115 matches found
BELL-CVE-2010-1623 CVE-2010-1623 does not affect BellSoft software
Bulletin has no description...
CVE-2010-1623
The CVE-2010-1623 issue affects the APR-util library (apr_brigade_split_line in buckets/apr_brigade.c) prior to version 1.3.10, where a memory leak can allow remote attackers to cause denial of service through memory consumption related to APR bucket destruction. Affected products commonly includ...
Mandriva Update for apr-util MDVSA-2010:192 (apr-util)
Check for the Version of apr-util OpenVAS Vulnerability Test Mandriva Update for apr-util MDVSA-2010:192 apr-util Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...
jetty 6.x 7.x - Cross-Site Scripting Information Disclosure Injection
jetty 6.x 7.x - Cross-Site Scripting Information Disclosure Injection Jetty 6.x and 7.x Multiple Vulnerabilities Name Multiple Vulnerabilities in Jetty Systems Affected Jetty 7.0.0 and earlier versions Severity Medium Impact CVSSv2 Medium 5/10, vector: AV:N/AC:L/Au:N/C:P/I:N/A:N Vendor...
CVE-2009-1623
The CVE-2009-1623 entry describes a cross-site scripting (XSS) vulnerability in Dew-NewPHPLinks 2.0, specifically in index.php where the PID parameter can be used by remote attackers to inject arbitrary web script or HTML. The document notes XSS originating from the PID parameter but does not pro...
CVE-2009-1623
creationtimestamp| type| source ---|---|--- 2009-04-27 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/8545...
ike-scan (NASL wrapper)
This VT is deprecated. SPDX-FileCopyrightText: 2008 Tim Brown and Vlatko Kosturjak Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later ifdescription...
CVE-2008-1623
CVE-2008-1623 describes an SQL injection vulnerability in Smoothflash, specifically in admin_view_image.php through the cid parameter. A remote attacker can potentially execute arbitrary SQL commands (base score 7.5, NETWORK vector, LOW complexity, no authentication). The vulnerability affects th...
CVE-2008-1623
creationtimestamp| type| source ---|---|--- 2008-03-30 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/5322...
CVE-2007-1623
CVE-2007-1623 describes multiple XSS vulnerabilities in realGuestbook 5.01 that occur when PHP’s register_globals is enabled. Attackers can inject arbitrary script or HTML through the following parameters to welcome_admin.php: bg_color_1, fs_menu, fc_menu, ff_menu, bg_color_2, fs_normal, fc_norma...
CVE-2006-1623
Technical details for CVE-2006-1623 are not publicly available in the provided documents. The descriptions remain vague about vulnerability type, affected product, and impact. Monitor for updates from NVD/CVE records and connected sources.
CVE-2005-1623: Adobe Reader and Adobe Acrobat PDF file command execution
CVE-2005-1623 is associated with Adobe Reader/Acrobat PDF handling. The initial description states a remote code execution vector where a specially crafted PDF containing JavaScript could cause execution of arbitrary executables if the attacker knows full application names/paths. The connected Op...
CVE-2004-1623
The WAV file property handler in Windows XP SP1 allows remote attackers to cause a denial of service infinite loop in Explorer via a WAV file with an invalid file header whose fmt chunk length is set to 0xFFFFFFFF...
CVE-2004-1623
The CVE-2004-1623 entry concerns the WAV file property handler in Windows XP SP1, where processing a WAV file with an invalid header (fmt chunk length = 0xFFFFFFFF) can cause an infinite loop in Explorer, leading to a denial of service. Public sources confirm the affected software as Windows XP S...
CVE-2002-1623
The design of the Internet Key Exchange IKE protocol, when using Aggressive Mode for shared secret authentication, does not encrypt initiator or responder identities during negotiation, which may allow remote attackers to determine valid usernames by 1 monitoring responses before the password is...