CVE-2012-1225

Dolibarr CMS up to version 3.2.0 Alpha and earlier is affected by multiple SQL injection vulnerabilities that allow remote authenticated users to execute arbitrary SQL commands via two endpoints: list.php with the memberslist parameter and adherents/fiche.php with the rowid parameter. Root cause ...

CVE-2012-1225

creationtimestamp| type| source ---|---|--- 2012-02-10 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/36683...

Code injection

Unspecified vulnerability in HP Data Protector Notebook Extension 6.20 and Data Protector for Personal Computers 7.0 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1225...

Ubuntu Update for linux USN-1225-1

Ubuntu Update for Linux kernel vulnerabilities USN-1225-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN12251.nasl 7964 2017-12-01 07:32:11Z santu $ Ubuntu Update for linux USN-1225-1 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This...

Ubuntu: Security Advisory (USN-1225-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2011-1225

The CVE-2011-1225 issue affects the Windows kernel32k subsystem: specifically, win32k.sys in kernel-mode drivers allows local privilege escalation via a NULL pointer de-reference. Affected products include Windows XP (SP2–SP3), Windows Server 2003 (SP2), Windows Vista (SP1–SP2), Windows Server 20...

CVE-2010-1225

The CVE-2010-1225 issue affects Microsoft Virtual PC 2007 Gold/SP1, Virtual Server 2005 Gold/R2 SP1, and Windows Virtual PC. The root cause is a memory-management flaw where the VMM work-area memory is not properly protected from guest access, allowing context-dependent attackers to bypass some g...

CVE-2010-1225

creationtimestamp| type| source ---|---|--- 2010-03-17 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/11786...

CVE-2009-1225

CVE-2009-1225 concerns Turnkey Ebook Store 1.1, where the index.php search action is vulnerable to XSS through the keywords parameter. The root cause is unsanitized input that allows injection of arbitrary HTML/script. Exploitation details or in-wild status are not provided in the documents, and ...

CVE-2008-1225

WebCT Campus Edition 4.1.5.8 contains multiple XSS vulnerabilities when “Don’t wrap text” is enabled, allowing remote authenticated users to inject arbitrary script/HTML via a mail message or discussion board message. Root cause is input handling in the discussion/mail features; exploit details a...

Debian Security Advisory DSA 178-1 (heimdal)

The remote host is missing an update to heimdal announced via advisory DSA 178-1. OpenVAS Vulnerability Test $Id: deb1781.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 178-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

Debian Security Advisory DSA 178-1 (heimdal)

The remote host is missing an update to heimdal announced via advisory DSA 178-1. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian: Security Advisory (DSA-1225-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian DSA-1225-2 : mozilla-firefox - several vulnerabilities

This update covers packages for the little endian MIPS architecture missing in the original advisory. For reference please find below the original advisory text : Several security related problems have been discovered in Mozilla and derived products such as Mozilla Firefox. The Common...

[SECURITY] [DSA 1007-1] New drupal packages fix several vulnerabilities

-------------------------------------------------------------------------- Debian Security Advisory DSA 1007-1 [email protected] http://www.debian.org/security/ Martin Schulze March 17th, 2006 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1007-1] New drupal packages fix several vulnerabilities

-------------------------------------------------------------------------- Debian Security Advisory DSA 1007-1 [email protected] http://www.debian.org/security/ Martin Schulze March 17th, 2006 http://www.debian.org/security/faq -...

CVE-2006-1225

CVE-2006-1225 is a CRLF-injection vulnerability in Drupal (4.5.x up to 4.5.7/4.6.x up to 4.5.7) that allows a remote attacker to inject headers into outgoing e‑mails and use Drupal as a spam proxy due to missing input sanitising. Debian DSA-1007-1 notes fixes in Drupal 4.5.3-6 (and 4.5.8-1 for si...

CVE-2003-1225

The vulnerability CVE-2003-1225 affects BEA WebLogic Server and Express 7.0 and 7.0.0.1, where the default CredentialMapper stores passwords in cleartext on disk, enabling local users to extract passwords. The related Nessus entry corroborates a local-access information disclosure risk, including...

CVE-2003-1225

The default CredentialMapper for BEA WebLogic Server and Express 7.0 and 7.0.0.1 stores passwords in cleartext on disk, which allows local users to extract passwords...

CVE-2005-1225

CVE-2005-1225 is an SQL injection vulnerability affecting Coppermine Photo Gallery 1.3.2, where the vulnerability exists in the way the server processes the favs parameter sent to either init.inc.php or zipdownload.php . The affected component is the web application’s PHP code handling these scri...