CVE-2011-1744

EMC Captiva eInput 2.1.1 before 2.1.1.37 is affected by CVE-2011-1744, where ActiveX function calls are not restricted to trusted origins. This enables a remote attacker to read arbitrary files or cause a denial of service via a crafted web site. The issue affects EMC Captiva eInput versions prio...

CVE-2010-1744

CVE-2010-1744 concerns a SQL injection in product.html of B2B Gold Script, exploitable via the id parameter. Affected component is the web application’s product page (product.html) where unsanitized input in id is used in SQL queries, enabling remote attackers to execute arbitrary SQL commands. T...

CVE-2010-1744

creationtimestamp| type| source ---|---|--- 2010-04-30 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/12460...

CVE-2009-1744

InstallHFZ.exe 6.5.201.0 in Pinnacle Hollywood Effects 6, a module in Pinnacle Systems Pinnacle Studio 12, allows remote attackers to cause a denial of service application crash via a crafted Hollywood FX Compressed Archive .hfz file...

CVE-2009-1744

CVE-2009-1744 : The NVD entry describes a vulnerability in Pinnacle Hollywood Effects 6, a module of Pinnacle Studio 12, where installing InstallHFZ.exe 6.5.201.0 allows remote attackers to cause a denial of service (application crash) by processing a crafted Hollywood FX Compressed Archive (.hfz...

CVE-2009-1744

creationtimestamp| type| source ---|---|--- 2009-05-13 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/8670...

Debian Security Advisory DSA 1744-1 (weechat)

The remote host is missing an update to weechat announced via advisory DSA 1744-1. OpenVAS Vulnerability Test $Id: deb17441.nasl 6615 2017-07-07 12:09:52Z cfischer $ Description: Auto-generated from advisory DSA 1744-1 weechat Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...

Debian: Security Advisory (DSA-1744-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian DSA-1744-1 : weechat - missing input sanitization

Sebastien Helleu discovered that an error in the handling of color codes in the weechat IRC client could cause an out-of-bounds read of an internal color array. This can be used by an attacker to crash user clients via a crafted PRIVMSG command. The weechat version in the oldstable distribution...

[SECURITY] [DSA 1744-1] New weechat packages fix denial of service

-------------------------------------------------------------------------- Debian Security Advisory DSA-1744-1 [email protected] http://www.debian.org/security/ Nico Golde March 18th, 2009 http://www.debian.org/security/faq -...

CVE-2008-1744

CVE-2008-1744 affects Cisco Unified Communications Manager (CUCM) CAPF (Certificate Authority Proxy Function) across CUCM 4.1/4.2/4.3 with specific SR updates. The CAPF service, normally TCP 3804 and disabled by default, may be abused by remote malformed network traffic to trigger a denial-of-ser...

VMSA-2007-0004.1 Updated: Multiple Denial-of-Service issues fixed and directory traversal vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 - ------------------------------------------------------------------- VMware Security Advisory Advisory ID: VMSA-2007-0004.1 Synopsis: Updated: Multiple Denial-of-Service issues fixed and directory traversal vulnerability Issue date: 2007-05-04...

VMSA-2007-0004 Multiple Denial-of-Service issues fixed

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 - ------------------------------------------------------------------- VMware Security Advisory Advisory ID: VMSA-2007-0004 Synopsis: Multiple Denial-of-Service issues fixed Issue date: 2007-05-04 Updated on: 2007-05-04 CVE numbers: CVE-2007-1069...

CVE-2007-1744

CVE-2007-1744 is a VMware Workstation/Player/ACE Shared Folders directory traversal vulnerability. A guest user can write to arbitrary host files via the Backdoor I/O Port if Shared Folders is enabled and at least one host folder is shared. Root cause: PathName is converted to Unicode with UTF-8 ...

CVE-2007-1744

Directory traversal vulnerability in the Shared Folders feature for VMware Workstation before 5.5.4, when a folder is shared, allows users on the guest system to write to arbitrary files on the host system via the "Backdoor I/O Port" interface...

iDefense Security Advisory 04.27.07: VMware Workstation Shared Folders Directory Traversal Vulnerability

VMware Workstation Shared Folders Directory Traversal Vulnerability iDefense Security Advisory 04.27.07 http://labs.idefense.com/intelligence/vulnerabilities/ Apr 27, 2007 I. BACKGROUND VMware Workstation is a software virtualization system which allows multiple virtual computers to run on a sing...

[SECURITY] [DSA 1036-1] New bsdgames packages fix local privilege escalation

-------------------------------------------------------------------------- Debian Security Advisory DSA 1036-1 [email protected] http://www.debian.org/security/ Steve Kemp April 17th, 2006 http://www.debian.org/security/faq -...

CVE-2006-1744

BSDgames (sail) contains a buffer overflow in pl_main.c that affects versions before 2.17-7, enabling a local user to potentially execute arbitrary code via a long player name used in scanf. Multiple sources (Debian DSA-1036-1, SUSE CVE entry, OSV entries) confirm the flaw and local-privilege esc...

CVE-2002-1744

The connected CVE records confirm a directory traversal in CodeBrws.asp for Microsoft IIS 5.0. The vulnerable component is CodeBrws.asp (IIS 5.0), with the underlying issue caused by a hex-encoded "+%c0%ae%c0%ae+" sequence representing ".." that allows remote attackers to view source code and det...

CVE-2005-1744

The CVE concerns BEA WebLogic Server and WebLogic Express 7.0 through Service Pack 5, where a redeploy does not log out users. This allows continued access to the application without re-authentication, potentially violating newly changed security constraints or role mappings. The issue is documen...