CVE-2012-1224

CVE-2012-1224 affects ContentLion Alpha 1.3; vulnerability is an XSS in the login script (system/classes/login.php) exploitable via PATH_INFO. This allows remote attackers to inject arbitrary web script or HTML. Exploit details, affected versions beyond 1.3, and remediation are not provided in th...

Ubuntu: Security Advisory (USN-1224-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2011-1224

IBM WebSphere MQ 6.0 before 6.0.2.11 and 7.0 before 7.0.1.5 do not use the CRL Distribution Points (CDP) certificate extension, which might allow man-in-the-middle attackers to spoof an SSL partner via a revoked certificate for a (1) client, (2) queue manager, or (3) application. No further techn...

CVE-2010-1224

main/acl.c in Asterisk Open Source 1.6.0.x before 1.6.0.25, 1.6.1.x before 1.6.1.17, and 1.6.2.x before 1.6.2.5 does not properly enforce remote host access controls when CIDR notation "/0" is used in permit= and deny= configuration rules, which causes an improper arithmetic shift and might allow...

CVE-2010-1224

CVE-2010-1224 affects Asterisk Open Source through the ACL code at main/acl.c. Versions 1.6.0.x before 1.6.0.25, 1.6.1.x before 1.6.1.17, and 1.6.2.x before 1.6.2.5 fail to correctly enforce remote host access controls when using CIDR "/0" in permit= and deny= rules, due to an improper arithmetic...

Trend Micro OfficeScan URL Filtering Engine Buffer Overflow Vulnerability

This host has Trend Micro OfficeScan running which is prone to Buffer Overflow vulnerability. OpenVAS Vulnerability Test $Id: secpodtrendmicroofficescanurlfiltbofvuln.nasl 5368 2017-02-20 14:34:16Z cfi $ Trend Micro OfficeScan URL Filtering Engine Buffer Overflow Vulnerability Authors: Veerendra ...

CVE-2009-1224

CVE-2009-1224 involves a SQL injection in vsp-core/pub/themes/bismarck/gamestat.php within the vsp stats processor version 0.45. The underlying issue is improper sanitization of the gameID parameter, allowing remote attackers to execute arbitrary SQL commands. The connected documents confirm the ...

CVE-2009-1224

creationtimestamp| type| source ---|---|--- 2009-03-31 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/8331...

CVE-2008-1224

CVE-2008-1224 is an XSS vulnerability affecting the BosClassifieds Classified Ads System 3.0, specifically in the account.php script where user-supplied input in the returnTo parameter can be used to inject arbitrary web script or HTML. The issue is described as a cross-site scripting flaw that c...

Debian: Security Advisory (DSA-1224-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2007-1224

Grok Developments NetProxy 4.03 allows remote attackers to bypass URL filtering via a request that omits "http://" from the URL and specifies the destination port :80...

CVE-2007-1224

CVE-2007-1224 affects Grok Developments’ NetProxy 4.03. Affected component: the proxy’s URL filtering logic. The issue allows remote attackers to bypass URL filtering by issuing a request that omits the http:// prefix and specifies the destination port as :80, effectively evading restrictions. Th...

Debian DSA-1224-1 : mozilla - several vulnerabilities

Several security related problems have been discovered in Mozilla and derived products. The Common Vulnerabilities and Exposures project identifies the following vulnerabilities : - CVE-2006-4310 Tomas Kempinsky discovered that malformed FTP server responses could lead to denial of service. -...

CVE-2006-1224

CVE-2006-1224 : Directory traversal in GuppY 4.5.11 through dwnld.php allows remote attackers to overwrite arbitrary files via a mixed-encoded "%2E." in the pg parameter. Impact noted as possible partial integrity impact; no remediation details provided in the supplied documents. No exploitation ...

CVE-2003-1224

BEA WebLogic Server/Express 7.0 and 7.0.0.1 are affected by CVE-2003-1224 due to a bug in the JDBCConnectionPoolRuntimeMBean where the password is displayed on screen in cleartext. This allows local observers to read a user’s password via shoulder surfing. The vulnerability is classified with a l...

CVE-2003-1224

Weblogic.admin for BEA WebLogic Server and Express 7.0 and 7.0.0.1 displays the JDBCConnectionPoolRuntimeMBean password to the screen in cleartext, which allows attackers to read a user's password by physically observing "shoulder surfing" the screen...

CVE-2000-1224

CVE-2000-1224 affects Caucho Technology Resin 1.2 (and possibly earlier). The vulnerability allows remote attackers to view JSP source by requesting a .jsp file with special appended characters in the filename (examples include “..”, “%2e..”, “%81”, “%82”, and others). This indicates a likely imp...

DEBIAN-CVE-2004-1224

Off-by-one error in the mtrcurseskeyaction function for mtr 0.55 through 0.65 allows local users to hijack raw sockets, as demonstrated using the "s" keybinding, which leaves a buffer without a NULL terminator...

CVE-2004-1224

The CVE-2004-1224 entry concerns an off-by-one in the mtr_curses_keyaction function affecting MTR versions 0.55–0.65. This flaw can allow local attackers to hijack raw sockets via the 's' keybinding, leaving a buffer without a NULL terminator. Affected products are multiple CVE trackers (NVD, OSV...

CVE-2004-1224

Off-by-one error in the mtrcurseskeyaction function for mtr 0.55 through 0.65 allows local users to hijack raw sockets, as demonstrated using the "s" keybinding, which leaves a buffer without a NULL terminator...