84 matches found
CVE-2011-1499
Affected software: Tinyproxy (before 1.8.3). Root cause: ACL configuration with CIDR in acl.c permits TCP connections from any IP, effectively making the proxy open. Impact: potential anonymization of traffic as the proxy can be used to hide origin. Remediation: upgrade to Tinyproxy 1.8.3 or appl...
[SECURITY] [DSA 2222-1] tinyproxy security update
------------------------------------------------------------------------- Debian Security Advisory DSA-2222-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff April 20, 2011 http://www.debian.org/security/faq -...
Cumulative Security Update for Internet Explorer (933566)
Microsoft Internet Explorer 5.01, 6, and 7 allows remote attackers to execute arbitrary code by causing Internet Explorer to access an uninitialized or deleted object, related to prototype variables and table cells, aka Uninitialized Memory Corruption Vulnerability. SPDX-FileCopyrightText: 2010 L...
CVE-2010-1499
The CVE-2010-1499 entry concerns MusicBox 3.3, where genre_artists.php is vulnerable to SQL injection via the id parameter. The underlying issue is improper input handling allowing remote command execution, with CVSS2 base score 7.5 (HIGH) and impacts on confidentiality, integrity, and availabili...
CVE-2009-1499
The CVE-2009-1499 entry describes an SQL injection in the Joomla! MailTo (com_mailto) component. The vulnerability allows remote attackers to execute arbitrary SQL commands via the article parameter in index.php, indicating a remote‑code capable injection affecting the application’s database quer...
CVE-2009-1499
creationtimestamp| type| source ---|---|--- 2009-04-08 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/8366...
CVE-2008-1499
creationtimestamp| type| source ---|---|--- 2008-03-22 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/31472...
PCRE字符类缓冲区溢出漏洞
BUGTRAQ ID: 27786 CVECAN ID: CVE-2008-0674 PCRE（Perl兼容正则表达式）库是个开放源代码的软件，可提供正则表达式支持。 PCRE在处理字符类时存在缓冲区溢出漏洞，如果用户发送了codepoint大于255的超长UTF-8字符类的话，就可能触发这个溢出，导致执行任意指令。 PCRE 7.6 Debian ------ Debian已经为此发布了一个安全公告（DSA-1499-1）以及相应补丁: DSA-1499-1：New pcre3 packages fix arbitrary code execution...
Debian DSA-1499-1 : pcre3 - buffer overflow
It was discovered that specially crafted regular expressions involving codepoints greater than 255 could cause a buffer overflow in the PCRE library CVE-2008-0674 . %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debi...
CVE-2003-1499
CVE-2003-1499 : A directory traversal flaw in Bytehoard 0.7’s index.php allows remote attackers to read arbitrary files by supplying a .. in the infolder parameter. The NVD entry lists CVSS v2 base metrics: AV:N/AC:L/Au:N/C:N/I:N/A:P with a base score of 5.0 (Medium) and network attack vector; ex...
CVE-2007-1752
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2007-1499. Reason: This candidate is a duplicate of CVE-2007-1499. Notes: All CVE users should reference CVE-2007-1499 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...
Design/Logic Flaw
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2007-1499. Reason: This candidate is a duplicate of CVE-2007-1499. Notes: All CVE users should reference CVE-2007-1499 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...
CVE-2007-1752
CVE-2007-1752 is rejected/not used; reference CVE-2007-1499 instead.
CVE-2007-1499
CVE-2007-1499 affects Microsoft Internet Explorer 7.0 on Windows XP and Windows Vista. It describes a Navigation Cancel Page spoofing vulnerability: when navigation is canceled, IE uses a local res://navcancl.htm resource and inserts the user-supplied URL into the page, which can cause a crafted ...
[eVuln] vCounter - sourceworkshop SQL Injection Vulnerability
New eVuln Advisory: vCounter - sourceworkshop SQL Injection Vulnerability http://evuln.com/vulns/108/summary.html --------------------Summary---------------- eVuln ID: EV0108 CVE: CVE-2006-1499 Software: vCounter Sowtware's Web Site: http://www.sourceworkshop.com/ Versions: 1.0 Critical Level:...
CVE-2006-1499
CVE-2006-1499 affects the vCounter application (vCounter 1.0) via the script vCounter.php . The vulnerability is a SQL Injection where user-controlled data from the request URI ($_SERVER[REQUEST_URI]) is concatenated into an INSERT query, leading to arbitrary SQL execution. Root cause: inadequate...
CVE-2001-1499
The CVE affects Check Point VPN-1 4.1SP4 with SecuRemote. The vulnerability arises from differing error messages for valid vs. invalid users, depending on authentication method, which can facilitate brute-force attempts. Affected component: VPN-1/SecuRemote authentication prompts. Impact: enables...
CVE-2005-1499
CVE-2005-1499 affects myBloggie 2.1.1 via delcomment.php, where remote attackers can delete arbitrary comments by modifying the comment_id parameter. The NVD notes a CVSSv2 base score of 7.5 (HIGH) with network attack vector, low attack complexity, no authentication required, and partial impact o...
