94 matches found
CVE-2007-1164
CVE-2007-1164 affects DBImageGallery 1.2.2 and describes multiple PHP remote file inclusion vulnerabilities. The issue arises when the donsimg_base_path parameter is used to supply a URL for various scripts in admin/ (attributes.php, images.php, scan.php) or in includes/ (attributes.php, db_utils...
Debian DSA-1164-1 : sendmail - programming error
A programming error has been discovered in sendmail, an alternative mail transport agent for Debian, that could allow a remote attacker to crash the sendmail process by sending a specially crafted email message. Please note that in order to install this update you also need libsasl2 library from...
CVE-2006-1164
CVE-2006-1164 affects Nodez 4.6.1.1 and earlier. The vulnerability arises from storing sensitive data in the web document root in the file list.gtdat with insufficient access control, permitting remote attackers to directly access the file and obtain usernames and password hashes. This is a discl...
CVE-2003-1164
The vulnerability CVE-2003-1164 is an XSS flaw in Mldonkey 2.5-4, where an attacker can craft a URI that is reflected into the HTML error page. The affected software is Mldonkey (version 2.5-4). Underlying cause, impact, and concrete exploit details beyond the description are not provided in the ...
CVE-2003-1164
Cross-site scripting XSS vulnerability in Mldonkey 2.5-4 allows remote attackers to inject arbitrary web script or HTML via the URI, which is injected into the HTML error page...
CVE-2003-1164
Removed by vendor...
CVE-2004-1164
The lock manager in Cisco CNS Network Registrar 6.0 through 6.1.1.3 allows remote attackers to cause a denial of service process crash via a certain "unexpected packet sequence."...
CVE-2003-1164
Cross-site scripting XSS vulnerability in Mldonkey 2.5-4 allows remote attackers to inject arbitrary web script or HTML via the URI, which is injected into the HTML error page...
CVE-2001-1164
CVE-2001-1164 affects UnixWare 7, specifically the uucp utilities (uucp, uux, bnuconvert, uucico, uuxcmd, uuxqt). The issue is a buffer overflow triggered by long command-line arguments, allowing a local attacker to run arbitrary code. CVSS v2 base score is 7.2 (HIGH) with LOCAL attack vector, LO...
CVE-1999-1164
Microsoft Outlook client is affected by CVE-1999-1164, where processing multiple email messages with identical X-UIDL headers can cause the application to hang, resulting in a denial of service. The available documents confirm the DoS impact but do not provide concrete remediation steps or patche...
CVE-2001-1164
Buffer overflow in uucp utilities in UnixWare 7 allows local users to execute arbitrary code via long command line arguments to 1 uucp, 2 uux, 3 bnuconvert, 4 uucico, 5 uuxcmd, or 6 uuxqt...
CVE-2000-1164
The CVE-2000-1164 issue affects WinVNC, specifically the WinVNC3 registry key HKLM\Software\ORL\WinVNC3. The root cause is weak permissions that grant read/modify access to the Everybody group (and in some contexts to non-admin users), allowing extraction or alteration of the VNC password and oth...
CVE-2000-1164
WinVNC installs the WinVNC3 registry key with permissions that give Special Access read and modify to the Everybody group, which allows users to read and modify sensitive information such as passwords and gain access to the system...
