124 matches found
Critical: Red Hat Security Advisory: firefox security, bug fix, and enhancement update
An updated firefox package that addresses security issues, fixes bugs, adds numerous enhancements, and upgrades Firefox to version 3.6.4, is now available for Red Hat Enterprise Linux 4. The Red Hat Security Response Team has rated this update as having critical security impact. Common...
Mandriva Update for ldetect-lst MDVA-2010:125 (ldetect-lst)
Check for the Version of ldetect-lst OpenVAS Vulnerability Test Mandriva Update for ldetect-lst MDVA-2010:125 ldetect-lst Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or...
CentOS Security Advisory CESA-2009:1203 (subversion)
The remote host is missing updates to subversion announced in advisory CESA-2009:1203. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR...
CentOS Security Advisory CESA-2009:1203 (subversion)
The remote host is missing updates to subversion announced in advisory CESA-2009:1203. CESA-2009:1203 64663 2 $Id: ovcesa20091203.nasl 6650 2017-07-10 11:43:12Z cfischer $ Description: Auto-generated from advisory CESA-2009:1203 subversion Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft...
Important: Red Hat Security Advisory: subversion security update
Updated subversion packages that fix multiple security issues are now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having important security impact by the Red Hat Security Response Team. Subversion SVN is a concurrent version control system which enables one or mo...
CVE-2009-1203
Cisco ASA Web VPN Credential Theft (CVE-2009-1203): Affected ASA Web VPN on software 8.0(4), 8.1.2, and 8.2.1 could not distinguish its login screen from third‑party FTP/CIFS login prompts, enabling remote attackers to coax users into submitting credentials to an attacker‑controlled server via cr...
CVE-2009-1203
creationtimestamp| type| source ---|---|--- 2009-05-24 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/33054...
Adobe ColdFusion多个跨站脚本及无效日志漏洞
BUGTRAQ ID: 28205,28207 CVECAN ID: CVE-2008-0643,CVE-2008-0644,CVE-2008-1203 ColdFusion MX是一款高效的网络应用服务器开发环境，具有很高的易用性和开发效率，基于标准的Java技术，可以与XML、Web Services和Microsoft.NET环境相集成。 如果ColdFusion应用的Application.cfm或Application.cfc包含有setEncoding函数的话，远程攻击者就可以通过提交恶意请求执行跨站脚本攻击。...
CVE-2008-1203
The CVE-2008-1203 issue affects Adobe ColdFusion 8 and ColdFusion MX7 where the administrator interface does not log failed authentication attempts, potentially enabling brute‑force attacks without detection. Connected sources also document related issues in the same family (e.g., other CVEs in C...
CVE-2007-1203
CVE-2007-1203 is a remote code execution vulnerability in Microsoft Excel where specially crafted set font values in Excel files can cause memory corruption. Affected products include Excel 2000 (SP3), 2002 (SP3), 2003 (SP2), 2003 Viewer, and 2004 for Mac, plus Excel 2007. The root cause involves...
CVE-2007-1203
Unspecified vulnerability in Microsoft Excel 2000 SP3, 2002 SP3, 2003 SP2, 2003 Viewer, 2004 for Mac, and 2007 allows user-assisted remote attackers to execute arbitrary code via a crafted set font value in an Excel file, which results in memory corruption...
MS07-023: Vulnerabilities in Microsoft Excel Could Allow Remote Code Execution (934233)
The remote host is running a version of Microsoft Excel that is subject to various flaws which could allow arbitrary code to be run. An attacker may use this to execute arbitrary code on this host. To succeed, the attacker would have to send a rogue file to a user of the remote computer and have ...
Debian DSA-1203-1 : libpam-ldap - programming error
Steve Rigler discovered that the PAM module for authentication against LDAP servers processes PasswordPolicyReponse control messages incorrectly, which might lead to an attacker being able to login into a suspended system account. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descripti...
CVE-2006-1203
The CVE-2006-1203 entry concerns a PHP remote file include vulnerability in txtForum 1.0.4-dev and earlier. The issue allows an attacker to cause arbitrary PHP code execution via a URL passed to the skin parameter of login.php (and possibly other parameters) due to include statements in common.ph...
CVE-2003-1203
CVE-2003-1203 affects Mambo Site Server 4.0.10. A cross-site scripting vulnerability exists in index.php via the ?option parameter, enabling remote attackers to run script in other clients. OpenVAS entries document the XSS issue; NVD/NVD-derived entries confirm the same. No remediation or fix ver...
CVE-2004-1203
The CVE concerns phpCMS prior to 1.2.1. When non-stealth and debug modes are enabled, parsing in parser.php allows remote attackers to obtain the web server’s installation path by supplying an invalid file parameter, causing information disclosure. Affected software: phpCMS 1.2.1 and earlier. Roo...
CVE-2000-1203
The CVE-2000-1203 vulnerability affects Lotus Domino SMTP server versions 4.63–5.08. A remote attacker can trigger a denial-of-service (CPU consumption) by forging an email with the sender set to bounce@[127.0.0.1] (localhost), causing Domino to enter a mail loop. The available sources describe a...
Mambo Site Server 4.0.10 XSS
An attacker may use the installed version of Mambo Site Server to perform a cross-site scripting attack on this host. %NASLMINLEVEL 70300 This script was completely rewritten by Tenable Network Security, using a new API Message-ID: From: Ertan Kurt To: Subject: Some XSS vulns...
CVE-2002-1203
IBM SecureWay Firewall before 4.2.2 performs extra processing before determining that a packet is invalid and dropping it, which allows remote attackers to cause a denial of service resource exhaustion via a flood of malformed TCP packets without any flags set...