116 matches found
Debian Security Advisory DSA 1348-1 (poppler)
The remote host is missing an update to poppler announced via advisory DSA 1348-1. OpenVAS Vulnerability Test $Id: deb13481.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1348-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...
Debian: Security Advisory (DSA-1348-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2003-1348
The CVE-2003-1348 entry describes a Cross-site Scripting (XSS) vulnerability in the guestbook.cgi component of ftls.org Guestbook 1.1. The issue allows remote attackers to inject arbitrary web script or HTML via the (1) comment, (2) name, or (3) title fields. Public references in the initial docu...
Debian DSA-1348-1 : poppler - integer overflow
It was discovered that an integer overflow in the xpdf PDF viewer may lead to the execution of arbitrary code if a malformed PDF file is opened. poppler includes a copy of the xpdf code and required an update as well. The oldstable distribution sarge doesn't include poppler. %NASLMINLEVEL 70300 C...
CVE-2006-1348
The CVE-2006-1348 entry relates to gCards (PHP)
Immunity Canvas: MEWEBMAIL
Name| MEWebMail ---|--- CVE| CVE-2005-1348 Exploit Pack| CANVAS Description| MailEnable WebMail Authorization Buffer Overflow Notes| References: Found by CorryL of www.x0n3-h4ck.org CVE Name: CVE-2005-1348 VENDOR: MailEnable Repeatability: This is a repeatable exploit given that the node is...
CVE-2005-1348
CVE-2005-1348 corresponds to a buffer overflow in MailEnable’s HTTPMail service. Concrete details: affected products are MailEnable Enterprise (versions 1.04 and earlier) and MailEnable Professional (versions 1.54 and earlier). The overflow occurs via a long HTTP Authorization header, allowing a ...
CVE-2004-1348
Technical details are not publicly available in the provided documents for CVE-2004-1348. Monitor for updates in the CVE/NVD records.
CVE-2004-1348
Unknown vulnerability in in.named on Solaris 8 allows remote attackers to cause a denial of service process crash...
CVE-2002-1348
CVE-2002-1348 affects w3m prior to 0.3.2.2, where HTML escaping in IMG ALT attributes is insufficient, potentially allowing remote attackers to access local files or cookies. Connected advisories (Debian DSA for w3m/w3mmee) confirm multiple Debian advisories addressing this vulnerability and indi...
CVE-2003-1348
Cross-site scripting XSS vulnerability in guestbook.cgi in ftls.org Guestbook 1.1 allows remote attackers to inject arbitrary web script or HTML via the 1 comment, 2 name, or 3 title field...
CVE-2002-1404
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2002-1348. Reason: This candidate is a reservation duplicate of CVE-2002-1348. Notes: All CVE users should reference CVE-2002-1348 instead of this candidate. All references and descriptions in this candidate have been removed to...
CVE-2001-1348
TWIG 2.6.2 and earlier are vulnerable to SQL injection via the id parameter, allowing remote attackers to perform unauthorized database operations. The issue is documented against TWIG, with a remote, network-exploitable vector and potential data integrity/ confidentiality impacts. No remediation...
CVE-1999-1348
Technical details about CVE-1999-1348 are not publicly provided in the supplied documents. Monitor for updates; the available records describe the issue at a high level without specific impact, affected products, or remediation.