CVE-2012-0982

CVE-2012-0982 describes an SQL injection vulnerability in Vastal I-Tech Agent Zone (aka The Real Estate Script). The issue exists in search.php and allows remote attackers to execute arbitrary SQL commands through the price_from parameter. The description explicitly notes remote exploitation with...

CVE-2011-0982

CVE-2011-0982 describes a use-after-free vulnerability in Google Chrome prior to 9.0.597.94, exploitable via SVG font face handling that could cause a denial of service and potentially other impacts. Affected product: Google Chrome (before 9.0.597.94). Root cause: use-after-free in the SVG font f...

CVE-2010-0982

Directory traversal vulnerability in the CARTwebERP comcartweberp component 1.56.75 for Joomla! allows remote attackers to read arbitrary files via a .. dot dot in the controller parameter to index.php...

CVE-2010-0982

Directory traversal vulnerability in the CARTwebERP comcartweberp component 1.56.75 for Joomla! allows remote attackers to read arbitrary files via a .. dot dot in the controller parameter to index.php...

CVE-2010-0982

CVE-2010-0982 : A directory traversal/Local File Inclusion in Joomla! component CARTwebERP (com_cartweberp) 1.56.75 allows an attacker to read arbitrary files by supplying .. in the controller parameter to index.php. Documented impact: information disclosure on the server. Affected software is Jo...

CVE-2010-0982

creationtimestamp| type| source ---|---|--- 2010-01-03 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/10942...

CVE-2009-0982

CVE-2009-0982 affects Oracle PeopleSoft Enterprise: PeopleTools 8.49.19 with an unspecified vulnerability in the PeopleTools component, allowing remote authenticated users to impact integrity via unknown vectors. The CVE is tied to Oracle’s April 2009 CPU Patch Update, which addresses multiple vu...

Moderate: Red Hat Security Advisory: gnutls security update

Updated gnutls packages that fix a security issue are now available for Red Hat Enterprise Linux 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The GnuTLS library provides support for cryptographic algorithms and for protocols such as...

FreeBSD Ports: mpg123, mpg123-nas, mpg123-esound

The remote host is missing an update to the system as announced in the referenced advisory. VID 20d16518-2477-11d9-814e-0001020eed82 OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

FreeBSD Ports: mpg123, mpg123-nas, mpg123-esound

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Cross site scripting

Cross-site scripting XSS vulnerability in TaskFreak! before 0.5.7 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, possibly a variant of CVE-2007-0982...

CVE-2007-1198

TaskFreak! contains a Cross-site scripting (XSS) vulnerability in versions before 0.5.7 (CVE-2007-1198). The issue is described as an XSS that allows remote attackers to inject arbitrary script via unspecified vectors; connected reference CVE-2007-0982 specifies an XSS in error.php (TaskFreak! 0....

CVE-2007-0982

CVE-2007-0982 describes a cross-site scripting (XSS) vulnerability in TaskFreak! 0.5.5, exploitable through the tznMessage parameter processed by error.php. The description notes the issue as an XSS risk and references third-party sources; no patch or mitigation details are provided within the co...

CVE-2005-0982

CVE-2005-0982 affects Yet Another Forum.net 0.9.9 and involves multiple cross-site scripting (XSS) vulnerabilities that allow remote attackers to inject arbitrary script or HTML via the (1) name, (2) location, or (3) Subject field. The NVD entry lists a base score of 4.3 (Medium) with Network att...

CVE-2004-0982

Buffer overflow in the getauthfromURL function in httpget.c in mpg123 pre0.59s and mpg123 0.59r could allow remote attackers or local users to execute arbitrary code via an mp3 file that contains a long string before the @ at sign in a URL...

CVE-2004-0982

Buffer overflow in the getauthfromURL function in httpget.c in mpg123 pre0.59s and mpg123 0.59r could allow remote attackers or local users to execute arbitrary code via an mp3 file that contains a long string before the @ at sign in a URL...

CVE-2004-0982

CVE-2004-0982 is discussed across multiple records: mpg123 contains a buffer/heap overflow vulnerability in the mp3 URL handling. The primary condition is a long string before the @ in a URL that triggers a buffer overflow in getauthfromURL (mpg123 pre0.59s and 0.59r), allowing potentially remote...

CVE-2004-0982

Buffer overflow in the getauthfromURL function in httpget.c in mpg123 pre0.59s and mpg123 0.59r could allow remote attackers or local users to execute arbitrary code via an mp3 file that contains a long string before the @ at sign in a URL...

Debian DSA-578-1 : mpg123 - buffer overflow

Carlos Barros has discovered a buffer overflow in the HTTP authentication routine of mpg123, a popular but non-free MPEG layer 1/2/3 audio player. If a user opened a malicious playlist or URL, an attacker might execute arbitrary code with the rights of the calling user. %NASLMINLEVEL 70300 C...

CVE-2003-0982

CVE-2003-0982 refers to a buffer overflow in Cisco ACNS authentication module. Affected versions are ACNS 4.x before 4.2.11 and 5.x before 5.0.5, where sending an overly long password can allow a remote attacker to execute arbitrary code on the device. The Cisco advisory notes fix upgrades to 4.2...