106 matches found
CVE-2009-1322
CVE-2009-1322 affects ASP Product Catalog 1.0 where sensitive data is stored under the web root with insufficient access control. An attacker can directly request database/aspProductCatalog.mdb to download a database containing user credentials. The connected records confirm the presence of this ...
CVE-2009-1322
creationtimestamp| type| source ---|---|--- 2009-04-13 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/8418...
CVE-2008-1322
The CVE-2008-1322 issue affects ASG-Sentry Network Manager, specifically the File Check Utility (fcheck.exe) bundled with versions up to 7.0.0. The connected Nessus entry documents that fcheck.exe fails to sanitize input when creating index files, allowing an unauthenticated remote attacker to ov...
CVE-2008-1322
creationtimestamp| type| source ---|---|--- 2008-03-10 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/5229...
Debian Security Advisory DSA 1284-1 (qemu)
The remote host is missing an update to qemu announced via advisory DSA 1284-1. OpenVAS Vulnerability Test $Id: deb12841.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1284-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...
Debian: Security Advisory (DSA-1284-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Debian DSA-1322-1 : wireshark - several vulnerabilities
Several remote vulnerabilities have been discovered in the Wireshark network traffic analyzer, which may lead to denial of service. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2007-3390 Off-by-one overflows were discovered in the iSeries dissector. -...
Debian DSA-1284-1 : qemu - several vulnerabilities
Several vulnerabilities have been discovered in the QEMU processor emulator, which may lead to the execution of arbitrary code or denial of service. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2007-1320 Tavis Ormandy discovered that a memory manageme...
CVE-2007-1322
QEMU 0.8.2 allows local users to halt a virtual machine by executing the icebp instruction...
CVE-2007-1322
QEMU 0.8.2 is affected by CVE-2007-1322: local users can halt a VM by executing the icebp instruction. Mandriva’s advisory MDVSA-2008:162 notes that updated packages fix these issues; the Tenable/NASL entries confirm this CVE is among multiple vulnerabilities in the 0.8.2 release. No exploit deta...
FreeBSD : qemu -- several vulnerabilities (0ac89b39-f829-11db-b55c-000e0c6d38a9)
The Debian Security Team reports : Several vulnerabilities have been discovered in the QEMU processor emulator, which may lead to the execution of arbitrary code or denial of service. The Common Vulnerabilities and Exposures project identifies the following problems : CVE-2007-1320Tavis Ormandy...
DSA-1284-1 qemu
Bulletin has no description...
CVE-2003-1322
CVE-2003-1322 concerns Atrium MERCUR IMAPD in MERCUR Mailserver up to version 4.2.15.0. The vulnerability is described as multiple stack-based buffer overflows in the IMAPD process that can be triggered by long commands, including: EXAMINE, DELETE, SUBSCRIBE, RENAME, UNSUBSCRIBE, LIST, LSUB, STAT...
CVE-2006-1322
Novell Netware NWFTPD 5.06.05 allows remote attackers to cause a denial of service ABEND via an MDTM command that uses a long path for the target file, possibly due to a buffer overflow...
CVE-2006-1322
The CVE-2006-1322 issue affects Novell Netware NWFTPD 5.06.05. The vulnerability is triggered when an MDTM command paths a target file with an unusually long path, potentially causing a buffer overflow that leads to a denial of service (ABEND). Public documents consistently describe this as a rem...
CVE-2005-1322
Cross-site scripting XSS vulnerability in Horde Nag Task List Manager before 1.1.3 allows remote attackers to inject arbitrary web script or HTML via the parent's frame page title...
CVE-2005-1322
Cross-site scripting XSS vulnerability in Horde Nag Task List Manager before 1.1.3 allows remote attackers to inject arbitrary web script or HTML via the parent's frame page title...
CVE-2005-1322
CVE-2005-1322 affects the Horde Nag Task List Manager prior to 1.1.3, where a cross-site scripting (XSS) flaw allows remote attackers to inject arbitrary script or HTML via the parent frame page title. The vulnerability arises in the Nag web interface’s handling of the parent frame title, enablin...
CVE-2004-1322
Cisco Unity 2.x–4.x (when integrated with Microsoft Exchange) is affected by hard coded usernames and passwords that enable remote unauthorized access and the ability to change configuration or read emails. The vulnerability is described across CVE-2004-1322 references from NVD and CVE records, i...
CVE-2004-1322
Cisco Unity 2.x, 3.x, and 4.x, when integrated with Microsoft Exchange, has several hard coded usernames and passwords, which allows remote attackers to gain unauthorized access and change configuration settings or read outgoing or incoming e-mail messages...