CVE-2008-1226

Zimbra Collaboration Suite (ZCS) versions 4.0.3 and 4.5.6 (and possibly earlier than 4.5.10) are affected by multiple XSS flaws that allow an attacker to inject arbitrary script via specially crafted email attachments (notably .jpg or .gif). The issue is a client-side vulnerability in which a rem...

Debian Security Advisory DSA 178-1 (heimdal)

The remote host is missing an update to heimdal announced via advisory DSA 178-1. OpenVAS Vulnerability Test $Id: deb1781.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 178-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

Debian Security Advisory DSA 178-1 (heimdal)

The remote host is missing an update to heimdal announced via advisory DSA 178-1. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian Security Advisory DSA 1226-1 (links)

The remote host is missing an update to links announced via advisory DSA 1226-1. Teemu Salmela discovered that the links character mode web browser performs insufficient sanitising of smb:// URIs, which might lead to the execution of arbitrary shell commands. OpenVAS Vulnerability Test $Id:...

CVE-2007-1226

CVE-2007-1226 affects McAfee VirusScan for Mac (Virex) prior to 7.7 patch 1, where /Library/Application Support/Virex/VShieldExclude.txt has weak permissions (0666). Local users could modify the exclude list and cause Virex to skip scanning of arbitrary files, impacting confidentiality/integrity/...

Debian DSA-1226-1 : links - insufficient escaping

Teemu Salmela discovered that the links character mode web browser performs insufficient sanitising of smb:// URIs, which might lead to the execution of arbitrary shell commands. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were...

[SECURITY] [DSA 1007-1] New drupal packages fix several vulnerabilities

-------------------------------------------------------------------------- Debian Security Advisory DSA 1007-1 [email protected] http://www.debian.org/security/ Martin Schulze March 17th, 2006 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1007-1] New drupal packages fix several vulnerabilities

-------------------------------------------------------------------------- Debian Security Advisory DSA 1007-1 [email protected] http://www.debian.org/security/ Martin Schulze March 17th, 2006 http://www.debian.org/security/faq -...

CVE-2006-1226

CVE-2006-1226 is a cross-site scripting (XSS) vulnerability in Drupal 4.5.x before 4.5.8 and 4.6.x before 4.5.8. Attackers can inject arbitrary web script or HTML via unknown attack vectors. The descriptions do not provide exploitation details. Remediation referenced in connected Debian advisorie...

CVE-2003-1226

The CVE-2003-1226 entry concerns BEA WebLogic Server and Express versions 7.0 and 7.0.0.1 where secrets used for password encryption are stored insecurely in config.xml, filerealm.properties, and weblogic-rar.xml. This storage flaw enables a local attacker to read those secrets and decrypt passwo...

CVE-2000-1226

Snort 1.6 is affected. In straight ASCII packet logging mode or IDS mode with straight decoded ASCII packet logging, remote attackers can cause a denial of service (crash) by sending non-IP protocols that Snort cannot recognize, as demonstrated by an nmap protocol scan. This vulnerability is docu...

CVE-2004-1226

SugarCRM Sugar Sales 2.0.1c and earlier allows remote attackers to gain sensitive information via certain requests to scripts that contain invalid input, which reveals the path in an error message, as demonstrated using phprint.php with an empty module parameter...

CVE-2004-1226

SugarCRM Sugar Sales 2.0.1c and earlier allows remote attackers to gain sensitive information via certain requests to scripts that contain invalid input, which reveals the path in an error message, as demonstrated using phprint.php with an empty module parameter...

CVE-2003-1226

BEA WebLogic Server and Express 7.0 and 7.0.0.1 stores certain secrets concerning password encryption insecurely in config.xml, filerealm.properties, and weblogic-rar.xml, which allows local users to learn those secrets and decrypt passwords...

CVE-2002-1226

Unknown vulnerabilities in Heimdal before 0.5 with unknown impact, possibly in the 1 kadmind and 2 kdc servers, may allow remote or local attackers to gain root or other access, but not via buffer overflows CVE-2002-1225...

CVE-2002-1226

Unknown vulnerabilities in Heimdal before 0.5 with unknown impact, possibly in the 1 kadmind and 2 kdc servers, may allow remote or local attackers to gain root or other access, but not via buffer overflows CVE-2002-1225...

CVE-2001-1226

CVE-2001-1226 affects AdCycle 1.17 and earlier. The vulnerability arises because user input is not adequately filtered before being used in MySQL queries, enabling remote attackers to execute arbitrary SQL and potentially read or modify data. The CERT/CC advisory confirms the issue and notes no p...

CVE-1999-1226

CVE-1999-1226 affects Netscape Communicator 4.7 and earlier. The vulnerability allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long certificate key. The connected sources do not provide concrete exploit code or in-the-wild details. Affected com...

CVE-2000-1226

Snort 1.6, when running in straight ASCII packet logging mode or IDS mode with straight decoded ASCII packet logging selected, allows remote attackers to cause a denial of service crash by sending non-IP protocols that Snort does not know about, as demonstrated by an nmap protocol scan...