CVE-2011-1429

CVE-2011-1429 affects Mutt: the client failed to verify that the TLS/SSL server hostname matches the subject CN of the X.509 certificate when using SMTPS. Concrete details in connected docs show affected package versions (Mutt around 1.5.16–1.5.19 family; Oracle Linux 6 ELSA-2011-0959 and Miracle...

JBoss企业应用平台多个非授权访问漏洞

BUGTRAQ ID: 39710 CVE ID: CVE-2010-0738,CVE-2010-1428,CVE-2010-1429 JBoss企业应用平台（EAP）是J2EE应用的中间件平台。 JBoss企业应用平台中存在多个非授权访问漏洞，远程用户可以绕过认证执行非授权操作或读取敏感信息。 1 JMX控制台配置仅对使用GET和POST HTTP命令的请求指定了认证要求，远程攻击者可以创建没有指定GET或POST的HTTP请求，导致无需认证便被默认的GET处理器执行。 2...

CVE-2010-1429

Red Hat JBoss Enterprise Application Platform (JBoss EAP) 4.2 before 4.2.0.CP09 and 4.3 before 4.3.0.CP08 is affected by an information disclosure vulnerability (CVE-2010-1429) in the status servlet that allows remote attackers to obtain details about deployed web contexts, via a full=true query ...

Intel Common Base Agent CreateProcessA() Function Remote Command Execution

The remote host seems to be running a version of the Intel LANDesk Common Base Agent CBA that allows the contents of a specially crafted packet to be passed as an argument to 'CreateProcessA' to be executed on the remote host with SYSTEM privileges. %NASLMINLEVEL 70300 C Tenable Network Security,...

DSquare Exploit Pack: D2SEC_SYMIAO

Name| d2secsymiao ---|--- CVE| CVE-2009-1429 Exploit Pack| D2ExploitPack Description| Symantec Intel Alert Originator Service Command Execution Vulnerabilty Notes|...

CVE-2009-1429

creationtimestamp| type| source ---|---|--- 2009-04-28 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/10340 2011-08-19 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/17699 2018-05-29 15:50:33+00:00| seen|...

Gentoo Security Advisory GLSA 200804-27 (silc-toolkit silc-client silc-server)

The remote host is missing updates announced in advisory GLSA 200804-27. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Gentoo Security Advisory GLSA 200804-27 (silc-toolkit silc-client silc-server)

The remote host is missing updates announced in advisory GLSA 200804-27. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

JBoss Enterprise Application Platform (EAP) Status Servlet Request Remote Information Disclosure

The version of JBoss Enterprise Application Platform EAP running on the remote host allows unauthenticated access to a status servlet, which is used to monitor sessions and requests sent to the server. This vulnerability CVE-2008-3273 was fixed in versions 4.2.0.CP03 and 4.3.0.CP01, but was later...

CVE-2008-1429

CVE-2008-1429 affects SILC Server prior to 1.1.1 and is triggered by handling of NEW_CLIENT packets that do not contain a nickname, leading to daemon crash (Denial of Service). Public reports confirm impact as a remote DoS and recommend upgrading the SILC Server to a fixed version (1.1.1+; e.g., ...

Debian: Security Advisory (DSA-1429-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian DSA-1429-1 : htdig - XSS

Michael Skibbe discovered that htdig, a WWW search system for an intranet or small internet, did not adequately quote values submitted to the search script, allowing remote attackers to inject arbitrary script or HTML into specially crafted links. %NASLMINLEVEL 70300 C Tenable Network Security,...

CVE-2003-1429

The CVE-2003-1429 entry concerns Proxomitron Naoko 4.4, where a buffer overflow vulnerability in handling long requests allows remote attackers to execute arbitrary code. The core affected component is the input handling/buffer management in Naoko 4.4. The impact is remote code execution with par...

CVE-2007-1429

Multiple PHP remote file inclusion vulnerabilities in Moodle 1.7.1 allow remote attackers to execute arbitrary PHP code via a URL in the cmd parameter to 1 admin/utfdbmigrate.php or 2 filter.php...

CVE-2007-1429

CVE-2007-1429 affects Moodle 1.7.1, exposing remote PHP code execution via remote file inclusion. The vulnerability allows an attacker to supply a URL in the cmd parameter to either admin/utfdbmigrate.php or filter.php, leading to arbitrary code execution on the server. Multiple connected sources...

CVE-2006-1429

The vulnerability CVE-2006-1429 is a Cross-site Scripting (XSS) issue in classifiedZONE 1.2 and earlier . It affects the file accountlogon.cfm where an attacker can inject arbitrary web script or HTML through the rtn parameter. Public references confirm the XSS impact but do not provide remediati...

CVE-2006-1429

Cross-site scripting XSS vulnerability in accountlogon.cfm in classifiedZONE 1.2 and earlier allows remote attackers to inject arbitrary web script or HTML via the rtn parameter...

CVE-2005-1429

CVE-2005-1429 describes a SQL injection vulnerability in login.asp of WWWguestbook 1.1. The vulnerability arises from unsafely handling the password parameter, allowing remote attackers to execute arbitrary SQL commands. Affects the WWWguestbook 1.1 web application (login.asp) and could enable un...

CVE-2001-1429

CVE-2001-1429 concerns a buffer overflow in mcedit of Midnight Commander (notably around 4.5.1) that locally could cause a denial of service and potentially allow arbitrary code execution via a crafted text file. Connected data references Midnight Commander 4.x with a DOS via a symlink attack, bu...

CVE-2004-1429

The CVE-2004-1429 entry applies to ArGoSoft FTP 1.4.2.4 and earlier, where there is no limit on password entry attempts. This disclosure indicates that remote attackers could perform brute-force password guesses against the FTP service, potentially compromising accounts. The connected records con...