94 matches found
Debian Security Advisory DSA 1599-1 (dbus)
The remote host is missing an update to dbus announced via advisory DSA 1599-1. OpenVAS Vulnerability Test $Id: deb15991.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1599-1 dbus Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...
Debian DSA-1599-1 : dbus - programming error
Havoc Pennington discovered that DBus, a simple interprocess messaging system, performs insufficient validation of security policies, which might allow local privilege escalation. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were...
CVE-2008-1599
CVE-2008-1599 affects IBM AIX 5.2, 5.3, and 6.1. The nddstat family (atmstat, entstat, fddistat, hdlcstat, tokstat) handles environment variables insecurely, allowing a local user to gain root privileges via these setuid-root commands. Vulnerable files/paths include /usr/sbin/atmstat, /usr/sbin/e...
CVE-2007-1599
wp-login.php in WordPress allows remote attackers to redirect authenticated users to other websites and potentially obtain sensitive information via the redirectto parameter...
CVE-2007-1599
CVE-2007-1599 affects WordPress and is documented across multiple connected sources. The vulnerability enables remote attackers to abuse wp-login.php by manipulating the redirect_to parameter to redirect authenticated users to external sites and potentially disclose sensitive information. The Deb...
CVE-2007-1599
wp-login.php in WordPress allows remote attackers to redirect authenticated users to other websites and potentially obtain sensitive information via the redirectto parameter...
CVE-2007-1599
wp-login.php in WordPress allows remote attackers to redirect authenticated users to other websites and potentially obtain sensitive information via the redirectto parameter...
CVE-2006-1599
Vulnerability CVE-2006-1599 affects v-creator before 1.3-pre3, in VCEngine.php when VC_CRYPTO_METHOD is OPENSSL. Root cause appears to be issues in the encrypt and decrypt functions, enabling remote command execution. The available sources indicate the vulnerability resides in the crypto handling...
CVE-2005-1599
The CVE-2005-1599 entry describes a cross-site scripting (XSS) flaw in Kryloff Technologies Subject Search Server (SSServer) 1.1, exploitable via the "Search For" field to inject arbitrary web script/HTML. The NVD/CVE records show a MEDIUM risk (CVSSv2: AV:N/AC:M/Au:N/C:N/I:P/A:N, base 4.3) but n...
CVE-2002-1599
CVE-2002-1599 affects DansGuardian prior to 2.4.5-1, where remote attackers can bypass content filtering rules using hex-encoded URLs. CVSS shows Network attack, Low complexity, No auth, with Partial impact to confidentiality, integrity, and availability (base score 7.5). No remediation details a...
CVE-2002-1599
Removed by vendor...
CVE-2004-1599
CVE-2004-1599 concerns a Cross-site Scripting (XSS) vulnerability in CoolPHP 1.0-stable, exploitable via index.php using the query or nick parameters. The underlying issue is insufficient input handling in the affected script, allowing an attacker to inject and execute arbitrary web scripts/HTML ...
