91 matches found
CVE-2003-1290
BEA WebLogic Server and WebLogic Express 6.1, 7.0, and 8.1, with RMI and anonymous admin lookup enabled, allows remote attackers to obtain configuration information by accessing MBeanHome via the Java Naming and Directory Interface JNDI...
CVE-2003-1290
BEA WebLogic Server/Express 6.1, 7.0, 8.1 with RMI and anonymous admin lookup enabled is vulnerable to remote disclosure of configuration information via MBeanHome using JNDI. The issue stems from access to MBeanHome over JNDI that allows an attacker to obtain configuration details. Affected prod...
CVE-2005-1290
CVE-2005-1290 affects phpBB 2.0.14 and earlier. It has multiple XSS vulnerabilities allowing remote attackers to inject arbitrary script/HTML via: (1) the u parameter in profile.php, (2) the highlight parameter in viewtopic.php, and (3) the forumname or forumdesc parameters in admin_forums.php. T...
CVE-2004-1290
CVE-2004-1290 describes a buffer overflow in the process_moves function of pgn2web.c in pgn2web 0.3, enabling remote attackers to execute arbitrary code via a crafted PGN file. No patch/version remediation details are provided in the connected documents. The CVSS metrics indicate a high-severity,...
CVE-2003-1290
BEA WebLogic Server and WebLogic Express 6.1, 7.0, and 8.1, with RMI and anonymous admin lookup enabled, allows remote attackers to obtain configuration information by accessing MBeanHome via the Java Naming and Directory Interface JNDI...
CVE-2002-1290
The Microsoft Java implementation, as used in Internet Explorer, allows remote attackers to read and modify the contents of the Clipboard via an applet that accesses the 1 ClipBoardGetText and 2 ClipBoardSetText methods of the INativeServices class...
CVE-2002-1290
The Microsoft Java implementation, as used in Internet Explorer, allows remote attackers to read and modify the contents of the Clipboard via an applet that accesses the 1 ClipBoardGetText and 2 ClipBoardSetText methods of the INativeServices class...
CVE-2002-1290
The CVE-2002-1290 entry describes a vulnerability in the Microsoft Java implementation used by Internet Explorer. An applet can abuse the INativeServices ClipBoardGetText/ClipBoardSetText interfaces to read and modify the user’s clipboard contents. This yields potential unauthorized disclosure an...
CVE-2001-1290
admin.cgi in Active Classifieds Free Edition 1.0, and possibly commercial versions, allows remote attackers to modify the configuration, gain privileges, and execute arbitrary Perl code via the tablewidth parameter...
CVE-1999-1290
CVE-1999-1290 affects the nftp FTP client (version 1.40). A buffer overflow is triggered by a long response string from a remote FTP server, enabling a denial of service and possibly arbitrary command execution. The provided documents describe the vulnerability and impact but do not specify explo...