CVE-2009-1426

CVE-2009-1426 affects HP ProLiant DL/ML 100 Series G5, G5p and G6 servers with ProLiant Onboard Administrator Powered by LO100i (Lights Out 100) 3.07 and earlier. The vulnerability allows remote attackers to cause a denial of service via unknown vectors. No root cause, exploit details, or remedia...

CVE-2008-1426

SQL injection vulnerability in album.asp in KAPhotoservice allows remote attackers to execute arbitrary SQL commands via the albumid parameter...

CVE-2008-1426

Affected software: KAPhotoservice (album.asp). Vulnerable component: the albumid parameter in album.asp allows SQL injection due to unsafe SQL construction, enabling remote arbitrary SQL execution. Impact details from CVSS indicate partial impact on confidentiality, integrity, and availability wi...

Debian Security Advisory DSA 1426-1 (qt-x11-free)

The remote host is missing an update to qt-x11-free announced via advisory DSA 1426-1. OpenVAS Vulnerability Test $Id: deb14261.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1426-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

Debian: Security Advisory (DSA-1426-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian DSA-1426-1 : qt-x11-free - several vulnerabilities

Several local/remote vulnerabilities have been discovered in the Qt GUI library. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2007-3388 Tim Brown and Dirk Muller discovered several format string vulnerabilities in the handling of error messages, which...

CVE-2003-1426

Openwebmail in cPanel 5.0, when run using suid Perl, adds the directory in the SCRIPTFILENAME environment variable to Perl's @INC include array, which allows local users to execute arbitrary code by modifying SCRIPTFILENAME to reference a directory containing a malicious openwebmail-shared.pl...

CVE-2007-1426

CVE-2007-1426 affects AstroCam 2.0.0 through 2.6.5. The web interface can be exploited remotely to cause a denial of service (daemon shutdown) by sending requests with a large amount of data in the "+a+" parameter, which fills up the message queue. The available connected documents corroborate th...

CVE-2006-1426

Pixel Motion Blog is affected by multiple SQL injection vulnerabilities disclosed for CVE-2006-1426. The issues allow remote attackers to execute arbitrary SQL commands through the date parameter in index.php or bypass authentication via the password parameter in admin/index.php. The NVD entry ci...

CVE-2005-1426

Affected software: Ublog Reload (Uapplication Ublog Reload). Vulnerable component: mdb-database/blog.mdb (aka blog.msb) exposed under the web root. Root cause: insufficient access control in the web root enables direct HTTP retrieval of the database by remote attackers. Impact: potential unauthor...

CVE-2001-1426

Affected product: Alcatel Speed Touch with firmware KHDSAA.108 and KHDSAA.132–KHDSAA.134. Vulnerability: TFTP server runs without a password, enabling remote modification of firmware versions or device configurations. Root cause: insecure TFTP service exposed on the device. Impact: allows uninten...

CVE-2004-1426

CVE-2004-1426 affects KorWeblog 1.6.2-cvs and earlier. This directory traversal vulnerability in index.php (lng parameter) allows remote reading of arbitrary files and potential PHP file execution via ".." sequences. The provided documents confirm the affected software and payload, but do not inc...

CVE-2003-1426

Openwebmail in cPanel 5.0, when run using suid Perl, adds the directory in the SCRIPTFILENAME environment variable to Perl's @INC include array, which allows local users to execute arbitrary code by modifying SCRIPTFILENAME to reference a directory containing a malicious openwebmail-shared.pl...

CVE-2002-1426

CVE-2002-1426 affects the HP ProCurve Switch 4000M (firmware version C.07.23). The vulnerability allows remote attackers to cause a denial of service (crash) by sending an SNMP write request containing 85 characters, which may trigger a buffer overflow. The connected documents provide the impact ...

CVE-1999-1426

The CVE-1999-1426 entry describes a local privilege impact in Solaris Solstice AdminSuite 2.1, where the updater for the NIS database follows symbolic links, allowing a local user to overwrite arbitrary files. The provided documents do not specify affected build versions beyond AdminSuite 2.1, no...

CVE-1999-1426

Solaris Solstice AdminSuite AdminSuite 2.1 follows symbolic links when updating an NIS database, which allows local users to overwrite arbitrary files...

CVE-2001-1426

Alcatel Speed Touch running firmware KHDSAA.108 and KHDSAA.132 through KHDSAA.134 has a TFTP server running without a password, which allows remote attackers to change firmware versions or the device's configurations...