CVE-2010-1497

The vulnerability CVE-2010-1497 affects the dl_stats web application (before version 2.0) via download_proc.php, where the id parameter is not properly sanitized, enabling Cross‑Site Scripting (XSS) by remote attackers. Impact described in OpenVAS entries includes attacker‑delivered scripts that ...

CVE-2010-1497

creationtimestamp| type| source ---|---|--- 2010-04-18 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/12280...

CVE-2008-7182

Buffer overflow in the IMAP service in NetWin Surgemail 3.9e, and possibly other versions before 3.9g2, allows remote authenticated users to cause a denial of service crash and possibly execute arbitrary code via a long first argument to the APPEND command, a different vector than CVE-2008-1497 a...

CVE-2009-1497

Stack-based buffer overflow in srt2smi.exe in Gretech Online Movie Player GOM Player 2.1.16.4635 allows remote attackers to cause a denial of service crash or execute arbitrary code via a long string in an SRT file...

CVE-2009-1497

CVE-2009-1497 describes a stack-based buffer overflow in srt2smi.exe of Gretech Online Movie Player (GOM Player) 2.1.16.4635. The vulnerability allows remote attackers to crash the application or execute arbitrary code via a long string contained in an SRT subtitle file. The available documents d...

CVE-2009-1497

creationtimestamp| type| source ---|---|--- 2009-04-08 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/8370...

Ubuntu: Security Advisory (USN-464-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SuSE Update for kernel SUSE-SA:2007:043

Check for the Version of kernel OpenVAS Vulnerability Test $Id: gbsuse2007043.nasl 8050 2017-12-08 09:34:29Z santu $ SuSE Update for kernel SUSE-SA:2007:043 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software;...

CVE-2008-1497

CVE-2008-1497 and related CVEs describe a stack-based buffer overflow in NetWin Surgemail IMAP service. CVE-2008-1497 affects SurgeMail 38k4-4 and earlier, allowing remote authenticated users to execute arbitrary code via long arguments to the LSUB command. Related entries (CVE-2008-7182 and CVE-...

Debian: Security Advisory (DSA-1497-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian DSA-1497-1 : clamav - several vulnerabilities

Several vulnerabilities have been discovered in the Clam anti-virus toolkit, which may lead to the execution of arbitrary code or local denial of service. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2007-6595 It was discovered that temporary files ar...

Ubuntu 6.06 LTS / 6.10 / 7.04 : linux-source-2.6.15/2.6.17/2.6.20 vulnerabilities (USN-464-1)

Philipp Richter discovered that the AppleTalk protocol handler did not sufficiently verify the length of packets. By sending a crafted AppleTalk packet, a remote attacker could exploit this to crash the kernel. CVE-2007-1357 Gabriel Campana discovered that the doipv6setsockopt function did not...

CVE-2003-1497

The CVE-2003-1497 entry affects Linksys BEFSX41, specifically the system log viewer. The documented vulnerability is a buffer overflow triggered by an HTTP request with a long Log_Page_Num parameter, which can cause a remote denial of service. Affected product/version: Linksys BEFSX41 firmware 1....

openSUSE 10 Security Update : kernel (kernel-3760)

This kernel update fixes the following security problems : - CVE-2007-1861: The nlfiblookup function in net/ipv4/fibfrontend.c allows attackers to cause a denial of service kernel panic via NETLINKFIBLOOKUP replies, which trigger infinite recursion and a stack overflow. - CVE-2007-1496:...

[SECURITY] [DSA 1297-1] New gforge-plugin-scmcvs packages fix arbitrary shell command execution

=========================================================== Ubuntu Security Notice USN-464-1 May 23, 2007 linux-source-2.6.15/2.6.17/2.6.20 vulnerabilities CVE-2007-1357, CVE-2007-1388, CVE-2007-1496, CVE-2007-1497, CVE-2007-1592, CVE-2007-1730, CVE-2007-2172...

Debian DSA-1289-1 : linux-2.6 - several vulnerabilities

Several local and remote vulnerabilities have been discovered in the Linux kernel that may lead to a denial of service or the execution of arbitrary code. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2007-1496 Michal Miroslaw reported a DoS...

[SECURITY] [DSA 1289-1] New Linux 2.6.18 packages fix several vulnerabilities

-------------------------------------------------------------------------- Debian Security Advisory DSA 1289-1 [email protected] http://www.debian.org/security/ Dann Frazier May 13th, 2007 http://www.debian.org/security/faq -...

DSA-1289-1 linux-2.6

Bulletin has no description...

CVE-2007-1497

CVE-2007-1497 affects the Linux kernel nf_conntrack netfilter code prior to 2.6.20.3. During IPv6 fragment reassembly, nfctinfo is not set, leaving the default IP_CT_ESTABLISHED and potentially allowing remote attackers to bypass certain netfilter rulesusing IPv6 fragments. The documented fix is ...

CVE-2006-1497

CVE-2006-1497 is a directory traversal vulnerability in ViHor Design’s index.php. The vulnerability arises from handling of the page parameter, enabling remote attackers to read arbitrary files on the affected system. The NVD entry lists a MEDIUM base score (CVSSv2: AV:N/AC:L/Au:N/C:P/I:N/A:N) wi...