CVE-2010-1114

CVE-2010-1114 describes multiple PHP remote file inclusion vulnerabilities in the Web Server Creator – Web Portal 0.1. An attacker can trigger code execution by supplying a URL to the (1) pg parameter in index.php and (2) the path parameter to news/form.php. The underlying root cause is inclusion...

SuSE 11 Security Update : MySQL (SAT Patch Number 1114)

the COMCREATEDB and COMDROPDB suffered from format string vulnerabilities. CVE-2009-2446 - the command line client was prone to cross-site scripting XSS attacks CVE-2008-4456 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted...

CentOS Update for samba CESA-2007:1114 centos3 x86_64

Check for the Version of samba OpenVAS Vulnerability Test CentOS Update for samba CESA-2007:1114 centos3 x8664 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it unde...

CVE-2008-1114

CVE-2008-1114 affects Vocera Communications wireless handsets when using PEAP; the client fails to validate the server certificate, enabling a remote wireless access point to perform MITM attacks and potentially capture hashed passwords. Root cause: lack of server-certificate validation in PEAP a...

Debian Security Advisory DSA 153-1 (mantis)

The remote host is missing an update to mantis announced via advisory DSA 153-1. OpenVAS Vulnerability Test $Id: deb1531.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 153-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

Debian Security Advisory DSA 1114-1 (hashcash)

The remote host is missing an update to hashcash announced via advisory DSA 1114-1. Andreas Seltenreich discovered a buffer overflow in hashcash, a postage payment scheme for email that is based on hash calculations, which could allow attackers to execute arbitrary code via specially crafted...

CVE-2007-1114

The CVE-2007-1114 entry describes a cross-site scripting issue in Microsoft Internet Explorer 7 where child frames inherit the page charset from the parent when the Content-Type header or META tag lacks a charset. This can enable XSS, demonstrated with UTF-7. The vulnerability affects how IE7 han...

Debian DSA-1114-1 : hashcash - buffer overflow

Andreas Seltenreich discovered a buffer overflow in hashcash, a postage payment scheme for email that is based on hash calculations, which could allow attackers to execute arbitrary code via specially crafted entries. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and...

CVE-2003-1114

The Session Initiation Protocol SIP implementation in Mediatrix Telecom VoIP Access Devices and Gateways running SIPv2.4 and SIPv4.3 firmware allows remote attackers to cause a denial of service or execute arbitrary code via crafted INVITE messages, as demonstrated by the OUSPG PROTOS c07-sip tes...

CVE-2003-1114

The CVE-2003-1114 entry concerns Mediatrix Telecom SIP implementations on VoIP Access Devices and Gateways with SIPv2.4/SIPv4.3 firmware. A remote attacker can cause a denial of service or execute arbitrary code by sending crafted INVITE messages, as demonstrated by the OUSPG PROTOS c07-sip tests...

CVE-2004-1114

CVE-2004-1114 : Affected software is Skype for Windows, versions 1.0.x.94–1.0.x.98. The issue is a buffer overflow in the handling of command line arguments, triggered by a long non-existent username in a callto:// URL. This could allow remote attackers to execute arbitrary code. The CVE is disti...

CVE-2002-1114

configinc2.php in Mantis before 0.17.4 allows remote attackers to execute arbitrary code or read arbitrary files via the parameters 1 gbottomincludepage, 2 gtopincludepage, 3 gcssincludefile, 4 gmetaincludefile, or 5 a cookie...

CVE-2002-1114

CVE-2002-1114 affects MantisBT prior to 0.17.4. The issue allows remote attackers to execute arbitrary code or read arbitrary files via config_inc2.php by supplying values for g_bottom_include_page, g_top_include_page, g_css_include_file, g_meta_include_file, or via a cookie. The vulnerability pa...

CVE-2001-1114

CVE-2001-1114 affects NetCode NC Book 0.2b, where the CGI script book.cgi vulnerable to remote command execution via shell metacharacters in the parameter. The underlying issue is that user-controlled input can be executed by the shell, enabling an attacker to run arbitrary commands on the serve...

CVE-2001-1114

book.cgi in NetCode NC Book 0.2b allows remote attackers to execute arbitrary commands via shell metacharacters in the "current" parameter...

CVE-1999-1114

CVE-1999-1114 concerns a buffer overflow in the Korn Shell (ksh) suid_exec program on IRIX 6.x and earlier (and possibly other OSes), enabling local users to gain root privileges. The vulnerability arises in the suid_exec component and has been documented in multiple sources (NVD, CVE, CVE List)....

CVE-2001-1114

book.cgi in NetCode NC Book 0.2b allows remote attackers to execute arbitrary commands via shell metacharacters in the "current" parameter...

CVE-2000-1114

Unify ServletExec AS v3.0C allows remote attackers to read source code for JSP pages via an HTTP request that ends with characters such as ".", or "+", or "%20"...

CVE-2000-1114

Unify ServletExec AS v3.0C allows remote attackers to read source code for JSP pages via an HTTP request that ends with characters such as ".", or "+", or "%20"...

CVE-2000-1114

The CVE-2000-1114 vulnerability affects Unify ServletExec AS v3.0C. A flaw in the HTTP handling allows remote attackers to read JSP source code by sending an HTTP request that ends with certain characters (e.g., ".", "+", or "%20"). This can expose source contents and partial confidentiality leak...