CVE-2010-1074

Cross-site scripting XSS vulnerability in the Currency Exchange module before 6.x-1.2 for Drupal allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, related to watchdog logging...

CVE-2010-1074

CVE-2010-1074 is a Cross-site scripting (XSS) vulnerability in the Drupal Currency Exchange module prior to 6.x-1.2. The issue allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, related to watchdog logging. Affected product: Drupal Currency Exchange module (ve...

CVE-2009-1074

CVE-2009-1074 affects Sun Java System Identity Manager (IdM) 7.0 through 8.0. The issue is that SSL is not used in all expected circumstances, enabling remote attackers to potentially obtain sensitive information by sniffing network traffic. The description notes related factors such as lack of s...

Immunity Canvas: GROUPE_INCLUDE

Name| groupeinclude ---|--- CVE| CVE-2008-1074 Exploit Pack| CANVAS Description| GROUP-E 1.6.41 remote file include Notes| CVE Name: CVE-2008-1074 VENDOR: Group-E Repeatability: Infinite References: http://packetstormsecurity.org/filedesc/groupe-rfi.txt.html CVE Url:...

CVE-2008-1074

PHP remote file inclusion vulnerability in lib/headauth.php in GROUP-E 1.6.41 allows remote attackers to execute arbitrary PHP code via a URL in the CFGPREPENDFILE parameter...

CVE-2008-1074

CVE-2008-1074 affects GROUP-E 1.6.41, where lib/head_auth.php fails to validate CFG[PREPEND_FILE], enabling remote inclusion of arbitrary files and potential PHP code execution. Root cause: inadequate input validation for the PREPEND_FILE parameter leading to local/remote file inclusion. Impact: ...

Debian: Security Advisory (DSA-1082-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2007-1074

Multiple buffer overflows in NewsBin Pro 5.33 and NewsBin Pro 4.x allow user-assisted remote attackers to execute arbitrary code via a long 1 DataPath or 2 DownloadPath attributed in a a NBI file, or 3 a long group field in a b NZB file...

CVE-2007-1074

CVE-2007-1074 : Multiple buffer overflows in NewsBin Pro 5.33 and NewsBin Pro 4.x allow user‑assisted remote attackers to execute arbitrary code via a long DataPath or DownloadPath in an NBI file, or a long group field in an NZB file. The root cause is a memory/length handling overflow in the aff...

DSA-1067-1 kernel-source-2.4.16 - several

Bulletin has no description...

CVE-2006-1074

CVE-2006-1074 affects Jason Boettcher’s Liero Xtreme prior to 0.62b. The vulnerability allows remote attackers to cause a denial of service (application crash or hang) by sending a long argument to the connect command. The technical detail available in the provided documents confirms the trigger ...

CVE-2005-1074

CVE-2005-1074 : SQL injection in index.php for RadScripts RadBids Gold 2. An attacker can supply the mode parameter to remotely execute arbitrary SQL commands. Affected: RadScripts RadBids Gold 2; vulnerability arises in the index.php handling of mode. CVSSv2 base score 7.5 (HIGH) with network ac...

CVE-2003-1074

Unknown vulnerability in newtask for Solaris 9 allows local users to gain root privileges...

CVE-2003-1074

Technical details are not publicly available in the provided documents. Monitor for updates.

CVE-2004-1074

The binfmt functionality in the Linux kernel, when "memory overcommit" is enabled, allows local users to cause a denial of service kernel oops via a malformed a.out binary...

CVE-2004-1074

The binfmt functionality in the Linux kernel, when "memory overcommit" is enabled, allows local users to cause a denial of service kernel oops via a malformed a.out binary...

CVE-2004-1074

The CVE-2004-1074 issue is in the Linux kernel binfmt handling when memory overcommit is enabled. A malformed a.out binary can trigger a local denial of service (kernel oops). The available documents confirm this CVE is referenced in multiple advisories and vulnerability lists, but do not provide...

Mandrake Linux Security Advisory : webmin (MDKSA-2001:059)

Recently, Caldera found that when webmin starts a system daemon from the web frontend it does not clear its environment variables. Since these variables contain the authorization of the administrator, any daemon would also get these variables. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...

CVE-2001-1074

Summary: CVE-2001-1074 affects Webmin 0.84 and earlier. The vulnerability arises because Webmin does not properly clear the HTTP_AUTHORIZATION environment variable when the web server restarts, causing authentication information to be exposed to all CGI programs and enabling local privilege escal...

CVE-1999-1074

Webmin before 0.5 is affected: it does not restrict the number of invalid password attempts for a valid username, enabling remote attackers to attempt brute‑force password cracking and potentially gain privileges. The issue is described across CVE-1999-1074 records (CVE/NVD/CVELIST) and corrobora...