CVE-2011-1509

Affected product : ManageEngine ServiceDesk Plus (SDP) versions up to 8.x, including SDP 8012 and earlier. Vulnerability details : CVE-2011-1509 is an authentication weakness where the encryptPassword function in Login.js uses a Caesar cipher with no salt or secret, storing passwords locally in c...

CORE-2011-0506 - Multiples Vulnerabilities in ManageEngine ServiceDesk Plus

Core Security - Corelabs Advisory http://corelabs.coresecurity.com/ Multiples Vulnerabilities in ManageEngine ServiceDesk Plus 1. Advisory Information Title: Multiples Vulnerabilities in ManageEngine ServiceDesk Plus Advisory ID: CORE-2011-0506 Advisory URL:...

Multiples Vulnerabilities in ManageEngine ServiceDesk Plus

Core Security - Corelabs Advisory 1. Advisory Information Title: Multiples Vulnerabilities in ManageEngine ServiceDesk Plus Advisory ID: CORE-2011-0506 Advisory URL: http://www.coresecurity.com/content/multiples-vulnerabilities-manageengine-sdp Date published: 2011-09-14 Date of last update:...

Core Security Technologies Advisory 2011.0506

Core Security - Corelabs Advisory http://corelabs.coresecurity.com/ Multiples Vulnerabilities in ManageEngine ServiceDesk Plus 1. Advisory Information Title: Multiples Vulnerabilities in ManageEngine ServiceDesk Plus Advisory ID: CORE-2011-0506 Advisory URL:...

CVE-2010-1509

IrfanView (before version 4.27) is vulnerable to a PSD parsing issue caused by a sign-extensions/unspecified integer variable handling error that can trigger a heap-based buffer overflow. This may allow a remote attacker to crash the application or potentially execute arbitrary code via a special...

Secunia Research: IrfanView PSD Image Parsing Sign-Extension Vulnerability

====================================================================== Secunia Research 12/05/2010 - IrfanView PSD Image Parsing Sign-Extension Vulnerability - ====================================================================== Table of Contents Affected...

CVE-2009-1509

CVE-2009-1509 affects MyioSoft AjaxPortal 3.0. The vulnerability is an SQL injection in ajaxp_backend.php exposed via the page parameter, enabling remote attackers to run arbitrary SQL commands. Impact details in sources indicate partial confidentiality, integrity, and availability impacts with a...

CVE-2009-1509

creationtimestamp| type| source ---|---|--- 2009-04-01 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/8341...

CVE-2008-1509

CVE-2008-1509 describes an SQL injection in XLPortal ≤ 2.2.4, triggered by the query parameter in index.php. The underlying flaw allows remote attackers to execute arbitrary SQL commands. Reported impact aligns with a high base severity (CVSS v2: 7.5, Network attack vector, no authentication, par...

CVE-2008-1509

creationtimestamp| type| source ---|---|--- 2008-03-21 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/5293...

Debian: Security Advisory (DSA-1509-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2003-1509

Real Networks RealOne Enterprise Desktop 6.0.11.774, RealOne Player 2.0, and RealOne Player 6.0.11.818–6.0.11.853 are affected by CVE-2003-1509. The issue allows remote attackers to execute arbitrary script in the local security zone by embedding a script in a temporary file before the temp file ...

CVE-2007-1509

CVE-2007-1509 describes a directory traversal vulnerability in the krypt project (Sascha Schroeder krypt) specifically in enkrypt.php, where an attacker can read arbitrary files by supplying a .. in the datei parameter. Affected component: enkrypt.php; vulnerability arises from insufficient valid...

CVE-2006-1509

HP-UX CVE-2006-1509 affects /sbin/passwd on HP-UX B.11.00, B.11.11, and B.11.23 before 20060326, where error handling could lead to local denial of service. The vulnerability is documented across multiple sources (NVD/NVD-linked and Nessus plugins) and is tied to local DoS conditions. Public refe...

CVE-2001-1509

The CVE-2001-1509 entry concerns HP-UX 11.20 on Itanium (IA) systems. The vulnerability arises in geteuid failing to correctly identify a user’s effective UID, which could allow local users to escalate privileges. Affected context: Itanium Architecture (IA) running HP-UX 11.20. Documented impact:...

CVE-2005-1509

The CVE-2005-1509 entry describes an SQL injection in profil.php of PwsPHP 1.2.2, exploitable via the id parameter. This relates to a vulnerability in the profiling page that allows remote attackers to execute arbitrary SQL commands. The NVD entry assigns a CVSS v2 base score of 7.5 (HIGH, networ...

CVE-2004-1509

validate.php in WebCalendar allows remote attackers to gain sensitive information via an invalid encodedlogin parameter, which reveals the full path in an error message...

CVE-2002-1509

A patch for shadow-utils 20000902 causes the useradd command to create a mail spool files with read/write privileges of the new user's group mode 660, which allows other users in the same group to read or modify the new user's incoming email...

CVE-2002-1509

CVE-2002-1509 concerns a bug in the shadow-utils useradd flow introduced by a patch in shadow-utils-20000902. The bug causes a new user’s mail spool to be created with group write/read permissions (mode 660) instead of being owned per the intended policy, enabling other users sharing the same pri...

CVE-2003-1509

Real Networks RealOne Enterprise Desktop 6.0.11.774, RealOne Player 2.0, and RealOne Player 6.0.11.818 through RealOne Player 6.0.11.853 allows remote attackers to execute arbitrary script in the local security zone by embedding script in a temp file before the temp file is executed by the defaul...