159 matches found
PostNuke <= 0.764 modload Module 'sid' Parameter SQLi Vulnerability
PostNuke is prone to an SQL injection SQLi vulnerability. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:postnuke:postnuke";...
CVE-2010-1713
SQL injection vulnerability in modules.php in PostNuke 0.764 allows remote attackers to execute arbitrary SQL commands via the sid parameter in a News article modload action...
CVE-2010-1713
PostNuke
CVE-2010-1713
creationtimestamp| type| source ---|---|--- 2010-04-26 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/12410...
[SECURITY] [DSA-1988-1] New qt4-x11 packages fix several vulnerabilities
------------------------------------------------------------------------ Debian Security Advisory DSA-1988-1 [email protected] http://www.debian.org/security/ Giuseppe Iuculano February 02, 2010 http://www.debian.org/security/faq -...
Ubuntu: Security Advisory (USN-857-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Apple Safari Multiple Vulnerabilities June-09 (Windows) - I
This host is installed with Apple Safari Web Browser and is prone to to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbapplesafarimultvulnjun091.nasl 4865 2016-12-28 16:16:43Z teissa $ Apple Safari Multiple Vulnerabilities June-09 Windows - I Authors: Sharath S Copyright: Copyright c...
CVE-2009-1713
CVE-2009-1713 is a WebKit XSLT vulnerability. In qt4-x11 (and related WebKit deployments like Safari) the XSLT document() function can be mis-implemented, allowing a remote attacker to read arbitrary local files and files in other security zones via crafted HTML/XML. Debian DSA-1988 confirms the ...
Debian DSA-1713-1 : rt2500 - integer overflow
It was discovered that an integer overflow in the 'Probe Request' packet parser of the Ralinktech wireless drivers might lead to remote denial of service or the execution of arbitrary code. Please note that you need to rebuild your driver from the source package in order to set this update into...
CVE-2008-1713
CVE-2008-1713 affects NoticeWare Email Server 4.6.1.0 (MailServer.exe). The vulnerability allows remote attackers to cause an application crash (DoS) by sending a long string to the IMAP port (143/tcp). The connected sources confirm the component and the attack vector, but do not provide a specif...
CVE-2008-1713
creationtimestamp| type| source ---|---|--- 2008-04-01 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/5341...
CVE-2006-1713
Cross-site scripting XSS vulnerability in index.php in Christoph Roeder phpMyForum 4.0 allows remote attackers to inject arbitrary web script or HTML via the page parameter...
CVE-2006-1713
CVE-2006-1713: Cross-site scripting (XSS) in phpMyForum 4.0 (index.php) allows remote attackers to inject arbitrary script/HTML via the page parameter. Affected software: phpMyForum 4.0. Root cause: input in the page parameter is not properly sanitized before output. Impact is web-script injectio...
CVE-2002-1713
The CVE-2002-1713 issue affects Mandrake Linux 8.2, where the Standard security setting for the Mandrake-Security package (msec) installs home directories with world-readable permissions. This local-file-permission flaw could allow a local user to view other users’ files. The connected PT-2002-24...
CVE-2005-1713
Serendipity 0.8 is affected by multiple XSS vulnerabilities described in CVE-2005-1713, exploitable via the templatedropdown and shoutbox plugins. The Red Hat and NVD entries corroborate that remote attackers could inject arbitrary web script or HTML through these plugins, enabling client-side sc...
TrendMicro eManager Detection
Binary data 1713.prm...
CVE-2004-1713
Unknown vulnerability in HP Process Resource Manager PRM C.02.01.01 and earlier, as used by HP-UX Workload Manager WLM, allows local users to corrupt data files...
CVE-2002-1713
The Standard security setting for Mandrake-Security package msec in Mandrake 8.2 installs home directories with world-readable permissions, which could allow local users to read other user's files...