90 matches found
CVE-2010-1314
creationtimestamp| type| source ---|---|--- 2010-04-06 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/12086...
CVE-2009-1314
body.asp in Web File Explorer 3.1 allows remote attackers to create arbitrary files and execute arbitrary code via the savefile action with a file parameter containing a filename that has an executable extension...
CVE-2009-1314
creationtimestamp| type| source ---|---|--- 2009-04-09 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/8382...
CVE-2008-1314
CVE-2008-1314 affects the Johannes Hass gaestebuch 2.2 module for PHP-Nuke. The root cause is an SQL injection in the edit action of modules.php, exploitable via the id parameter. The vulnerability allows remote attackers to execute arbitrary SQL commands. NVD assigns a CVSSv2 base score of 7.5 (...
CVE-2008-1314
creationtimestamp| type| source ---|---|--- 2008-03-01 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/31322...
Debian Security Advisory DSA 1314-1 (open-iscsi)
The remote host is missing an update to open-iscsi announced via advisory DSA 1314-1. OpenVAS Vulnerability Test $Id: deb13141.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1314-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...
Debian: Security Advisory (DSA-1314-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Default configuration
The default configuration of Centre for Speech Technology Research CSTR Festival 1.95 beta aka 2.0 beta on Gentoo Linux, SUSE Linux, and possibly other distributions, is run locally with elevated privileges without requiring authentication, which allows local and remote attackers to execute...
DEBIAN-CVE-2007-4074
The default configuration of Centre for Speech Technology Research CSTR Festival 1.95 beta aka 2.0 beta on Gentoo Linux, SUSE Linux, and possibly other distributions, is run locally with elevated privileges without requiring authentication, which allows local and remote attackers to execute...
CVE-2007-4074
The default configuration of Centre for Speech Technology Research CSTR Festival 1.95 beta aka 2.0 beta on Gentoo Linux, SUSE Linux, and possibly other distributions, is run locally with elevated privileges without requiring authentication, which allows local and remote attackers to execute...
CVE-2007-4074
The default configuration of Centre for Speech Technology Research CSTR Festival 1.95 beta aka 2.0 beta on Gentoo Linux, SUSE Linux, and possibly other distributions, is run locally with elevated privileges without requiring authentication, which allows local and remote attackers to execute...
Debian DSA-1314-1 : open-iscsi - several vulnerabilities
Several local and remote vulnerabilities have been discovered in open-iscsi, a transport-independent iSCSI implementation. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2007-3099 Olaf Kirch discovered that due to a programming error access to the...
CVE-2003-1314
The CVE-2003-1314 entry describes a PHP remote file inclusion vulnerability in EternalMart Guestbook (EMGB) 1.1. The flaw exists in admin/auth.php and allows an attacker to execute arbitrary PHP code by supplying a URL in the emgb_admin_path parameter. This is a web-based remote issue leveraging ...
Microsoft Server Service MailSlot Heap Overflow (MS06-035; CVE-2006-1314)
...
Microsoft Windows RASMAN Service Memory Corruption (MS06-025; CVE-2006-1314)
RASMAN Remote Access Service Manager is a service that handles the details of establishing the connection to the remote server. This service also provides the client with status information during the connection operation. A vulnerability exists in RASMAN service that would allow an attacker who...
MS-RPC Programs Lookup (CVE-2006-1314)
DCE/RPC stands for Distributed Computing Environment / Remote Procedure Calls. It is a Remote Procedure Call system that allows software to work across multiple computers, as if it were all working on the same computer. This system allows programmers to write distributed software without having t...
MS06-035: Vulnerability in Server Service Could Allow Remote Code Execution (917159) (uncredentialed check)
The remote host is vulnerable to heap overflow in the 'Server' service that may allow an attacker to execute arbitrary code on the remote host with 'SYSTEM' privileges. In addition to this, the remote host is also affected by an information disclosure vulnerability in SMB that may allow an attack...
CVE-2006-1314
Heap-based buffer overflow in the Server Service SRV.SYS driver in Microsoft Windows 2000 SP4, XP SP1 and SP2, Server 2003 up to SP1, and other products, allows remote attackers to execute arbitrary code via crafted first-class Mailslot messages that triggers memory corruption and bypasses size...
CVE-2006-1314
Heap-based buffer overflow in the Server Service SRV.SYS driver in Microsoft Windows 2000 SP4, XP SP1 and SP2, Server 2003 up to SP1, and other products, allows remote attackers to execute arbitrary code via crafted first-class Mailslot messages that triggers memory corruption and bypasses size...
CVE-2006-1314
CVE-2006-1314 is a heap-based buffer overflow in the Windows Server Service (SRV.SYS) that affects Windows 2000 SP4, XP SP1/SP2, and Server 2003 (up to SP1). The vulnerability allows remote code execution via crafted first-class Mailslot messages, triggering memory corruption and bypassing size r...