137 matches found
CVE-2011-1049
CVE-2011-1049 affects Hex-Rays IDA Pro versions 5.7 and 6.0, where the Mach-O input file loader contains a buffer overflow in its Mach-O parsing. The vulnerability can be triggered by a crafted Mach-O file and may allow user-assisted remote attackers to cause a crash (DoS) and potentially execute...
KLA10216 Multiple vulnerabilities in IDA Pro
Multiple critical vulnerabilities have been found in IDA Pro. Malicious users can exploit these vulnerabilities to cause denial of service, execute arbitrary code or conduct other unknown attacks. Below is a complete list of vulnerabilities 1. Unspecified vulnerabilities can be exploited from...
CVE-2010-1049
CVE-2010-1049 affects the Uiga Business Portal. The issue is multiple SQL injection vulnerabilities in the web application, exploitable via (1) the noentryid parameter to blog/index.php and (2) the p parameter to index2.php. This allows remote attackers to execute arbitrary SQL commands. The vuln...
CVE-2010-1049
creationtimestamp| type| source ---|---|--- 2010-02-07 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/11357...
Microsoft Windows LoadImage API Function Integer Overflow (CVE-2004-1049)
In terms of Microsoft Windows technology, a resource is binary data that can be added to the executable file of a Windows-based application. Graphical images such as icons, cursors and bitmaps are example of standard resources. Windows-based applications support loading and rendering of graphical...
CVE-2009-1049
CVE-2009-1049 affects Bloginator 1A, specifically the articleCall.php module. The connected Seebug entry documents a SQL injection vulnerability via the id parameter in articleCall.php, where input is interpolated into a query without proper sanitization, enabling remote attackers to execute arbi...
CVE-2009-1049
creationtimestamp| type| source ---|---|--- 2009-03-19 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/8243 2009-03-19 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/8244...
Gentoo Security Advisory GLSA 200703-23 (wordpress)
The remote host is missing updates announced in advisory GLSA 200703-23. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...
Gentoo Security Advisory GLSA 200703-23 (wordpress)
The remote host is missing updates announced in advisory GLSA 200703-23. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2008-1049
Technical details about CVE-2008-1049 are not publicly available in the provided documents. Monitor for updates from vendors and security bulletins to learn affected products, impact, and remediation once disclosed.
Debian: Security Advisory (DSA-1049-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2007-1049
CVE-2007-1049 is a cross-site scripting vulnerability in WordPress caused by wp_explain_nonce in the nonce AYS functionality (wp-includes/functions.php). Affected: WordPress 2.0 before 2.0.9 and 2.1 before 2.1.1. The flaw allows remote attackers to inject arbitrary script/HTML via the file parame...
Debian DSA-1049-1 : ethereal - several vulnerabilities
Gerald Combs reported several vulnerabilities in ethereal, a popular network traffic analyser. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2006-1932 The OID printing routine is susceptible to an off-by-one error. - CVE-2006-1933 The UMA and BER...
CVE-2006-1049
Multiple SQL injection vulnerabilities in the Admin functionality in Joomla! 1.0.7 and earlier allow remote authenticated administrators to execute arbitrary SQL commands via unknown attack vectors...
CVE-2006-1049
CVE-2006-1049 affects Joomla! Admin functionality in Joomla! 1.0.7 and earlier. The vulnerability is described as multiple SQL injection flaws that allow remote authenticated administrators to execute arbitrary SQL commands via unknown attack vectors. The record confirms affected software version...
CVE-2005-1049
Summary: CVE-2005-1049 describes multiple cross-site scripting (XSS) vulnerabilities in PostNuke 0.760-RC3 (and related RC4 variants) where an attacker can inject arbitrary HTML/JavaScript via the module parameter to admin.php or the op parameter to user.php. The issue is noted to exist when the ...
CVE-2004-1049
CVE-2004-1049 affects Microsoft Windows LoadImage API (cursor/icon handling). The vulnerability arises from an integer overflow when processing certain image resources (e.g., .ani, .ico, .cur, .bmp), which can lead to heap memory corruption and remote code execution if a user opens a crafted file...
CVE-2004-1049
Integer overflow in the LoadImage API of the USER32 Lib for Microsoft Windows allows remote attackers to execute arbitrary code via a .bmp, .cur, .ico or .ani file with a large image size field, which leads to a buffer overflow, aka the "Cursor and Icon Format Handling Vulnerability."...
CVE-2004-1049
Integer overflow in the LoadImage API of the USER32 Lib for Microsoft Windows allows remote attackers to execute arbitrary code via a .bmp, .cur, .ico or .ani file with a large image size field, which leads to a buffer overflow, aka the "Cursor and Icon Format Handling Vulnerability."...