115 matches found
CVE-2010-1496
SQL injection vulnerability in the JoltCard comjoltcard component 1.2.1 for Joomla! allows remote attackers to execute arbitrary SQL commands via the cardID parameter in a view action to index.php...
CVE-2010-1496
CVE-2010-1496 concerns the JoltCard (com_joltcard) component for Joomla! version 1.2.1. The vulnerability is an SQL injection reachable via the cardID parameter in a view action to index.php, allowing remote attackers to execute arbitrary SQL commands. Observed sources indicate this vulnerability...
CVE-2010-1496
creationtimestamp| type| source ---|---|--- 2010-04-16 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/12269...
CentOS 5 : kernel (CESA-2007:0347)
Updated kernel packages that fix security issues and bugs in the Red Hat Enterprise Linux 5 kernel are now available. This update has been rated as having important security impact by the Red Hat Security Response Team. The Linux kernel handles the basic functions of the operating system. These n...
CVE-2009-1496
Summary: CVE-2009-1496 affects Joomla! Cmimarketplace 0.1 (component com_cmimarketplace). The Nuclei template confirms a Local File Inclusion /directory listing flaw driven by a dot-dot in the viewit parameter to index.php, enabling an attacker to enumerate directories. This aligns with the CVE d...
CVE-2009-1496
creationtimestamp| type| source ---|---|--- 2009-04-08 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/8367...
Ubuntu: Security Advisory (USN-464-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
SuSE Update for kernel SUSE-SA:2007:043
Check for the Version of kernel OpenVAS Vulnerability Test $Id: gbsuse2007043.nasl 8050 2017-12-08 09:34:29Z santu $ SuSE Update for kernel SUSE-SA:2007:043 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software;...
CVE-2008-1496
CVE-2008-1496 describes multiple SQL injection vulnerabilities in PEEL (likely 3.x and earlier), where remote attackers could execute arbitrary SQL commands via the (1) email parameter to membres.php and the (2) timestamp parameter to the details action in achat/historique_commandes.php and the f...
CVE-2008-1496
Multiple SQL injection vulnerabilities in PEEL, possibly 3.x and earlier, allow remote attackers to execute arbitrary SQL commands via the 1 email parameter to a membre.php, and the 2 timestamp parameter to b the details action in achat/historiquecommandes.php and c the facture action in...
CVE-2008-1496
creationtimestamp| type| source ---|---|--- 2008-03-19 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/5281...
Debian: Security Advisory (DSA-1496-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Debian DSA-1496-1 : mplayer - buffer overflows
Several buffer overflows have been discovered in the MPlayer movie player, which might lead to the execution of arbitrary code. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2008-0485 Felipe Manzano and Anibal Sacco discovered a buffer overflow in the...
Ubuntu 6.06 LTS / 6.10 / 7.04 : linux-source-2.6.15/2.6.17/2.6.20 vulnerabilities (USN-464-1)
Philipp Richter discovered that the AppleTalk protocol handler did not sufficiently verify the length of packets. By sending a crafted AppleTalk packet, a remote attacker could exploit this to crash the kernel. CVE-2007-1357 Gabriel Campana discovered that the doipv6setsockopt function did not...
CVE-2003-1496
CVE-2003-1496 concerns an unspecified local privilege escalation vulnerability in HP Tru64’s CDE dtmailpr (4.0F–5.1B). Connected data clarifies a related issue (CVE-1999-0840) with a documented buffer overflow in CDE dtmail and dtmailpr that enables local privilege gain via a long -f option. Whil...
CVE-2003-1496
Unspecified vulnerability in CDE dtmailpr of HP Tru64 4.0F through 5.1B allows local users to gain privileges via unknown attack vectors. NOTE: due to lack of details in the vendor advisory, it is not clear whether this is the same issue as CVE-1999-0840...
openSUSE 10 Security Update : kernel (kernel-3760)
This kernel update fixes the following security problems : - CVE-2007-1861: The nlfiblookup function in net/ipv4/fibfrontend.c allows attackers to cause a denial of service kernel panic via NETLINKFIBLOOKUP replies, which trigger infinite recursion and a stack overflow. - CVE-2007-1496:...
RHEL 5 : kernel (RHSA-2007:0347)
Updated kernel packages that fix security issues and bugs in the Red Hat Enterprise Linux 5 kernel are now available. This update has been rated as having important security impact by the Red Hat Security Response Team. The Linux kernel handles the basic functions of the operating system. These n...
[SECURITY] [DSA 1297-1] New gforge-plugin-scmcvs packages fix arbitrary shell command execution
=========================================================== Ubuntu Security Notice USN-464-1 May 23, 2007 linux-source-2.6.15/2.6.17/2.6.20 vulnerabilities CVE-2007-1357, CVE-2007-1388, CVE-2007-1496, CVE-2007-1497, CVE-2007-1592, CVE-2007-1730, CVE-2007-2172...
Debian DSA-1289-1 : linux-2.6 - several vulnerabilities
Several local and remote vulnerabilities have been discovered in the Linux kernel that may lead to a denial of service or the execution of arbitrary code. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2007-1496 Michal Miroslaw reported a DoS...