96 matches found
Novell iPrint Client < 5.64 Multiple Vulnerabilities
The version of Novell iPrint Client installed on the remote host is prior to 5.64. It is, therefore, affected by one or more of the following vulnerabilities in the nipplib.dll component, as used by both types of browser plugins, that can allow for arbitrary code execution : - The uri parameter...
Sql injection
SQL injection vulnerability in eWebQuiz.asp in ActiveWebSoftwares.com eWebquiz 8 allows remote attackers to execute arbitrary SQL commands via the QuizType parameter, a different vector than CVE-2007-1706...
CVE-2010-1706
CVE-2010-1706 concerns multiple SQL injection vulnerabilities in login.php of the 2daybiz Auction Script, allowing remote attackers to execute arbitrary SQL commands via the login field (username) and possibly the password field, directed at index.php. The issue is documented across multiple sour...
Apple Safari Multiple Vulnerabilities June-09 (Windows) - I
This host is installed with Apple Safari Web Browser and is prone to to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbapplesafarimultvulnjun091.nasl 4865 2016-12-28 16:16:43Z teissa $ Apple Safari Multiple Vulnerabilities June-09 Windows - I Authors: Sharath S Copyright: Copyright c...
CVE-2009-1706
CVE-2009-1706 affects Apple Safari on Windows prior to 4.0. The Private Browsing feature has an implementation flaw that may fail to remove cookies from the alternate cookie store when the feature is disabled or the application exits, enabling potential user tracking via cookies. The impact is us...
Debian Security Advisory DSA 1706-1 (amarok)
The remote host is missing an update to amarok announced via advisory DSA 1706-1. OpenVAS Vulnerability Test $Id: deb17061.nasl 6615 2017-07-07 12:09:52Z cfischer $ Description: Auto-generated from advisory DSA 1706-1 amarok Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...
Debian: Security Advisory (DSA-1706-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Debian DSA-1706-1 : amarok - integer overflows
Tobias Klein discovered that integer overflows in the code the Amarok media player uses to parse Audible files may lead to the execution of arbitrary code. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Securi...
CVE-2008-1706
CVE-2008-1706 affects IBM solidDB (versions 06.00.1018 and earlier). The issue is an uncontrolled array index in a 32-bit field that can be triggered by a large value, allowing remote attackers to cause a daemon crash (DoS). The connected documents provide the vulnerability description and affect...
CVE-2007-1706
The CVE-2007-1706 entry describes a SQL injection in eWebQuiz.asp of eWebQuiz 8, allowing remote attackers to execute arbitrary SQL via the QuizID parameter. The vulnerability is caused by inadequate input handling in eWebQuiz.asp, enabling manipulation of the backend database. According to the l...
CVE-2006-1706
CVE-2006-1706 affects Shopweezle 2.0. The vulnerability is a SQL injection in multiple parameters: (1) itemID used in login.php and memo.php; and (2) itemgr, brandID, and album used in index.php. The issues can allow remote attackers to execute arbitrary SQL commands and may cause full path discl...
CVE-2002-1706
CVE-2002-1706 affects Cisco IOS on uBR7200/uBR7100 (11.3–12.2). A defect allows remote attackers to modify DOCSIS settings by submitting a DOCSIS file without a Message Integrity Check (MIC) signature, which the router approves. Connected advisories describe a two-part issue for the CMTS family a...
CVE-2004-1706
The CVE-2004-1706 entry concerns the U.S. Robotics USR808054 wireless access point. The issue is triggered by an HTTP GET request with a long version string, allowing remote attackers to cause a denial of service (device crash) and potentially execute arbitrary code. The connected records confirm...
CVE-2002-1706
Cisco IOS software 11.3 through 12.2 running on Cisco uBR7200 and uBR7100 series Universal Broadband Routers allows remote attackers to modify Data Over Cable Service Interface Specification DOCSIS settings via a DOCSIS file without a Message Integrity Check MIC signature, which is approved by th...
