CVE-2011-1587

Cross-site scripting XSS vulnerability in MediaWiki before 1.16.4, when Internet Explorer 6 or earlier is used, allows remote attackers to inject arbitrary web script or HTML via an uploaded file accessed with a dangerous extension such as .html located before a ? question mark in a query string,...

CVE-2011-1587

Cross-site scripting XSS vulnerability in MediaWiki before 1.16.4, when Internet Explorer 6 or earlier is used, allows remote attackers to inject arbitrary web script or HTML via an uploaded file accessed with a dangerous extension such as .html located before a ? question mark in a query string,...

CVE-2011-1587

Cross-site scripting XSS vulnerability in MediaWiki before 1.16.4, when Internet Explorer 6 or earlier is used, allows remote attackers to inject arbitrary web script or HTML via an uploaded file accessed with a dangerous extension such as .html located before a ? question mark in a query string,...

CVE-2011-1587

MediaWiki vulnerable component: web application logic handling file uploads and URI parsing. CVE-2011-1587 is a cross-site scripting (XSS) flaw affecting MediaWiki prior to 1.16.4, triggered when Internet Explorer 6 or earlier is used and a file with a dangerous extension (e.g., .html) is accesse...

CVE-2010-1587

The CVE-2010-1587 issue affects Apache ActiveMQ with the Jetty ResourceHandler. It enables a remote attacker to disclose JSP source code by sending a URI beginning with // that targets (admin/index.jsp, admin/queues.jsp, or admin/topics.jsp). Affected products/versions are ActiveMQ 5.x before 5.3...

CVE-2010-1587

creationtimestamp| type| source ---|---|--- 2010-04-22 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/33868 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/http/apacheactivemqsourcedisclosure.rb 2018-05-29...

CVE-2001-1587

NWFTPD.nlm before 5.01w in the FTP server in Novell NetWare allows remote attackers to cause a denial of service abend via an anonymous STOU command...

CVE-2001-1587

NWFTPD.nlm before 5.01w in the FTP server in Novell NetWare allows remote attackers to cause a denial of service abend via an anonymous STOU command...

CVE-2003-1587

CVE-2003-1587 describes a cross-site scripting (XSS) vulnerability in LoganPro where remote attackers can inject arbitrary script via a crafted User-Agent header. Affected component is the web application LoganPro; root cause is insufficient input validation/escaping for User-Agent. The CVSS v2 s...

CVE-2009-1587

The CVE concerns index.php in PHP Site Lock 2.0, where an authentication bypass is possible by setting cookies login_id, group_id, login_name, user_id, and user_type to certain values. This leads to unauthorized administrative access. The vulnerability is associated with CVE-2009-1587 and has an ...

CVE-2009-1587

creationtimestamp| type| source ---|---|--- 2009-05-04 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/8604...

CVE-2007-1587

CVE-2007-1587 affects Tim Soderstrom StatsDawg 0.92. The vulnerability is in templates/config/mail.tpl and allows remote attackers to execute arbitrary programs by supplying the program name in the qshapeLocation parameter. According to the references, this yields a remote code execution impact w...

CVE-2007-1587

templates/config/mail.tpl in Tim Soderstrom StatsDawg 0.92 allows remote attackers to execute arbitrary programs by specifying the program name in the qshapeLocation parameter...

Command injection

The ps /usr/ucb/ps command on HP Tru64 UNIX 5.1 1885 allows local users to obtain sensitive information, including environment variables of arbitrary processes, via the "auxewww" argument, a similar issue to CVE-1999-1587...

CVE-2006-1587

CVE-2006-1587 affects NetBSD 1.6–3.0. When a user has “set record” in .mailrc and the default umask, the created record file has 0644 permissions, allowing local users to read it. The connected documents confirm the vulnerable behavior and impact; no explicit exploitation details or remediation a...

Solaris 9 (x86) : 120239-01

SunOS 5.9x86: ps cmd patch. Date this patch was last updated by Sun : Mar/24/06 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if description...

CVE-1999-1587

Technical details for CVE-1999-1587 are not publicly provided in the supplied documents. Monitor for updates; the files here do not specify affected versions, impact, or fixes.

CVE-2005-1587

The CVE-2005-1587 entry concerns a Cross-site Scripting (XSS) vulnerability in Quick.cart 0.3.0, specifically in index.php where the sWord parameter allows remote attackers to inject arbitrary script/HTML. Public details in the connected records confirm the affected component and the vulnerabilit...

CVE-2002-1587

The CVE-2002-1587 entry concerns the libthread library (libthread.so.1 ) on Solaris 2.5.1–8 . A local attacker can cause a denial of service (hang) by forcing the application to wait for a mutex. Affected software is any application using libthread. The connected documents do not provide remediat...

CVE-2004-1587

Buffer overflow in Monolith games including 1 Alien versus Predator 2 1.0.9.6 and earlier, 2 Blood 2 2.1 and earlier, 3 No one lives forever 1.004 and earlier and 4 Shogo 2.2 and earlier allows remote attackers to cause a denial of service application crash via a long secure Gamespy query...