90 matches found
MS11-045: Vulnerabilities in Microsoft Excel Could Allow Remote Code Execution (2537146)
The remote Windows host is running a version of Microsoft Excel or Excel Viewer that is affected by several vulnerabilities. If an attacker can trick a user on the affected host into opening a specially crafted Excel file, he or she could leverage this issue to execute arbitrary code subject to t...
Microsoft Office Excel SELECTION Record Out Of Boundary (MS11-045; CVE-2011-1277)
Microsoft Excel is a popular spreadsheet application. A remote code execution vulnerability exists in the way that Microsoft Excel handles specially crafted Excel files. An attacker who successfully exploited this vulnerability could take complete control of an affected system. An attacker could...
Design/Logic Flaw
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2010-0751, CVE-2010-1277. Reason: this candidate was intended for one issue, but it was accidentally assigned to two different issues, one for libnids and another for Zabbix. Notes: All CVE users should consult CVE-2010-0751 libni...
CVE-2010-1277
SQL injection vulnerability in the user.authenticate method in the API in Zabbix 1.8 before 1.8.2 allows remote attackers to execute arbitrary SQL commands via the user parameter in JSON data to apijsonrpc.php...
CVE-2010-1277
SQL injection vulnerability in the user.authenticate method in the API in Zabbix 1.8 before 1.8.2 allows remote attackers to execute arbitrary SQL commands via the user parameter in JSON data to apijsonrpc.php...
CVE-2010-1277
Zabbix 1.8.x before 1.8.2 is affected by an SQL injection in the API’s user.authenticate via the JSON payload to api_jsonrpc.php. The issue allows remote attackers to execute arbitrary SQL commands. Per connected advisories, upgrade to the latest Zabbix package (Gentoo GLSA 201311-15 recommends &...
CVE-2010-1277
SQL injection vulnerability in the user.authenticate method in the API in Zabbix 1.8 before 1.8.2 allows remote attackers to execute arbitrary SQL commands via the user parameter in JSON data to apijsonrpc.php...
CVE-2009-1277
CVE-2009-1277 concerns Gravity Board X (GBX) 2.0 Beta. The vulnerability is a SQL injection in index.php via the member_id parameter in a viewprofile action, enabling remote attackers to execute arbitrary SQL commands. The entry notes that a separate board_id issue is covered by CVE-2008-2996. Co...
CVE-2009-1277
creationtimestamp| type| source ---|---|--- 2008-06-12 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/5791 2009-04-03 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/8350...
CVE-2008-1277
The CVE-2008-1277 issue affects MailEnable Professional Edition and Enterprise Edition up to version 3.13. The IMAP service (MEIMAPS.exe) is vulnerable when handling the SEARCH and APPEND commands without required arguments, causing a NULL pointer dereference and resulting in a denial of service....
CVE-2008-1277
creationtimestamp| type| source ---|---|--- 2008-03-07 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/31360...
Debian Security Advisory DSA 190-1 (wmaker)
The remote host is missing an update to wmaker announced via advisory DSA 190-1. OpenVAS Vulnerability Test $Id: deb1901.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 190-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...
Debian Security Advisory DSA 1277-1 (xmms)
The remote host is missing an update to xmms announced via advisory DSA 1277-1. Multiple errors have been found in the skin handling routines in xmms, the X Multimedia System. These vulnerabilities could allow an attacker to run arbitrary code as the user running xmms by inducing the victim to lo...
CVE-2007-1277
CVE-2007-1277 affects WordPress 2.1.1. It describes an externally introduced backdoor enabling remote command execution via two vectors: (1) eval injection in the ix parameter of wp-includes/feed.php, and (2) an untrusted passthru in the iz parameter of wp-includes/theme.php. Exploitation would g...
WordPress < 2.1.1 Multiple Script Backdoors
The version of WordPress installed on the remote host appears to include a backdoor that allows an unauthenticated, remote attacker to execute arbitrary code on the remote host, subject to the permissions of the web server user id. %NASLMINLEVEL 70300 Tenable Network Security, Inc...
Fedora Core 5 : elinks-0.11.0-2.4 (2006-1277)
Tue Nov 21 2006 Karel Zak 0.11.0-2.4 - fix 215734: CVE-2006-5925 elinks smb protocol arbitrary file access - Mon May 29 2006 Karel Zak 0.11.0-2.3 - add buildrequires bzip2-devel, expat-devel,libidn-devel Note that Tenable Network Security has extracted the preceding description block directly...
CVE-2006-1277
The CVE-2006-1277 entry describes a cross-site scripting (XSS) vulnerability in signup.php of @1 File Store 2006.03.07, where remote attackers can inject arbitrary web script or HTML via the real_name, email, or login parameters. The vulnerability is classified as XSS with a medium base score (CV...
CVE-2003-1277
CVE-2003-1277 describes cross-site scripting (XSS) in YaBB 1.5.0. The vulnerability allows remote attackers to execute arbitrary scripts as other users and potentially steal authentication information via cookies by injecting HTML/script into (1) news_icon of news_template.php and (2) threadid an...
