Design/Logic Flaw

Microsoft Internet Explorer 5.01 SP4, 6, 6 SP1, 7, and 8 does not prevent rendering of non-HTML local files as HTML documents, which allows remote attackers to bypass intended access restrictions and read arbitrary files via vectors involving JavaScript exploit code that constructs a reference to...

CVE-2009-1448

The CVE-2009-1448 entry corresponds to a cross-site scripting (XSS) vulnerability in LovPop.net’s apricot.php, part of the APRICOT product (likely v1.20). The vulnerability allows remote attackers to inject arbitrary web script or HTML via unspecified parameters, enabling script execution in a vi...

CVE-2008-1448

Technical details for CVE-2008-1448 are not provided in the connected documents. Public details are limited to related CVEs; monitor for updates.

MS08-048: Security Update for Outlook Express and Windows Mail (951066)

The remote host is running a version of Microsoft Outlook Express which contains a flaw that might be used to cause an information disclosure. To exploit this flaw, an attacker would need to send a malformed email to a victim on the remote host and have him open it. C Tenable Network Security, In...

Debian Security Advisory DSA 1448-1 (eggdrop)

The remote host is missing an update to eggdrop announced via advisory DSA 1448-1. OpenVAS Vulnerability Test $Id: deb14481.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1448-1 eggdrop Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

Debian DSA-1448-1 : eggdrop - buffer overflow

It was discovered that eggdrop, an advanced IRC robot, was vulnerable to a buffer overflow which could result in a remote user executing arbitrary code. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Security...

CVE-2003-1448

The CVE-2003-1448 issue affects the Windows 2000 kernel, where a memory leak can be exploited by remote attackers to cause a denial of service through SMB by sending a NetBIOS continuation packet. The description explicitly states a DoS condition (SMB request hang). No specific affected product v...

KLA10093 Multiple vulnerabilities in CA software

Multiple serious vulnerabilities have been found in ARCserve Backup. Malicious users can exploit these vulnerabilities to execute arbitrary code or cause denial of service. Below is a complete list of vulnerabilities 1. A buffer overflow can be exploited remotely via specially designed RPC...

CVE-2007-1448

The CVE-2007-1448 issue affects CA BrightStor ARCserve Backup Tape Engine (and related components) prior to 11.5, where an RPC call can disable the Tape Engine interface, causing DoS. Related advisories describe additional remote-execution/DoS vectors via the Tape Engine and Portmapper, including...

CVE-2006-1448

The CVE-2006-1448 entry affects Apple Mac OS X Finder in versions 10.3.9 and 10.4.6. A user-assisted attack is possible when a user is persuaded to open an Internet Location item that appears to use a safe URL scheme but actually uses a more risky scheme, allowing arbitrary code execution. The co...

Mac OS X Multiple Vulnerabilities (Security Update 2006-003)

The remote host is running Apple Mac OS X, but lacks Security Update 2006-003. This security update contains fixes for the following applications : AppKit ImageIO BOM CFNetwork ClamAV Mac OS X Server only CoreFoundation CoreGraphics Finder FTPServer Flash Player KeyCHain LaunchServices libcurl Ma...

CVE-2005-1448

CVE-2005-1448 describes a cross-site scripting (XSS) vulnerability in the Serendipity BBCode plugin for Serendipity, prior to version 0.8. Remote attackers can inject arbitrary web script or HTML, which executes in a user’s browser when viewing malicious entries or comments. The affected componen...

CVE-2001-1448

CVE-2001-1448 affects Magic eDeveloper Enterprise Edition 8.30-5 and earlier. The vulnerability arises from local file overwrites and potential code execution via a symlink attack on temporary files created by the scripts (1) mkuserproc, (2) mgrnt, and (3) mgdatasrvr.sc. The described impact is l...

CVE-2001-1448

Magic eDeveloper Enterprise Edition 8.30-5 and earlier allows local users to overwrite arbitrary files and possibly execute code via a symlink attack on temporary files created by the 1 mkuserproc, 2 mgrnt, and 3 mgdatasrvr.sc scripts...

CVE-2004-1448

CVE-2004-1448 affects Jetbox One 2.0.8 (and possibly other versions). The issue is an unrestricted remote file upload in the IMAGES module that allows users with Author privileges to upload PHP files, leading to arbitrary code execution on the server. The public records describe the vulnerability...

CVE-2004-1448

Jetbox One 2.0.8 and possibly other versions allow remote attackers with Author privileges in the IMAGES module to upload PHP files and execute arbitrary code...

CVE-2004-1448

Jetbox One 2.0.8 and possibly other versions allow remote attackers with Author privileges in the IMAGES module to upload PHP files and execute arbitrary code...

CVE-2002-1448

CVE-2002-1448 affects Avaya Cajun family devices (P330, P130, M770-ATM) with an undocumented SNMP read/write community string ('NoGaH$@!'), allowing remote attackers to gain administrative privileges. The vulnerability is supported by the CVSS2 base score of 7.5 (Network vector, Low attack comple...

CVE-2003-1448

Memory leak in the Windows 2000 kernel allows remote attackers to cause a denial of service SMB request hang via a NetBIOS continuation packet...

CVE-2001-1448

Magic eDeveloper Enterprise Edition 8.30-5 and earlier allows local users to overwrite arbitrary files and possibly execute code via a symlink attack on temporary files created by the 1 mkuserproc, 2 mgrnt, and 3 mgdatasrvr.sc scripts...