CVE-2013-1651

CVE-2013-1651 describes OXUpdater in Open-Xchange Server failing to verify SSL certificates from update servers, enabling MITM spoofing and deployment of arbitrary software via crafted certificates. Affected products/versions are Open-Xchange Server 6: before 6.20.7-rev14, 6.22.0-before-rev13, an...

Open-Xchange Server Multiple Vulnerabilities (Mar 2013) - Active Check

Open-Xchange Server is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Ubuntu Update for linux USN-1651-1

Ubuntu Update for Linux kernel vulnerabilities USN-1651-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN16511.nasl 7960 2017-12-01 06:58:16Z santu $ Ubuntu Update for linux USN-1651-1 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This...

Ubuntu: Security Advisory (USN-1651-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu 10.04 LTS : linux vulnerability (USN-1651-1)

Rodrigo Freire discovered a flaw in the Linux kernel's TCP illinois congestion control algorithm. A local attacker could use this to cause a denial of service. Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has...

CVE-2012-1651

CVE-2012-1651 affects the Drupal Submenu Tree contributed module prior to version 6.x-1.5. The vulnerability is a Cross-site Scripting (XSS) flaw caused by inadequate sanitization of user-supplied data when displaying a list of menu entries, exploitable by remote authenticated users via unspecifi...

SA-CONTRIB-2012-027 - Submenu Tree -Cross Site Scripting

CVE: CVE-2012-1651 The Submenu Tree module allows sufficiently privileged users to show a list of menu entries when displaying a node. The module does not sanitize some of the user-supplied data before displaying it, leading to a Cross Site Scripting XSS vulnerability. The vulnerability is...

CVE-2011-1651

CVE-2011-1651 affects Cisco IOS XR on Cisco XR 12000 Series with a Shared Port Adapters (SPA) Interface Processor. A crafted IPv4 packet sent to an affected device can trigger a reload of the SPA interface processor, causing a denial-of-service condition (device reload). Affected software version...

CVE-2010-1651

IBM WebSphere Application Server WAS 6.1.x before 6.1.0.31 and 7.0.x before 7.0.0.11, when Basic authentication and SIP tracing aka full trace logging for SIP are enabled, logs the entirety of all inbound and outbound SIP messages, which allows local users to obtain sensitive information by readi...

CVE-2010-1651

IBM WebSphere Application Server (WAS) is affected by CVE-2010-1651: when Basic authentication and SIP tracing are enabled, SIP trace logs contain the complete inbound/outbound SIP messages, allowing a local attacker to read sensitive information. Affected versions are WAS 6.1.x prior to 6.1.0.31...

CentOS Security Advisory CESA-2009:1651 (ntp)

The remote host is missing updates to ntp announced in advisory CESA-2009:1651. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR GPL-3.0-only...

CVE-2009-1651

SQL injection vulnerability in admin/memberdetails.php in 2daybiz Business Community Script allows remote attackers to execute arbitrary SQL commands via the mid parameter...

CVE-2009-1651

The CVE-2009-1651 entry describes a SQL injection in the 2daybiz Business Community Script, specifically in admin/member_details.php. The vulnerability is exploitable via the mid parameter, allowing remote attackers to execute arbitrary SQL commands. The public references (NVD entry and other sou...

CVE-2009-1651

creationtimestamp| type| source ---|---|--- 2009-05-14 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/8689...

Debian Security Advisory DSA 1651-1 (ruby1.8)

The remote host is missing an update to ruby1.8 announced via advisory DSA 1651-1. OpenVAS Vulnerability Test $Id: deb16511.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1651-1 ruby1.8 Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

Debian DSA-1651-1 : ruby1.8 - several vulnerabilities

Several vulnerabilities have been discovered in the interpreter for the Ruby language, which may lead to denial of service and other security problems. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2008-3655 Keita Yamaguchi discovered that several safe...

CVE-2008-1651

EasyNews 4.0 admin/login.php is affected by a directory traversal vulnerability. An attacker can supply a ".." in the lang parameter to include and execute local files, enabling remote code execution. CVSS v2 base score 7.5 (HIGH); network access, no authentication, partial impact on confidential...

CVE-2008-1651

creationtimestamp| type| source ---|---|--- 2008-04-01 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/5333...

CVE-2006-1651

Microsoft ISA Server 2004 is affected by CVE-2006-1651, which reportedly allows remote attackers to bypass filtering rules (including ICMP and TCP) via IPv6 packets. The issue is controversial: an established researcher disputes IPv6 filtering support in ISA Server 2004 and Windows 2003 Basic Fir...

CVE-2002-1651

CVE-2002-1651 describes a cross-site scripting (XSS) vulnerability in the Verity Search97 product. The issue arises from certain error messages in template pages that use the (1) vformat and (2) vfilter functions, enabling remote attackers to inject arbitrary web content and potentially access se...