78 matches found
CVE-2008-1047
Cross-site scripting XSS vulnerability in tiki-editarticle.php in TikiWiki before 1.9.10.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2008-1047
Cross-site scripting XSS vulnerability in tiki-editarticle.php in TikiWiki before 1.9.10.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2008-1047
The CVE-2008-1047 entry describes a Cross-site Scripting (XSS) vulnerability in TikiWiki’s tiki-edit_article.php, affected in versions prior to 1.9.10.1. The issue allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. The provided connected documents confirm the ...
CVE-2008-1047
Cross-site scripting XSS vulnerability in tiki-editarticle.php in TikiWiki before 1.9.10.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2007-1047
Unspecified vulnerability in Distributed Checksum Clearinghouse DCC before 1.3.51 allows remote attackers to delete or add hosts in /var/dcc/maps...
CVE-2007-1047
Distributed Checksum Clearinghouse (DCC) before 1.3.51 is affected by an unspecified vulnerability that enables remote attackers to delete or add hosts in /var/dcc/maps. The CVE entry notes a network-accessible impact with partial confidentiality/integrity/availability implications (CVSS2 base sc...
Debian DSA-1047-1 : resmgr - programming error
A problem has been discovered in resmgr, a resource manager library daemon and PAM module, that allows local users to bypass access control rules and open any USB device when access to one device was granted. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package...
CVE-2006-1047
Unspecified vulnerability in the "Remember Me login functionality" in Joomla! 1.0.7 and earlier has unknown impact and attack vectors...
CVE-2006-1047
CVE-2006-1047 concerns Joomla! 1.0.7 and earlier, with an unspecified vulnerability in the Remember Me login functionality. The connected sources confirm the affected product and component, but describe the impact and attack vectors as unknown and do not provide a concrete root cause, exploit det...
CVE-2005-1047
CVE-2005-1047 concerns a vulnerability in the phpBB 2.0.x up.php file upload mod. The issue is that the upload script does not properly restrict file types, allowing remote authenticated users to upload executable PHP files and subsequently access them from the uploads directory to execute arbitr...
phpBB up.php Arbitrary File Upload
The installed version of phpBB on the remote host includes a file upload script intended as a way for users to upload files that they can then link to in their posts. The script, however, does not require authentication, makes only a limited check of upload file types, and stores uploads in a kno...
CVE-2002-1047
The FTP service in Watchguard Soho Firewall 5.0.35a allows remote attackers to gain privileges with a correct password but an incorrect user name...
CVE-2002-1047
The CVE-2002-1047 entry concerns the FTP service in Watchguard Soho Firewall 5.0.35a. The vulnerability, as described in multiple sources, allows remote attackers to gain privileges when supplying a correct password but an incorrect user name. The available documents do not specify the exact root...
CVE-2001-1047
OpenBSD kernel VFS is impacted by a race condition that can lead to a local denial of service (kernel panic). The vulnerability arises when (1) a pipe is created in one thread and another thread closes/sets a descriptor to NULL, or (2) dup2 is used on a descriptor in one process and it is later s...
CVE-2001-1047
Race condition in OpenBSD VFS allows local users to cause a denial of service kernel panic by 1 creating a pipe in one thread and causing another thread to set one of the file descriptors to NULL via a close, or 2 calling dup2 on a file descriptor in one process, then setting the descriptor to NU...
CVE-2000-1047
Buffer overflow in SMTP service of Lotus Domino 5.0.4 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a long ENVID keyword in the "MAIL FROM" command...
CVE-2000-1047
The CVE-2000-1047 issue affects Lotus Domino’s SMTP service (versions 5.0.4 and earlier). The root cause is improper validation of the ENVID parameter in a MAIL FROM command, allowing a remote, unauthenticated attacker to trigger a buffer overflow. Consequences documented in the Nessus plugin inc...