106 matches found
CVE-2010-1040
OpenPNE contains an authentication bypass vulnerability related to the IP address range limitation function when mobile device support is enabled. The flaw in the IP address range limitation may allow remote attackers to bypass the simple login feature, potentially enabling access to or modificat...
WinAsm Studio Buffer Overflow Vulnerability
This host is running WinAsm Studio and is prone to Heap Overflow Vulnerability. OpenVAS Vulnerability Test $Id: secpodwinasmstudiowapbofvuln.nasl 5369 2017-02-20 14:48:07Z cfi $ WinAsm Studio Buffer Overflow Vulnerability Authors: Nikita MR Copyright: Copyright c 2009 SecPod, http://www.secpod.co...
CVE-2009-1040
CVE-2009-1040 affects WinAsm Studio 5.1.5.0 and is described in OpenVAS/NVD as a buffer/heap overflow that allows user-assisted remote attackers to execute arbitrary code via a crafted project (.wap) file. The OpenVAS entry explicitly labels it as a heap overflow vulnerability. The NVD entry prov...
CVE-2009-1040
creationtimestamp| type| source ---|---|--- 2009-03-16 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/8224...
CVE-2008-1040
The CVE-2008-1040 issue affects Fujitsu Interstage products: Interstage Application Server (versions 8.0.0–8.0.3 and 9.0.0), Interstage Studio (8.0.1 and 9.0.0), and Interstage Apworks 8.0.0. It is a buffer overflow in the Single Sign-On function caused by improper URI handling, which enables a r...
Debian: Security Advisory (DSA-1040-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Debian Security Advisory DSA 1040-1 (gdm)
The remote host is missing an update to gdm announced via advisory DSA 1040-1. A vulnerability has been identified in gdm, a display manager for X, that could allow a local attacker to gain elevated privileges by exploiting a race condition in the handling of the .ICEauthority file. The old stabl...
CVE-2007-1040
Xpression News (X-News) 1.0.1 is affected by a directory traversal in archives.php. The xnews-template parameter accepts a .. path traversal, enabling remote attackers to include arbitrary files or view sensitive information. The vulnerability is confirmed in CVE-2007-1040 and is documented with...
CVE-2006-1040
CVE-2006-1040 affects vBulletin versions 3.0.12 and 3.5.3. The vulnerability is a cross-site scripting (XSS) flaw where user-supplied content placed in the email field is injected into profile.php but not sanitized in sendmsg.php, enabling remote attackers to inject arbitrary web script or HTML t...
vBulletin Email Field XSS
According to its banner, the version of vBulletin installed on the remote host does not properly sanitize user-supplied-input to the email field in the 'profile.php' script. Using a specially crafted email address in his profile, an authenticated attacker can leverage this issue to inject arbitra...
CVE-2005-1040
The CVE-2005-1040 entry concerns Novell Linux Desktop 9, specifically the netapplet component. It describes multiple unknown vulnerabilities that allow local users to gain root privileges, related to user input being passed to network scripts without verification. The connected Red Hat and NVD re...
CVE-2003-1040
kmod in the Linux kernel does not set its uid, suid, gid, or sgid to 0, which allows local users to cause a denial of service crash by sending certain signals to kmod...
CVE-2003-1040
kmod in the Linux kernel does not set its uid, suid, gid, or sgid to 0, which allows local users to cause a denial of service crash by sending certain signals to kmod...
CVE-2003-1040
CVE-2003-1040 concerns kmod in the Linux kernel failing to set its uid, suid, gid, and sgid to 0. This can enable a local attacker to cause a denial-of-service condition (kernel crash) by sending certain signals to kmod. The associated public material confirms the issue in the kernel around 2.4.x...
CVE-2002-1040
Unknown vulnerability in the WebSecure DFSWeb configuration utilities in AIX 4.x, possibly related to relative pathnames...
CVE-2001-1040
CVE-2001-1040 affects HP LaserJet and possibly other JetDirect devices, where certain power-off behavior resets the admin password. The result is that a remote attacker could gain administrative access without a password after the device is turned off, per the available description. The provided ...
CVE-2001-1040
HP LaserJet, and possibly other JetDirect devices, resets the admin password when the device is turned off, which could allow remote attackers to access the device without the password...
CVE-1999-1040
The CVE-1999-1040 entry affects NetWare Client 1.0 on IRIX 6.3/6.4, where local users can gain root rights by manipulating an IFS environment variable in the components ipxchk and ipxlink. The vulnerability is described as a local privilege escalation, but the provided documents do not specify af...