CVE-2009-1639

CVE-2009-1639 affects Nucleus Data Recovery Kernel Recovery for Novell 4.03. The connected documents describe a stack-based buffer overflow in this product that can be triggered by a crafted .NKNT file, enabling user‑assisted arbitrary code execution. The vulnerability impact is described as code...

Debian Security Advisory DSA 1639-1 (twiki)

The remote host is missing an update to twiki announced via advisory DSA 1639-1. OpenVAS Vulnerability Test $Id: deb16391.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1639-1 twiki Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

Debian: Security Advisory (DSA-1639-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Gentoo Security Advisory GLSA 200706-07 (phprojekt)

The remote host is missing updates announced in advisory GLSA 200706-07. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian DSA-1639-1 : twiki - command execution

It was discovered that twiki, a web-based collaboration platform, didn't properly sanitize the image parameter in its configuration script. This could allow remote users to execute arbitrary commands upon the system, or read any files which were readable by the webserver user. %NASLMINLEVEL 70300...

CVE-2008-1639

SQL injection vulnerability in index.php in Neat weblog 0.2 allows remote attackers to execute arbitrary SQL commands via the articleId parameter in a show action, probably related to the showArticle function in lib/libarticle.include.php...

CVE-2008-1639

Vulnerability (CVE-2008-1639) in Neat weblog 0.2: an SQL injection flaw in index.php allows remote attackers to modify or retrieve data via the articleId parameter in the show action, likely linked to the showArticle function in lib/lib_article.include.php. The NVD entry records a CVSS v2 base sc...

CVE-2008-1639

creationtimestamp| type| source ---|---|--- 2008-03-31 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/5331...

CVE-2007-1639

PHProjekt 5.2.0 contains an unrestricted file upload vulnerability (CVE-2007-1639) that allows an authenticated user to upload a PHP payload and execute code via a file with an executable extension, when magic_quotes_gpc is disabled. The issue can be triggered through modules such as calendar or ...

CVE-2005-1639

The connected PT-Security entry confirms a SQL injection in Sigma ISP Manager 6.6 via Sigmaweb.DLL, exploitable by remote attackers through the username, password, or domain fields; impact is arbitrary SQL execution. Remediation guidance: restrict access to the vulnerable fields and avoid using t...

CVE-2002-1639

Oracle Configurator prior to 11.5.7.17.32 and 11.5.6.16.53 is vulnerable to a remote information-disclosure via the oracle.apps.cz.servlet.UiServlet servlet when the test parameter is set to “version” or “host,” allowing access to sensitive information. The underlying issue is a server-side infor...

CVE-2004-1639

Mozilla Firefox before 0.10, Mozilla 5.0, and Gecko 20040913 allows remote attackers to cause a denial of service application crash or memory consumption via a large binary file with a .html extension...

CVE-2004-1639

Technical details about CVE-2004-1639 are not publicly provided in the supplied connected documents; monitor for updates.

CVE-2004-1639

Mozilla Firefox before 0.10, Mozilla 5.0, and Gecko 20040913 allows remote attackers to cause a denial of service application crash or memory consumption via a large binary file with a .html extension...

CVE-2004-1639

Mozilla Firefox before 0.10, Mozilla 5.0, and Gecko 20040913 allows remote attackers to cause a denial of service application crash or memory consumption via a large binary file with a .html extension...

CVE-2002-1639

Oracle Configurator before 11.5.7.17.32 and 11.5.6.16.53 allows remote attackers to obtain sensitive information via a request to the oracle.apps.cz.servlet.UiServlet servlet with the test parameter set to "version" or "host"...