503 matches found
Novell iPrint Client < 5.64 Multiple Vulnerabilities
The version of Novell iPrint Client installed on the remote host is prior to 5.64. It is, therefore, affected by one or more of the following vulnerabilities in the nipplib.dll component, as used by both types of browser plugins, that can allow for arbitrary code execution : - The uri parameter...
CVE-2010-1703
Multiple cross-site scripting XSS vulnerabilities in indexsearch.php in 2daybiz Polls aka Advanced Poll Script allow remote attackers to inject arbitrary web script or HTML via the 1 category parameter or 2 search field...
CVE-2010-1703
creationtimestamp| type| source ---|---|--- 2010-04-26 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/12395...
Design/Logic Flaw
Apple Safari 3.2.3 does not properly implement the file: protocol handler, which allows remote attackers to read arbitrary files or cause a denial of service launch of multiple Windows Explorer instances via vectors involving an unspecified HTML tag, possibly a related issue to CVE-2009-1703...
Apple Safari Multiple Vulnerabilities June-09 (Windows) - I
This host is installed with Apple Safari Web Browser and is prone to to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbapplesafarimultvulnjun091.nasl 4865 2016-12-28 16:16:43Z teissa $ Apple Safari Multiple Vulnerabilities June-09 Windows - I Authors: Sharath S Copyright: Copyright c...
CVE-2009-1703
WebKit in Apple Safari before 4.0 does not prevent references to file: URLs within 1 audio and 2 video elements, which allows remote attackers to determine the existence of arbitrary files via a crafted HTML document...
CVE-2009-1703
CVE-2009-1703 concerns WebKit in Apple Safari prior to 4.0, where references to file: URLs within audio and video elements are not blocked. This could let remote attackers determine the existence of arbitrary files by delivering crafted HTML, constituting an information-disclosure risk. The affec...
Debian DSA-1703-1 : bind9 - interpretation conflict
It was discovered that BIND, an implementation of the DNS protocol suite, does not properly check the result of an OpenSSL function which is used to verify DSA cryptographic signatures. As a result, incorrect DNS resource records in zones protected by DNSSEC could be accepted as genuine...
Debian: Security Advisory (DSA-1703-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
[SECURITY] [DSA 1703-1] New bind9 packages fix cryptographic weakness
------------------------------------------------------------------------ Debian Security Advisory DSA-1703-1 [email protected] http://www.debian.org/security/ Florian Weimer January 12, 2009 http://www.debian.org/security/faq -...
CVE-2008-1703
CVE-2008-1703 maps to multiple buffer overflows in TIBCO Rendezvous and related components (rvd, rvrd, rvsrd, rvsd, rvcache, rva, rvrad, rvperfm/rvperfs, libtibrv, libtibrvipm, rvacld, rvtxd, procmgr/pmsulib, tibssxfr, sxf3rpub, sxf3rsub). The root cause is buffer overflows when processing inboun...
CVE-2007-1703
SQL injection vulnerability in index.php in the RWCards comrwcards 2.4.3 and earlier component for Joomla! allows remote attackers to execute arbitrary SQL commands via the categoryid parameter...
CVE-2007-1703
Affected software: RWCards component for Joomla! (com_rwcards), version 2.4.3 and earlier. Vulnerability: SQL injection in rwcards.php via the category_id parameter, caused by improper sanitization of user-supplied input before building database queries. Impact: Remote attacker could execute arbi...
CVE-2006-1703
CVE-2006-1703 describes a PHP remote file inclusion in lire.php of Sire 2.0 nws, allowing remote attackers to execute arbitrary PHP code via a URL in the rub parameter. Affected software: Sire 2.0 nws (lire.php). Root cause: improper handling of the rub parameter enabling remote file inclusion. I...
CVE-2002-1703
CVE-2002-1703 is a cross-site scripting (XSS) vulnerability in Mewsoft NetAuction 3.0, specifically in auction.cgi, allowing remote attackers to execute arbitrary script as other users via the Term parameter. The linked records confirm the affected product/version and the vulnerable parameter, wi...
CVE-2005-1703
CVE-2005-1703 affects Warrior Kings: Battles versions 1.23 and earlier. The vulnerability allows remote attackers to cause a denial of service (server crash) via a partial join packet that triggers a NULL pointer dereference. The provided connected documents confirm this description but do not re...
CVE-2004-1703
Fusion News 3.6.1 is affected. A remote attacker can add user accounts if the administrator is logged in by embedding an img bbcode tag in a comment that calls index.php with the signup action, which executes when the administrator’s browser loads the page containing the img tag. This is due to t...
CVE-2004-1703
Fusion News 3.6.1 allows remote attackers to add user accounts, if the administrator is logged in, via a comment that contains an img bbcode tag that calls index.php with the signup action, which is executed when the administrator's browser loads the page with the img tag...
CVE-2004-1703
Fusion News 3.6.1 allows remote attackers to add user accounts, if the administrator is logged in, via a comment that contains an img bbcode tag that calls index.php with the signup action, which is executed when the administrator's browser loads the page with the img tag...
