98 matches found
CVE-2007-1783
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2007-1685. Reason: This candidate is a duplicate of CVE-2007-1685. Notes: All CVE users should reference CVE-2007-1685 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...
Design/Logic Flaw
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2007-1685. Reason: This candidate is a duplicate of CVE-2007-1685. Notes: All CVE users should reference CVE-2007-1685 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...
CVE-2007-1783
CVE-2007-1783 is rejected/not used; consult CVE-2007-1685 instead.
CVE-2010-1685
CursorArts ZipWrangler 1.20 is affected by a stack-based buffer overflow in ZIP processing, allowing a user-assisted remote attacker to execute arbitrary code by supplying a ZIP file containing a file with a long filename. Multiple sources (OpenVAS NASL, OpenVAS host advisories, and CVE records) ...
CVE-2010-1685
creationtimestamp| type| source ---|---|--- 2010-04-24 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/12368...
CVE-2009-1685
Cross-site scripting XSS vulnerability in WebKit in Apple Safari before 4.0, iPhone OS 1.0 through 2.2.1, and iPhone OS for iPod touch 1.1 through 2.2.1 allows remote attackers to inject arbitrary web script or HTML by overwriting the document.implementation property of 1 an embedded document or ...
CVE-2009-1685
CVE-2009-1685 is a documented XSS vulnerability in WebKit used by Apple Safari prior to 4.0 and by iOS webviews (iPhone OS 1.0–2.2.1). The root cause, as described in authoritative sources, is that overwriting the document.implementation property of either an embedded document or a parent documen...
Debian Security Advisory DSA 1685-1 (uw-imap)
The remote host is missing an update to uw-imap announced via advisory DSA 1685-1. OpenVAS Vulnerability Test $Id: deb16851.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1685-1 uw-imap Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...
Debian DSA-1685-1 : uw-imap - buffer overflows, NULL pointer dereference
Two vulnerabilities have been found in uw-imap, an IMAP implementation. The Common Vulnerabilities and Exposures project identifies the following problems : It was discovered that several buffer overflows can be triggered via a long folder extension argument to the tmail or dmail program. This...
CVE-2008-1685
CVE-2008-1685 affects GNU Compiler Collection versions 4.2.0–4.3.0. The issue is that when casts are not used, the sum of a pointer and an int may be considered >= the pointer, which can lead to removal of length-testing code intended as protection against integer overflow and buffer overflow,...
CVE-2007-1685
Buffer overflow in k9filter.exe in BlueCoat K9 Web Protection 3.2.36, and probably other versions before 3.2.44, allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a long HTTP GET request to port 2372...
CVE-2007-1685
CVE-2007-1685 describes a buffer overflow in k9filter.exe of BlueCoat K9 Web Protection 3.2.36 (and likely earlier versions before 3.2.44) that can be triggered by a long HTTP GET request to port 2372. The vulnerability may allow a remote attacker to cause a denial of service (crash) and potentia...
CVE-2006-1685
The CVE-2006-1685 entry concerns the APT-webshop-system (versions 4.0 PRO, 3.0 BASIC, 3.0 LIGHT) where the vulnerability is in modules.php. The underlying issue is SQL injection via the parameters (1) group, (2) seite, and (3) id, potentially involving the artikel functionality. This allows remot...
CVE-2002-1685
CVE-2002-1685 : BadBlue Enterprise Edition and Personal Edition versions 1.7 and 1.7.2 are affected by a cross-site scripting (XSS) vulnerability in the ext.dll ISAPI. The flaw enables an attacker to execute arbitrary script in the context of other users by injecting script via the ext.dll ISAPI ...
CVE-2002-1685
Cross-site scripting vulnerability XSS in BadBlue Enterprise Edition and Personal Edition 1.7 and 1.7.2 allows remote attackers to execute arbitrary script as other users by injecting script into ext.dll ISAPI...
CVE-2005-1685
Episodex Guestbook is affected by an authentication bypass and unauthorized editing via admin.asp. Multiple sources (NVD/NVD-derived, OpenVAS NASL, Nessus plugin) describe an input-validation flaw in default.asp that enables remote, unauthenticated attackers to access admin functions and inject H...
CVE-2004-1685
The CVE-2004-1685 issue affects SMC routers: SMC7004VWBR (firmware 1.00.014) and SMC7008ABR EU (firmware 1.42.003). Root cause: authentication bypass by a remote attacker who connects from the same IP address as the administrator currently logged in, then accesses setup_status.htm or status.HTM. ...
CVE-2004-1685
SMC routers SMC7004VWBR running firmware 1.00.014 and SMC7008ABR EU running firmware 1.42.003 allow remote attackers to bypass authentication by connecting to it from the same IP address as the administrator who is logged in, then accessing the setupstatus.htm or status.HTM pages...