CVE-2010-1004

SQL injection vulnerability in the Yet another TYPO3 search engine YATSE extension before 0.3.2 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2010-1004

CVE-2010-1004 affects the Yet another TYPO3 search engine (YATSE) extension for TYPO3, up to version 0.3.1. The vulnerability is a SQL injection in an unspecified vector that could allow remote attackers to execute arbitrary SQL commands. The fixed version is 0.3.2. If exploited, the impact would...

SLES9: Security update for Midnight Commander

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: mc For more information, please visit the referenced security advisories. More details may also be found by searching for keyword 5011441 within the SuSE...

SuSE9 Security Update : Midnight Commander (YOU Patch Number 9797)

Various security bugs ranging from denial of service conditions to command execution have been fixed. CVE-2004-1004, CVE-2004-1005, CVE-2004-1176 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc';...

CVE-2009-1004

CVE-2009-1004 refers to an unspecified vulnerability in BEA WebLogic Server 10.3 within BEA Product Suite 10.3 that could affect confidentiality and integrity via remote, unknown vectors. Connected sources corroborate that Oracle issued a multi-vulnerability CPUAPR2009 patch update in April 2009 ...

Gentoo Security Advisory GLSA 200502-24 (mc)

The remote host is missing updates announced in advisory GLSA 200502-24. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2008-1004

Cross-site scripting XSS vulnerability in WebCore, as used in Apple Safari before 3.1, allows remote attackers to inject arbitrary web script or HTML via unknown vectors related to the Web Inspector...

CVE-2008-1004

CVE-2008-1004 is a cross-site scripting (XSS) vulnerability in WebCore used by Apple Safari prior to 3.1. The flaw, related to the Web Inspector, could allow remote attackers to inject arbitrary web script or HTML via unknown vectors. Affected product: Apple Safari before 3.1 (WebKit/WebInspector...

Debian Security Advisory DSA 1004-1 (vlc)

The remote host is missing an update to vlc announced via advisory DSA 1004-1. Simon Kilvington discovered that specially crafted PNG images can trigger a heap overflow in libavcodec, the multimedia library of ffmpeg, which may lead to the execution of arbitrary code. The vlc media player links...

CVE-2007-1004

CVE-2007-1004 concerns Mozilla Firefox and describes a spoofing/phishing issue: remote attackers could write to an about:blank tab and overlay the location bar, enabling deceptive UI to mislead users. The available connected sources corroborate that Firefox is the affected product and the vulnera...

CVE-2006-1004

Parodia 6.2 and earlier contains a cross-site scripting (XSS) vulnerability in agencyprofile.asp exploitable via the AG_ID parameter. Remote attackers could inject arbitrary web script/HTML. The affected software version is Parodia 6.2 and earlier; the provided documents do not specify the root c...

CVE-2005-1004

The CVE-2005-1004 issue affects ProfitCode PayProCart 3.0, where an XSS flaw exists in usrdetails.php exploitable via the sgnuptype parameter. The vulnerability is reflected XSS with no authentication, allowing an attacker to inject script/html in the context of the victim’s browser (I:P, C:N). I...

CVE-2004-1004

CVE-2004-1004 affects Midnight Commander (mc) up to version 4.5.55 with multiple format string vulnerabilities. The provided connected advisories confirm that various distros release patches (e.g., SUSE SLES9 patch 5011441, Gentoo GLSA 200502-24, Debian DSA 639-1) to fix these issues. The CVE ent...

CVE-2004-1004

Multiple format string vulnerabilities in Midnight Commander mc 4.5.55 and earlier allow remote attackers to have an unknown impact...

CVE-2003-1004

Cisco PIX firewall 6.2.x through 6.2.3, when configured as a VPN Client, allows remote attackers to cause a denial of service dropped IPSec tunnel connection via an IKE Phase I negotiation request to the outside interface of the firewall...

CVE-2003-1004

Cisco PIX firewall versions 6.2.x through 6.2.3, when configured as a VPN Client, are affected by CVE-2003-1004. A remote attacker can cause a denial of service (dropped IPSec tunnel) by sending an IKE Phase I negotiation request to the firewall’s outside interface. The connected sources consiste...

CVE-2002-1004

Directory traversal vulnerability in webmail feature of ArGoSoft Mail Server Plus or Pro 1.8.1.5 and earlier allows remote attackers to read arbitrary files via .. dot dot sequences in a URL...

CVE-2002-1004

CVE-2002-1004 concerns ArGoSoft Mail Server Plus/Pro WebMail (≤1.8.1.5). The vulnerability is a directory traversal in the WebMail interface that allows remote attackers to read arbitrary files via …/ sequence in a URL. Affected: ArGoSoft Mail Server WebMail feature (versions up to 1.8.1.5 and ea...

CVE-2001-1004

Affected software: gnut Gnutella client prior to 0.4.27. Vulnerability: cross-site scripting via file names containing script tags shared with other clients. Root cause: untrusted file-name content is rendered as script on recipients. Impact: remote script execution on other clients (as described...

CVE-2001-1004

Cross-site scripting CSS vulnerability in gnut Gnutella client before 0.4.27 allows remote attackers to execute arbitrary script on other clients by sharing a file whose name contains the script tags...