CVE-2010-1354

Joomla! component com_vjdeo (VJDEO) 1.0 and 1.0.1 is affected by CVE-2010-1354: a Local File Inclusion via directory traversal (".." in the controller parameter to index.php) allows reading arbitrary files. The Nuclei template confirms this LFI vector and the affected component/version. Impact is...

CVE-2010-1354

creationtimestamp| type| source ---|---|--- 2010-04-07 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/12102...

SLES9: Security update for freeradius

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: freeradius For more information, please visit the referenced security advisories. More details may also be found by searching for keyword 5013351 within the...

CVE-2009-1354

CVE-2009-1354 describes a directory traversal vulnerability in Mongoose 2.4, where remote attackers can read arbitrary files through a .. in the URI. The NVD entry records a CVSSv2 base score of 4.0 (Medium) with network attack vector and low attack complexity; impact is partial confidentiality. ...

CVE-2009-1354

creationtimestamp| type| source ---|---|--- 2009-04-14 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/8428...

Gentoo Security Advisory GLSA 200604-03 (freeradius)

The remote host is missing updates announced in advisory GLSA 200604-03. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

FreeBSD Ports: freeradius

The remote host is missing an update to the system as announced in the referenced advisory. VID 1a216dfd-f710-11da-9156-000e0c2e438a OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

FreeBSD Ports: freeradius

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

CVE-2008-1354

The CVE-2008-1354 issue concerns SQL injection in MyIssuesView.asp of Advanced Data Solutions Virtual Support Office-XP (VSO-XP). The vulnerable component is the MyIssuesView.asp page, with the root cause described as unsafe handling of the Issue_ID parameter allowing arbitrary SQL execution. The...

CVE-2008-1354

creationtimestamp| type| source ---|---|--- 2008-03-13 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/31404...

Debian Security Advisory DSA 1354-1 (gpdf)

The remote host is missing an update to gpdf announced via advisory DSA 1354-1. OpenVAS Vulnerability Test $Id: deb13541.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1354-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

Debian DSA-1354-1 : gpdf - integer overflow

It was discovered that an integer overflow in xpdf PDF viewer may lead to the execution of arbitrary code if a malformed PDF file is opened. gpdf includes a copy of the xpdf code and requires an update as well. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package...

CVE-2007-1354

CVE-2007-1354 affects JBoss Application Server’s JMX Console (JBoss AS 4.0.2 and 4.0.5 before 20070416). The flaw is in JMXOpsAccessControlFilter, which stores the current user’s roles in a member variable, enabling a race condition where a remote authenticated administrator could log in during a...

FreeBSD : freeradius -- EAP-MSCHAPv2 Authentication Bypass (37a5c10f-bf56-11da-b0e9-00123ffe8333)

Freeradius Security Contact reports : Insufficient input validation was being done in the EAP-MSCHAPv2 state machine. A malicious attacker could manipulate their EAP-MSCHAPv2 client state machine to potentially convince the server to bypass authentication checks. This bypassing could also result ...

freeradius security update

CentOS Errata and Security Advisory CESA-2006:0271 Updated freeradius packages that fix an authentication weakness are now available. This update has been rated as having important security impact by the Red Hat Security Response Team. FreeRADIUS is a high-performance and highly configurable free...

Important: Red Hat Security Advisory: freeradius security update

Updated freeradius packages that fix an authentication weakness are now available. This update has been rated as having important security impact by the Red Hat Security Response Team. FreeRADIUS is a high-performance and highly configurable free RADIUS server designed to allow centralized...

RHEL 3 / 4 : freeradius (RHSA-2006:0271)

Updated freeradius packages that fix an authentication weakness are now available. This update has been rated as having important security impact by the Red Hat Security Response Team. FreeRADIUS is a high-performance and highly configurable free RADIUS server designed to allow centralized...

SUSE-SA:2006:019: freeradius

The remote host is missing the patch for the advisory SUSE-SA:2006:019 freeradius. Insufficient input validation was being done in the EAP-MSCHAPv2 state machine of the FreeRADIUS authentication server. A malicious attacker could manipulate their EAP-MSCHAPv2 client state machine to potentially...

CVE-2006-1354

CVE-2006-1354 affects FreeRADIUS 1.0.0–1.1.0. The root cause is insufficient input validation in the EAP-MSCHAPv2 state machine, allowing a remote attacker over the network to bypass authentication or cause a denial of service (server crash). Connected OpenVAS entries and advisories corroborate t...

CVE-2005-1354

CVE-2005-1354 concerns a vulnerability in the forum.pl script that allows remote attackers to execute arbitrary commands via shell metacharacters in the argument. The provided documents confirm this as a remote command‑execution flaw and do not specify affected vendor/product versions, mitigation...