125 matches found
CVE-2009-1054
CVE-2009-1054 concerns an unspecified remote-code-execution vulnerability in JustSystems Ichitaro 13 (2004–2008), Lite2, and Ichitaro viewer 5.1.5.0 and earlier. The flaw allows a crafted file to execute arbitrary code and was observed in the wild via Trojan.Tarodrop.H (March 2009). Affected comp...
Fedora Update for mediawiki FEDORA-2007-1442
The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...
FreeBSD Ports: mod_access_referer
The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
FreeBSD Ports: mod_access_referer
The remote host is missing an update to the system as announced in the referenced advisory. VID af747389-42ba-11d9-bd37-00065be4b5b6 OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...
CVE-2008-1054
Stack-based buffer overflow in the libspawnusergetpid function in 1 swatch.exe and 2 surgemail.exe in NetWin SurgeMail 38k4 and earlier, and beta 39a, allows remote attackers to cause a denial of service daemon crash and possibly execute arbitrary code via an HTTP request with multiple long heade...
CVE-2008-1054
NetWin SurgeMail 38k4 and earlier (including swatch.exe and surgemail.exe; webmail.exe and unspecified CGI executables) are affected by a stack-based buffer overflow in the _lib_spawn_user_getpid function. The overflow is triggered by an HTTP request with multiple long headers, causing an overflo...
CVE-2007-1054
CVE-2007-1054 is an XSS vulnerability in MediaWiki 1.6.x–1.9.2 triggered by the AJAX path in index.php when $wgUseAjax is on; a remote attacker can inject arbitrary script/HTML via a UTF-7 encoded rs parameter, processed by Internet Explorer. The issue affects the AJAX features, with impact descr...
Apache HTTP Server 'mod_access_referer' 1.0.2 NULL Pointer Dereference Vulnerability
Apache HTTP Server running the SPDX-FileCopyrightText: 2003 Xue Yong Zhi Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:apache:httpserver"; ifdescription...
CVE-2005-1054
CVE-2005-1054 affects ModernBill prior to or including 4.3.0, allowing remote PHP code execution via a PHP remote file include through the DIR parameter in news.php when DIR is set to a URL. This is echoed by later related CVEs (e.g., CVE-2008-5060) describing similar PHP RFI vulnerabilities in M...
CVE-2003-1054
CVE-2003-1054 affects the Apache mod_access_referer module (version 1.0.2). A malformed Referer header missing a hostname can cause the ap_parse_uri_components function to trigger a NULL pointer dereference, resulting in denial of service (crash). The OpenVAS and NVD records corroborate the NULL-...
CVE-2003-1054
modaccessreferer 1.0.2 allows remote attackers to cause a denial of service crash via a malformed Referer header that is missing a hostname, as parsed by the apparseuricomponents function in Apache, which triggers a null dereference...
CVE-2003-1054
modaccessreferer 1.0.2 allows remote attackers to cause a denial of service crash via a malformed Referer header that is missing a hostname, as parsed by the apparseuricomponents function in Apache, which triggers a null dereference...
CVE-2002-1054
Directory traversal vulnerability in Pablo FTP server 1.0 build 9 and earlier allows remote authenticated users to list arbitrary directories via ".." dot-dot backslash sequences in a LIST command...
CVE-2002-1054
Directory traversal vulnerability in Pablo FTP server 1.0 build 9 and earlier allows remote authenticated users to list arbitrary directories via ".." dot-dot backslash sequences in a LIST command...
phpAdsNew helperfunction.php Remote File Inclusion
It is possible to make the remote host include PHP files hosted on a third-party server using PHPAdsNew. An attacker may use this flaw to inject arbitrary code in the remote host and gain a shell with the privileges of the HTTP server. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...
CVE-2001-1054
The CVE-2001-1054 vulnerability affects PHPAdsNew, allowing a remote attacker to include arbitrary PHP files hosted on third‑party servers via an HTTP request that sets the includedir variable. This constitutes a Remote File Inclusion flaw in the PHPAdsNew helperfunction.php context, enabling arb...
CVE-2001-1054
PHPAdsNew PHP script allows remote attackers to include arbitrary files from remote web sites via an HTTP request that sets the includedir variable...
CVE-1999-1054
The CVE-1999-1054 entry describes a vulnerability in FLEXlm license manager (default configuration) that allows remote attackers to shut down the server via the lmdown command. Affected: FLEXlm license manager 6.0d (and possibly other versions). Root cause: default configuration permits remote sh...