Lucene search
+L

1100 matches found

seebug.org
seebug.org
added 2008/12/05 12:00 a.m.39 views

Joomla Component mydyngallery 1.4.2 (directory) SQL Injection Vuln

No description provided by source. !/usr/bin/env python coding: utf-8 from pocsuite.net import req from pocsuite.poc import POCBase, Output from pocsuite.utils import register import re class TestPOCPOCBase: vulID = '10171' ssvid version = '1.0' author = 'kikay' vulDate = '2008-12-05' createDate ...

7.1AI score
SaveExploits0
Fedora
Fedora
added 2008/11/26 6:21 a.m.30 views

[SECURITY] Fedora 10 Update: imlib2-1.4.2-2.fc10

Imlib 2 is a library that does image file loading and saving as well as rendering, manipulation, arbitrary polygon support, etc. It does ALL of these operations FAST. Imlib2 also tries to be highly intelligent about doing them, so writing naive programs can be done easily, without sacrificing...

7.5CVSS1.4AI score0.03641EPSS
SaveExploits0
Fedora
Fedora
added 2008/11/26 6:16 a.m.32 views

[SECURITY] Fedora 9 Update: imlib2-1.4.2-2.fc9

Imlib 2 is a library that does image file loading and saving as well as rendering, manipulation, arbitrary polygon support, etc. It does ALL of these operations FAST. Imlib2 also tries to be highly intelligent about doing them, so writing naive programs can be done easily, without sacrificing...

9.3CVSS1.4AI score0.05748EPSS
SaveExploits1
Tenable Nessus
Tenable Nessus
added 2008/11/26 12:00 a.m.24 views

Fedora 8 : imlib2-1.4.2-2.fc8 (2008-10296)

Sun Nov 23 2008 Tomas Smetana 1.4.2-2 - patch for CVE-2008-5187 - Thu Oct 23 2008 Tomas Smetana 1.4.2-1 - new upstream version - Fri May 30 2008 Tomas Smetana 1.4.0-7 - patch for CVE-2008-2426 - Tue Mar 11 2008 Hans de Goede 1.4.0-6 - Disable amd64 assembly optimization. Kills idesk - 222998,...

9.3CVSS5.4AI score0.05748EPSS
SaveExploits1References3
NVD
NVD
added 2008/11/21 2:30 a.m.20 views

CVE-2008-5187

The load function in the XPM loader for imlib2 1.4.2, and possibly other versions, allows attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted XPM file that triggers a "pointer arithmetic error" and a heap-based buffer overflow, a different vulnerability...

7.5CVSS7.3AI score0.03641EPSS
SaveExploits0References18
UbuntuCve
UbuntuCve
added 2008/11/21 2:30 a.m.28 views

CVE-2008-5187

The load function in the XPM loader for imlib2 1.4.2, and possibly other versions, allows attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted XPM file that triggers a "pointer arithmetic error" and a heap-based buffer overflow, a different vulnerability...

7.5CVSS6.3AI score0.03641EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2008/11/21 2:00 a.m.42 views

CVE-2008-5187

The load function in the XPM loader for imlib2 1.4.2, and possibly other versions, allows attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted XPM file that triggers a "pointer arithmetic error" and a heap-based buffer overflow, a different vulnerability...

7.8AI score0.03641EPSS
SaveExploits0References18
NVD
NVD
added 2008/11/04 9:00 p.m.22 views

CVE-2008-4930

MyBB aka MyBulletinBoard 1.4.2 does not properly handle an uploaded file with a nonstandard file type that contains HTML sequences, which allows remote attackers to cause that file to be processed as HTML by Internet Explorer's content inspection, aka "Incomplete protection against MIME-sniffing....

5CVSS5.9AI score0.01153EPSS
SaveExploits0References3
Prion
Prion
added 2008/11/04 9:00 p.m.23 views

Cross site scripting

Cross-site scripting XSS vulnerability in the redirect function in functions.php in MyBB aka MyBulletinBoard 1.4.2 allows remote attackers to inject arbitrary web script or HTML via the url parameter in a removesubscriptions action to moderation.php, related to use of the ajax option to request a...

4.3CVSS6.8AI score0.01414EPSS
SaveExploits1References6Affected Software1
Cvelist
Cvelist
added 2008/11/04 8:00 p.m.33 views

CVE-2008-4929

MyBB aka MyBulletinBoard 1.4.2 uses insufficient randomness to compose filenames of uploaded files used as attachments, which makes it easier for remote attackers to read these files by guessing filenames...

7.5AI score0.02242EPSS
SaveExploits1References5
OpenVAS
OpenVAS
added 2008/09/24 12:00 a.m.40 views

Gentoo Security Advisory GLSA 200601-02 (kdegraphics, kpdf, koffice, kword)

The remote host is missing updates announced in advisory GLSA 200601-02. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

10CVSS6.7AI score0.0614EPSS
SaveExploits5References5
Tenable Nessus
Tenable Nessus
added 2008/08/22 12:00 a.m.34 views

SuSE 10 Security Update : IBM Java 1.4.2 (ZYPP Patch Number 5465)

This update of IBM Java to 1.4.2 SR11 fixes various security problems : - Stack-based buffer overflow in Java Web Start javaws.exe allows remote attackers to execute arbitrary code via a crafted JNLP file. CVE-2008-1196 - Unspecified vulnerability in the Java Runtime Environment JRE allows remote...

6.8CVSS6.2AI score0.07255EPSS
SaveExploits0References6
RedHat Linux
RedHat Linux
added 2008/04/28 9:17 a.m.54 views

Moderate: Red Hat Security Advisory: java-1.4.2-bea security update

Updated java-1.4.2-bea packages that fix a security issue are now available for Red Hat Enterprise Linux 3 Extras, Red Hat Enterprise Linux 4 Extras, and Red Hat Enterprise Linux 5 Supplementary. This update has been rated as having moderate security impact by the Red Hat Security Response Team...

6.8CVSS5.8AI score0.05422EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2008/04/25 12:00 a.m.43 views

SuSE 10 Security Update : IBM Java 1.4.2 (ZYPP Patch Number 5182)

IBM Java 1.4.2 was updated to SR10 to fix various security issues : - A buffer overflow vulnerability in Java Web Start may allow an untrusted Java Web Start application that is downloaded from a website to elevate its privileges. For example, an untrusted Java Web Start application may grant...

9.3CVSS8.8AI score0.16899EPSS
SaveExploits2References30
Exploit DB
Exploit DB
added 2008/04/13 12:00 a.m.38 views

1024 CMS 1.4.2 - Local File Inclusion / Blind SQL Injection

Author: GiReX mySite: girex.altervista.org Date: 13/04/2008 CMS: 1024 CMS = 1.4.1 and 1.4.2 beta Site: 1024cms.com Bug1: Local File Inclusion Need: magicquotesgpc = Off / registerglobals = On Bug2: Cookie Blind SQL Injection Exploit: Admin Hash Retrieve Exploit Need: magicquotesgpc = Off Bug1: Vu...

6.8CVSS5.8AI score0.00949EPSS
SaveExploits1
Tenable Nessus
Tenable Nessus
added 2007/12/13 12:00 a.m.37 views

SuSE 10 Security Update : Java (ZYPP Patch Number 3844)

The Sun JAVA JDK 1.4.2 was upgraded to release 15 to fix various bugs, including the following security bugs : - Integer overflow in the embedded ICC profile image parser in Sun Java Development Kit JDK, allows remote attackers to execute arbitrary code or cause a denial of service JVM crash via ...

6.8CVSS6.2AI score0.18185EPSS
SaveExploits3References8
Tenable Nessus
Tenable Nessus
added 2007/12/13 12:00 a.m.14 views

SuSE 10 Security Update : Java 1.4.2 (ZYPP Patch Number 2426)

The SUN Java packages have been upgraded to 1.4.2 update 13 to fix various security problems. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid29471;...

5.4AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2007/12/13 12:00 a.m.36 views

SuSE 10 Security Update : Sun Java 1.4.2 (ZYPP Patch Number 4533)

The Sun JAVA JDK 1.4.2 was upgraded to release 16 to fix various bugs, including the following security bugs : http://sunsolve.sun.com/search/document.do?assetkey=1-26-103079-1 - Sun Java Runtime Environment JRE in JDK and JRE 6 Update 2 and earlier, JDK and JRE 5.0 Update 12 and earlier, SDK and...

7.1CVSS5.7AI score0.03418EPSS
SaveExploits0References16
Tenable Nessus
Tenable Nessus
added 2007/12/13 12:00 a.m.41 views

SuSE 10 Security Update : IBM Java 1.4.2 (ZYPP Patch Number 4542)

The IBM Java JRE/SDK has been brought to release 1.4.2 SR9, containing several bugfixes, including the following security fixes : - A buffer overflow vulnerability in the image parsing code in the JavaTM Runtime Environment may allow an untrusted applet or application to elevate its privileges. F...

6.8CVSS6AI score0.18185EPSS
SaveExploits5References10
Tenable Nessus
Tenable Nessus
added 2007/10/17 12:00 a.m.14 views

openSUSE 10 Security Update : java-1_4_2-sun-demo (java-1_4_2-sun-demo-2469)

The SUN Java packages have been upgraded to 1.4.2 update 13 and 1.5.0 update 10 to fix various security problems, this update contains the missing packages that were left out for 10.2. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were...

5.4AI score
SaveExploits0
Rows per page
Query Builder