CVE-2009-1257

creationtimestamp| type| source ---|---|--- 2009-04-03 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/8343 2009-04-16 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/8462...

CVE-2008-1257

CVE-2008-1257 is a cross-site scripting (XSS) vulnerability affecting ZyXEL P-660HW series routers, exploitable via the PingIPAddr parameter under Forms/DiagGeneral_2. Attackers can inject arbitrary web script or HTML in the router’s web interface. According to the connected NVD entry, the affect...

Debian: Security Advisory (DSA-1257-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Samba服务器VFS插件afsacl.so远程格式串处理漏洞

Samba是一套实现SMB（Server Messages Block）协议、跨平台进行文件共享和打印共享服务的程序。 Samba的VFS插件afsacl.so库在处理文件名时存在格式串漏洞，攻击者可能利用此漏洞诱使用户处理恶意的VFS分区控制服务器。 Samba在调用snprintf时将磁盘上所储存的文件名用作了格式串，如果用户能够写入的共享使用Samba的afsacl.so库对AFS文件系统上的文件设置Windows NT访问控制列表的话，就可能通过文件名中的格式串标识符导致执行任意代码。 这个漏洞仅影响与CIFS共享了AFS文件系统并在smb.conf中明确要求加载afsacl.s...

Microsoft Commerce Server 2002 authfiles/login.asp Authentication Bypass

The version of Microsoft Commerce Server 2002 installed on the remote host may enable an attacker to bypass authentication if the sample files from the 'AuthFiles' folder are installed under the web server's document root. Note that successful exploitation of this issue requires knowledge of the...

CVE-2006-1257

The sample files in the authfiles directory in Microsoft Commerce Server 2002 before SP2 allow remote attackers to bypass authentication by logging in to authfiles/login.asp with a valid username and any password, then going to the main site twice...

CVE-2003-1257

The CVE-2003-1257 issue concerns the script find_theni_home.php in E-theni that allows remote attackers to obtain sensitive system information by requesting a URL that executes phpinfo. The connected Red Hat advisory and CVE records corroborate that a remote information disclosure is possible via...

CVE-2003-1257

findthenihome.php in E-theni allows remote attackers to obtain sensitive system information via a URL request which executes phpinfo...

CVE-2004-1257

CVE-2004-1257 affects abc2mtex 1.6.1. A stack overflow vulnerability is caused by an unsafe strcpy in abc.c:241, allowing an attacker to overwrite the return address from openIn via a long input filename. Exploit evidence exists (Exploit-DB/PacketStorm) demonstrating command-line stack overflow w...

CVE-2002-1257

The CVE-2002-1257 issue affects Microsoft Virtual Machine (VM) up to and including build 5.0.3805. A remote attacker could deliver a Java applet that invokes COM objects on a web page or HTML email, allowing arbitrary code execution on the affected host. The vulnerability is severity high/critica...

CVE-2002-1257

Microsoft Virtual Machine VM up to and including build 5.0.3805 allows remote attackers to execute arbitrary code by including a Java applet that invokes COM Component Object Model objects in a web site or an HTML mail...

CVE-2001-1257

The CVE-2001-1257 entry affects the Horde IMP web-based IMAP client, with vulnerable versions before 2.2.6 and 1.2.6. The underlying issue is a cross-site scripting (XSS) flaw that allows an attacker to embed JavaScript in an email, which could execute in a user’s browser when viewing the message...

CVE-2001-1257

Cross-site scripting vulnerability in Horde Internet Messaging Program IMP before 2.2.6 and 1.2.6 allows remote attackers to execute arbitrary Javascript embedded in an email...

CVE-1999-1257

Xyplex terminal server 6.0.1S1 (and possibly other versions) is affected by an authentication bypass vulnerability. Remote attackers can bypass the password prompt by entering either a CTRL-Z character or a question mark (?), as described in CVE-1999-1257. The available documents confirm the affe...

CVE-1999-1257

Xyplex terminal server 6.0.1S1, and possibly other versions, allows remote attackers to bypass the password prompt by entering 1 a CTRL-Z character, or 2 a ? question mark...

CVE-2001-1257

Cross-site scripting vulnerability in Horde Internet Messaging Program IMP before 2.2.6 and 1.2.6 allows remote attackers to execute arbitrary Javascript embedded in an email...

CVE-1999-1257

Xyplex terminal server 6.0.1S1, and possibly other versions, allows remote attackers to bypass the password prompt by entering 1 a CTRL-Z character, or 2 a ? question mark...