixes multiple denial of service issues is now available. This update has been rated as having important security impact by the Red Hat Security Response Team. The Gaim application is a multi-protocol instant messaging client. A buffer overflow bug was found in the wa...
CVE-2006-0966
The CVE-2006-0966 entry describes a local denial-of-service in NCP Network Communication Secure Client (version 8.11 Build 146 and possibly other versions). The issue is triggered by supplying a large number of arguments to ncprwsnt.exe, with the root cause possibly a buffer overflow, leading to ...
[ MDKSA-2006:051 ] - Updated gettext packages fix temporary file vulnerabilities
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDKSA-2006:051 http://www.mandriva.com/security/ Package : gettext Date : February 28, 2006 Affected: Corporate 3.0, Multi Network Firewall 2.0 Problem Description: The Trustix developers discovered temporary file...
Mandrake Linux Security Advisory : gaim (MDKSA-2005:071)
More vulnerabilities have been discovered in the gaim instant messaging client : A buffer overflow vulnerability was found in the way that gaim escapes HTML, allowing a remote attacker to send a specially crafted message to a gaim client and causing it to crash CVE-2005-0965. A bug was discovered...