CVE-2004-1224

Off-by-one error in the mtrcurseskeyaction function for mtr 0.55 through 0.65 allows local users to hijack raw sockets, as demonstrated using the "s" keybinding, which leaves a buffer without a NULL terminator...

CVE-2002-1224

Directory traversal vulnerability in kpf for KDE 3.0.1 through KDE 3.0.3a allows remote attackers to read arbitrary files as the kpf user via a URL with a modified icon parameter...

CVE-2003-1224

Weblogic.admin for BEA WebLogic Server and Express 7.0 and 7.0.0.1 displays the JDBCConnectionPoolRuntimeMBean password to the screen in cleartext, which allows attackers to read a user's password by physically observing "shoulder surfing" the screen...

CVE-2001-1224

The CVE-2001-1224 entry concerns Les VanBrunt AdRotate Pro 2.0. The vulnerability is in get_input within adrotate.pm, allowing remote attackers to modify the database and potentially execute arbitrary commands via a SQL injection attack. This constitutes a client/server impact on data integrity a...

CVE-2001-1224

getinput in adrotate.pm for Les VanBrunt AdRotate Pro 2.0 allows remote attackers to modify the database and possibly execute arbitrary commands via a SQL code injection attack...

CVE-1999-1224

The vulnerability CVE-1999-1224 affects IMAP 4.1 BETA (and possibly other versions) where improper handling of the SIGABRT signal allows a local user to crash the imapd server, resulting in a core dump that may contain sensitive password information. This is a local-attack scenario with partial c...

CVE-2000-1224

Caucho Technology Resin 1.2 and possibly earlier allows remote attackers to view JSP source via an HTTP request to a .jsp file with certain characters appended to the file name, such as 1 "..", 2 "%2e..", 3 "%81", 4 "%82", and others...