89 matches found
CVE-2011-1403
Cross-site request forgery CSRF vulnerability in the pieforms implementation in Mahara before 1.3.6 allows remote attackers to hijack the authentication of arbitrary users for requests to any form, related to inappropriate regeneration of session keys...
CVE-2011-1403
Cross-site request forgery CSRF vulnerability in the pieforms implementation in Mahara before 1.3.6 allows remote attackers to hijack the authentication of arbitrary users for requests to any form, related to inappropriate regeneration of session keys...
Apple iTunes < 9.2 Multiple Vulnerabilities (uncredentialed check)
The version of Apple iTunes on the remote host is prior to version 9.2. It is, therefore, affected by multiple vulnerabilities : - A heap-based buffer overflow vulnerability exists in the handling of images with an embedded ColorSync profile. By using a specially crafted image, a remote attacker...
CVE-2010-1403
CVE-2010-1403 affects WebKit in Apple Safari prior to 5.0 on Mac OS X 10.5–10.6 and Windows, and prior to 4.1 on Mac OS X 10.4. It arises from uninitialized memory access during processing of a use element in an SVG document (related to ProcessInstruction), allowing remote attackers to execute ar...
CVE-2010-1403
Removed by vendor...
CVE-2009-1403
SQL injection vulnerability in productinfo.php in CRE Loaded 6.2 allows remote attackers to execute arbitrary SQL commands via the productsid parameter...
CVE-2009-1403
SQL injection vulnerability in productinfo.php in CRE Loaded 6.2 allows remote attackers to execute arbitrary SQL commands via the productsid parameter...
CVE-2009-1403
creationtimestamp| type| source ---|---|--- 2009-04-21 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/8501...
CVE-2008-1403
CVE-2008-1403 involves a stack-based buffer overflow in the TFTP server component of BootManage TFTPD 1.99 and earlier and BootManage Administrator 7.1 and earlier. The vulnerability permits a remote attacker to execute arbitrary code by sending a request containing a long filename. The provided ...
CVE-2008-1403
creationtimestamp| type| source ---|---|--- 2008-03-17 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/31409...
Debian Security Advisory DSA 219-1 (dhcpcd)
The remote host is missing an update to dhcpcd announced via advisory DSA 219-1. OpenVAS Vulnerability Test $Id: deb2191.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 219-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...
Debian DSA-1403-1 : phpmyadmin - missing input sanitising
Omer Singer of the DigiTrust Group discovered several vulnerabilities in phpMyAdmin, an application to administrate MySQL over the WWW. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2007-5589 phpMyAdmin allows a remote attacker to inject arbitrary web...
CVE-2003-1403
The CVE-2003-1403 entry concerns DotBr 0.1: a vulnerability in foo.php3 that allows remote attackers to obtain sensitive information by making a direct request that triggers the phpinfo function. This exposes partial confidentiality and partial integrity/availability according to the NVD CVSS vec...
CVE-2003-1403
foo.php3 in DotBr 0.1 allows remote attackers to obtain sensitive information via a direct request, which calls the phpinfo function...
CVE-2007-4665
Unspecified vulnerability in the server in Firebird before 2.0.2 allows remote attackers to cause a denial of service daemon crash via an XNET session that makes multiple simultaneous requests to register events, aka CORE-1403...
CVE-2007-4665
Unspecified vulnerability in the server in Firebird before 2.0.2 allows remote attackers to cause a denial of service daemon crash via an XNET session that makes multiple simultaneous requests to register events, aka CORE-1403...
CVE-2007-4665
CVE-2007-4665 affects the Firebird server prior to 2.0.2. It allows a remote attacker to cause a denial of service (daemon crash) via an XNET session that issues multiple simultaneous requests to register events ( CORE-1403 ). The vulnerability is documented across multiple references and is miti...
CVE-2007-1403
The CVE-2007-1403 entry concerns the Macromedia Shockwave SwDir.dll ActiveX control (10.1.4.20) with remote denial of service and potential code execution via stack/buffer overflows in multiple properties (e.g., BGCOLOR, SRC, AutoStart, Sound, DrawLogo, DrawProgress). Connected advisories (CPAI-2...
CVE-2006-1403
CVE-2006-1403 affects csDoom (client/server Doom) up to version 0.7. The vulnerability is in PrintString (c_console.cpp) and arises from a format-string issue, allowing remote attackers to cause a denial of service and potentially execute arbitrary commands via strings passed to the console. The ...
CVE-2004-1403
PHP remote file inclusion vulnerability in index.php in GNUBoard 3.39 and earlier allows remote attackers to execute arbitrary PHP code by modifying the doc parameter to reference a URL on a remote web server that contains the code...