94 matches found
CVE-2008-1334
CVE-2008-1334 affects the BT Home Hub router (and related Thomson/Alcatel SpeedTouch components) where an authentication bypass is possible by placing a character at the end of PATH_INFO. The vulnerability lets remote attackers bypass authentication and read/modify administrative settings or init...
CVE-2003-1334
CVE-2003-1334 affects Kai Blankenhorn’s Bitfolge (snif) index file before 1.2.7. The vulnerability is a cross-site scripting (XSS) flaw that allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. The connected documents confirm the issue but do not provide concret...
CVE-2006-1334
CVE-2006-1334 : Maian Weblog 2.0 has SQL injection in print.php and mail.php; vulnerable parameters are (1) entry and (2) email. Remote attackers could potentially execute arbitrary SQL. No patch/mitigation details are provided in the supplied documents; exploitation specifics are not described i...
CVE-2005-1334
CVE-2005-1334 is rejected/not used; it is a duplicate of CVE-2005-1579 and not an active vulnerability entry.
CVE-2004-1334
The CVE concerns the Linux kernel before 2.6.10, where the function ip_options_get is vulnerable to an integer overflow when cmsg_len is -1. This can be exploited by local users to trigger a kernel crash (DoS) via a crafted message length, leading to a buffer overflow. Affected component: kernel ...
CVE-2004-1334
Integer overflow in the ipoptionsget function in the Linux kernel before 2.6.10 allows local users to cause a denial of service kernel crash via a cmsglen that contains a -1, which leads to a buffer overflow...
CVE-2001-1334
PHPSlash 0.6.1 contains a vulnerability in Block_render_url.class that allows remote attackers with PHPSlash administrator privileges to read arbitrary files. By creating a block and specifying the target file as the source URL, an authenticated admin can exfiltrate local files. The CVE entry pro...
CVE-2002-1334
Cross-site scripting XSS vulnerability in BizDesign ImageFolio 3.01 and earlier allows remote attackers to execute arbitrary web script as other users via 1 the direct parameter in imageFolio.cgi, or 2 nph-build.cgi...
CVE-2002-1334
Cross-site scripting XSS vulnerability in BizDesign ImageFolio 3.01 and earlier allows remote attackers to execute arbitrary web script as other users via 1 the direct parameter in imageFolio.cgi, or 2 nph-build.cgi...
CVE-2002-1334
Technical details about CVE-2002-1334 are not publicly available in the provided documents. No vendor, product version, vulnerable component, or remediation is specified here. Monitor for updates in the connected sources.
CVE-1999-1334
CVE-1999-1334 : Multiple buffer overflows in the filter command of Elm 2.4 allow an attacker to execute arbitrary commands via (1) long From: headers, (2) long Reply-To: headers, or (3) a long -f (filterfile) command line argument. The connected sources confirm Elm 2.4 as the affected component a...
CVE-1999-1334
Multiple buffer overflows in filter command in Elm 2.4 allows attackers to execute arbitrary commands via 1 long From: headers, 2 long Reply-To: headers, or 3 via a long -f filterfile command line argument...
CVE-1999-1334
Multiple buffer overflows in filter command in Elm 2.4 allows attackers to execute arbitrary commands via 1 long From: headers, 2 long Reply-To: headers, or 3 via a long -f filterfile command line argument...