154 matches found
CVE-2011-1746
The CVE affects the Linux kernel prior to 2.6.38.5, specifically the AGP subsystem in drivers/char/agp/generic.c. It is caused by multiple integer overflows in the functions agp_allocate_memory and agp_create_user_memory, allowing local users to trigger buffer overflows and potentially crash the ...
CVE-2010-1746
Multiple cross-site scripting XSS vulnerabilities in the Table JX comgrid component for Joomla! allow remote attackers to inject arbitrary web script or HTML via the 1 datasearch and 2 rpp parameters to index.php...
CVE-2010-1746
CVE-2010-1746 affects the Joomla! Table JX (com_grid) component. The vulnerability is an XSS flaw exploitable via the data_search and rpp parameters to index.php, allowing remote attackers to inject arbitrary script/HTML. The connected documents confirm the affected component and parameters but d...
CVE-2010-1746
creationtimestamp| type| source ---|---|--- 2010-05-01 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/12473...
CVE-2009-1746
CVE-2009-1746 describes an SQL injection in Dian Gemilang DGNews 3.0 Beta, via the id parameter in berita.php’s detail action, enabling remote arbitrary SQL execution. The underlying issue is a vulnerability in berita.php allowing attacker-controlled input to alter SQL queries. Affected product/v...
CVE-2009-1746
creationtimestamp| type| source ---|---|--- 2009-05-18 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/8727...
Debian Security Advisory DSA 1746-1 (ghostscript)
The remote host is missing an update to ghostscript announced via advisory DSA 1746-1. OpenVAS Vulnerability Test $Id: deb17461.nasl 6615 2017-07-07 12:09:52Z cfischer $ Description: Auto-generated from advisory DSA 1746-1 ghostscript Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...
Debian: Security Advisory (DSA-1746-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2008-1746
Cisco Unified Communications Manager (CUCM) SNMP Trap Agent is vulnerable to DoS via a sequence of malformed UDP packets. Affected versions: 4.1 before 4.1(3)SR6, 4.2 before 4.2(3)SR3, 4.3 before 4.3(2), 5.x before 5.1(3), and 6.x before 6.1(1). Root cause as described is a vulnerability in the S...
CVE-2006-1746
The CVE-2006-1746 issue affects phpList <= 2.10.2, where the index.php’s database_module (and language_module) handling allows Local File Inclusion by overwriting $GLOBALS via user-supplied GLOBALS[database_module]/GLOBALS[language_module]. The root cause is inadequate input sanitization and, ...
CVE-2002-1746
Affected software: Vtun 2.5b1. The CVE describes that remote attackers can inject data into user sessions by sniffing and replaying packets, enabling data injection into sessions. The provided documents do not specify a fix or patch version. No explicit exploitation details beyond the sniffing/re...
CVE-2005-1746
The cluster cookie parsing code in BEA WebLogic Server 7.0 through Service Pack 5 attempts to contact any host or port specified in a cookie, even when it is not in the cluster, which allows remote attackers to cause a denial of service cluster slowdown via modified cookies...
CVE-2004-1746
The CVE-2004-1746 entry describes a Cross-site scripting (XSS) vulnerability in PHP Code Snippet Library’s index.php, exploitable via the cat_select and show parameters. The underlying issue is inadequate input sanitization in index.php, allowing remote attackers to inject arbitrary JavaScript in...
PHP Code Snippet Library index.php Multiple Parameter XSS
The remote host is running PHP Code Snippet Library PHP-CSL, a library written in PHP. The remote version of this software fails to sanitize input to the 'catselect' parameter of the 'index.php' script. This can be used to take advantage of the trust between a client and server allowing the...