Scrutinizer 8.6.2 Bypass / Cross Site Scripting / SQL Injection

Trustwave SpiderLabs Security Advisory TWSL2012-008: Multiple Vulnerabilities in Scrutinizer NetFlow & sFlow Analyzer https://www.trustwave.com/spiderlabs/advisories/TWSL2012-008.txt Published: 04/11/12 Version: 1.0 Vendor: Plixer International http://www.plixer.com Product: Scrutinizer NetFlow a...

Ubuntu Update for clamav USN-1258-1

Ubuntu Update for Linux kernel vulnerabilities USN-1258-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN12581.nasl 7964 2017-12-01 07:32:11Z santu $ Ubuntu Update for clamav USN-1258-1 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This...

Ubuntu: Security Advisory (USN-1258-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2011-1258

CVE-2011-1258 affects Microsoft Internet Explorer 6–8. The vulnerability arises from improper restriction of web scripting, enabling a user‑assisted attacker to disclose sensitive information from a different domain/zone via drag‑and‑drop. Impact is partial confidentiality loss. Remediation: appl...

CVE-2010-1258

CVE-2010-1258 arises from Internet Explorer 6–8 failing to determine the origin of script code, enabling a remote attacker to run script in a different domain/zone and potentially access user data. The primary entry is through crafted web content that exploits cross-domain context (Event Handler ...

SuSE 11 Security Update : OpenOffice_org (SAT Patch Number 1258)

This update of OpenOffice.org fixes potential buffer overflow in EMF parser code enhwmf.cxx, emfplus.cxx Thanks to Petr Mladek. Additionally Secunia reported an integer underflow CVE-2009-0200 and a buffer overflow CVE-2009-0201 that could be triggered while parsing Word documents. Also provides...

CVE-2009-1258

SQL injection vulnerability in the RD-Autos comrdautos component 1.5.7 for Joomla! allows remote attackers to execute arbitrary SQL commands via the makeid parameter in index.php. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2009-1258

SQL injection vulnerability in the RD-Autos comrdautos component 1.5.7 for Joomla! allows remote attackers to execute arbitrary SQL commands via the makeid parameter in index.php. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2009-1258

CVE-2009-1258 is a SQL injection vulnerability in the RD-Autos (com_rdautos) Joomla! component, version 1.5.7. The flaw allows remote attackers to execute arbitrary SQL commands via the makeid parameter in index.php. The incident is described with a CVSS 2.0 base score of 7.5 (HIGH) with network ...

CVE-2008-1258

CVE-2008-1258 is a cross-site scripting (XSS) vulnerability in the D-Link DI-604 router, affecting prim.htm via the rf parameter. Remote attackers could inject arbitrary web script/HTML through rf. The provided documents confirm the affected product and vulnerability mechanism; no remediation det...

Debian: Security Advisory (DSA-1258-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2007-1258

CVE-2007-1258 describes an unspecified vulnerability in Cisco IOS 12.2SXA/SXB/SXD/SXF and in MSFC2/MSFC2a/MSFC3 in Hybrid Mode on Cisco Catalyst 6000/6500 and Cisco 7600 series. The issue allows remote attackers on the local network segment to trigger a denial of service (software reload) by send...

Debian DSA-1258-1 : mozilla-thunderbird - several vulnerabilities

Several security related problems have been discovered in Mozilla and derived products such as Mozilla Firefox. The Common Vulnerabilities and Exposures project identifies the following vulnerabilities : - CVE-2006-6497 Several vulnerabilities in the layout engine allow remote attackers to cause ...

CVE-2006-1258

Cross-site scripting XSS vulnerability in phpMyAdmin 2.8.0.1 allows remote attackers to inject arbitrary web script or HTML via the settheme parameter...

CVE-2003-1258

The CVE-2003-1258 entry affects versatileBulletinBoard (vBB) versions 0.9.5 and 0.9.6. The vulnerability allows remote attackers to gain unauthorized administrative access by issuing a URL request with the uid parameter set to the webmaster uid, indicating an authentication/authorization bypass v...

CVE-2004-1258

Buffer overflow in the putwords function in subs.c for abcm2ps 3.7.20 allows remote attackers to execute arbitrary code via crafted ABC files...

CVE-2004-1258

This CVE-2004-1258 entry concerns abcm2ps 3.7.20. A buffer overflow in the put_words function (subs.c) permits remote attackers to execute arbitrary code via crafted ABC files. The issue is notable for its potential for arbitrary code execution with network-based access and no required authentica...

CVE-2003-1258

activate.php in versatileBulletinBoard vBB 0.9.5 and 0.9.6 allows remote attackers to gain unauthorized administrative access via a URL request with the uid parameter set to the webmaster uid...

CVE-2002-1258

CVE-2002-1258 affects Microsoft Virtual Machine (VM) up to build 5.0.3805, as used in Internet Explorer and other applications. The vulnerability allows remote attackers to read files via a Java applet whose CODEBASE parameter in the APPLET tag is spoofed, likely due to a parsing error. Documents...

CVE-2001-1258

CVE-2001-1258 affects the Horde IMP before 2.2.6. According to the Debian DSA-073-1 advisory and related sources, a hostile user who can place a publicly readable prefs.lang file on the Apache/PHP server can have that file executed as PHP code, enabling access to config data and potentially the H...