XOOPS Module Tiny Event Remote SQL Injection (CVE-2007-1811)

An SQL injection vulnerability has been reported in Chapi Tiny Event. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...

CVE-2014-1811

CVE-2014-1811 affects the Windows TCP/IP stack in Windows Vista SP2, Windows Server 2008 SP2/R2, Windows 7 SP1, Windows 8/8.1, Windows Server 2012, and Windows RT (and related editions). The vulnerability arises from handling malformed data in the TCP header Options field, leading to remote denia...

MS14-031: Vulnerability in TCP Protocol Could Allow Denial of Service (2962478)

The remote Windows host is affected by a denial of service vulnerability due to the Windows TCP/IP stack improperly handling certain traffic. An attacker could exploit this vulnerability by sending a sequence of specially crafted TCP packets to cause a target system to stop responding until it is...

Microsoft Windows TCP/IP Protocol CVE-2014-1811 Remote Denial of Service Vulnerability

Description Microsoft Windows is prone to a remote denial-of-service vulnerability. An attacker can exploit this issue to cause the affected system to become unresponsive, resulting in a denial-of-service condition. Technologies Affected Avaya Aura Conferencing 6.0 SP1 Standard Avaya Aura...

Ubuntu: Security Advisory (USN-1811-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2012-1811

EOSDataServer.exe in C3-ilex EOScada before 11.0.19.2 allows remote attackers to cause a denial of service by sending a large amount of data to TCP port 24006...

CVE-2012-1811

CVE-2012-1811 affects C3-ilex EOScada, specifically the EOSDataServer.exe component. Before version 11.0.19.2, this service on TCP port 24006 is vulnerable to a Resource Management Error: sending a large amount of random data can cause a denial-of-service, resulting in the application crashing an...

HP Intelligent Management Center UAM Buffer Overflow

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3 'HP Intelligent Management Center UAM...

ZDI-12-171 : (0Day) Hewlett-Packard Intelligent Management Center UAM sprintf Remote Code Execution Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ZDI-12-171 : 0Day Hewlett-Packard Intelligent Management Center UAM sprintf Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-12-171 August 29, 2012 - -- CVE ID: - -- CVSS: 10, AV:N/AC:L/Au:N/C:C/I:C/A:C - -- Affected...

HP Intelligent Management Center UAM Buffer Overflow

This module exploits a remote buffer overflow in HP Intelligent Management Center UAM. The vulnerability exists in the uam.exe component, when using sprint in a insecure way for logging purposes. The vulnerability can be triggered by sending a malformed packet to the 1811/UDP port. The module has...

(0Day) HP Intelligent Management Center UAM sprintf Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Hewlett-Packard Intelligent Management Center. Authentication is not required to exploit this vulnerability. The flaw exists within the uam.exe component which listens by default on UDP port 1811...

CVE-2011-1811

CVE-2011-1811 concerns Google Chrome prior to version 12.0.742.91. The issue is described as a denial-of-service (application crash) triggered by handling a very large number of form submissions, via unspecified vectors. The vulnerability is listed across multiple sources (e.g., NVD/NVD CVE entry...

CVE-2010-1811

CVE-2010-1811 affects ImageIO in Apple iOS prior to 4.1, where a heap/buffer overflow in TIFF handling could allow a remote attacker to cause arbitrary code execution or a memory corruption/DoS in an affected device (iPhone/iPod touch). The provided documents specify the vulnerability class and i...

Debian DSA-1811-1 : cups, cupsys - null ptr dereference

Anibal Sacco discovered that cups, a general printing system for UNIX systems, suffers from NULL pointer dereference because of its handling of two consecutive IPP packets with certain tag attributes that are treated as IPPTAGUNSUPPORTED tags. This allows unauthenticated attackers to perform deni...

CVE-2009-1811

Multiple cross-site scripting XSS vulnerabilities in myGesuad 0.9.14 aka 0.9 allow remote attackers to inject arbitrary web script or HTML via 1 the Page parameter in a List action to modules/ereignis.php, 2 the Kontext parameter in a Search action to modules/kategorie.php, 3 the image parameter ...

CVE-2009-1811

CVE-2009-1811 affects myGesuad 0.9.14 (aka 0.9). Multiple XSS vulnerabilities allow remote attackers to inject arbitrary script or HTML via (1) Page parameter in List action to modules/ereignis.php, (2) Kontext parameter in Search action to modules/kategorie.php, (3) image parameter in modules/im...

CVE-2008-1811

CVE-2008-1811 relates to Oracle Application Express 3.0.1. The vulnerability lies in the flows_030000.wwv_execute_immediate.run_ddl function within the wwv_execute_immediate package, in the flows_030000 schema, enabling privilege escalation by certain remote authenticated users (non-DBA). The iss...

CVE-2007-1811

The vulnerability described as CVE-2007-1811 affects the Tiny Event module for XOOPS (version 1.01 and earlier). It is a SQL injection in index.php where the id parameter used by the show action allows remote attackers to execute arbitrary SQL commands. This is the confirmed root cause: improper ...

CVE-2006-1811

CVE-2006-1811 describes multiple SQL injection vulnerabilities in FlexBB 0.5.5 BETA. The flaws allow remote attackers to execute arbitrary SQL commands through input fields passed to index.php, specifically the parameters: (1) id, (2) forumid, (3) threadid; and/or profile fields (4) ICQ, (5) AIM,...

CVE-2004-1811

The CVE-2004-1811 entry concerns the SSL HTTP Server in HP Web-enabled Management Software (versions 5.0–5.92) where anonymous access enables remote attackers to replace trusted certificates by uploading their own. This could compromise certificate trust and related communications. The available ...