80 matches found
CVE-2011-1825
CA Arcot WebFort Versatile Authentication Server (VAS) Administrative Console is affected by CVE-2011-1825, a set of XSS vulnerabilities due to insufficient handling of request parameters. Affects VAS versions prior to 6.2.5. The vulnerability allows remote attackers to inject arbitrary web scrip...
CVE-2010-1825
CVE-2010-1825 is a use-after-free vulnerability in WebKit, affecting Google Chrome prior to 6.0.472.59, with exploitation via vectors related to nested SVG elements. The connected advisories (SUSE/OpenSUSE, Ubuntu, Debian, etc.) corroborate the issue and describe potential remote denial of servic...
CVE-2010-1825
Removed by vendor...
Google Chrome < 6.0.472.59 Multiple Vulnerabilities (Sep 2010) - Linux
Google Chrome is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Debian DSA-1825-1 : nagios2, nagios3 - insufficient input validation
It was discovered that the statuswml.cgi script of nagios, a monitoring and management system for hosts, services and networks, is prone to a command injection vulnerability. Input to the ping and traceroute parameters of the script is not properly validated which allows an attacker to execute...
Debian Security Advisory DSA 1825-1 (nagios2, nagios3)
The remote host is missing an update to nagios2, nagios3 announced via advisory DSA 1825-1. OpenVAS Vulnerability Test $Id: deb18251.nasl 6615 2017-07-07 12:09:52Z cfischer $ Description: Auto-generated from advisory DSA 1825-1 nagios2, nagios3 Authors: Thomas Reinke Copyright: Copyright c 2009...
CVE-2009-1825
The CVE-2009-1825 entry concerns myColex 1.4.2, where modules/admuser.php does not require administrative authentication. This design flaw allows remote authenticated users to list user accounts via a Find action, exposing partial confidentiality (user lists). The description and connected source...
CVE-2009-1825
creationtimestamp| type| source ---|---|--- 2009-05-15 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/8707...
CVE-2008-1825
Unspecified vulnerability in the Oracle Portal component in Oracle Application Server 9.0.4.3 has unknown impact and remote attack vectors, aka AS03...
CVE-2008-1825
Technical details about CVE-2008-1825 are not provided in the supplied documents; no explicit affected version, vulnerability type, impact, or remediation are given. Monitor for updates.
CVE-2007-1825
Buffer overflow in the imapmailcompose function in PHP 5 before 5.2.1, and PHP 4 before 4.4.5, allows remote attackers to execute arbitrary code via a long boundary string in a type.parameters field. NOTE: as of 20070411, it appears that this issue might be subsumed by CVE-2007-0906.3...
CVE-2007-1825
Buffer overflow in the imapmailcompose function in PHP 5 before 5.2.1, and PHP 4 before 4.4.5, allows remote attackers to execute arbitrary code via a long boundary string in a type.parameters field. NOTE: as of 20070411, it appears that this issue might be subsumed by CVE-2007-0906.3...
CVE-2007-1825
CVE-2007-1825: Buffer overflow in PHP imap_mail_compose (PHP 5 < 5.2.1; PHP 4
Integer overflow
Multiple buffer overflows in PHP before 5.2.1 allow attackers to cause a denial of service and possibly execute arbitrary code via unspecified vectors in the 1 session, 2 zip, 3 imap, and 4 sqlite extensions; 5 stream filters; and the 6 strreplace, 7 mail, 8 ibasedeleteuser, 9 ibaseadduser, and 1...
CVE-2007-0906
Multiple buffer overflows in PHP before 5.2.1 allow attackers to cause a denial of service and possibly execute arbitrary code via unspecified vectors in the 1 session, 2 zip, 3 imap, and 4 sqlite extensions; 5 stream filters; and the 6 strreplace, 7 mail, 8 ibasedeleteuser, 9 ibaseadduser, and 1...
CVE-2006-1825
The CVE-2006-1825 entry describes a Cross-site Scripting (XSS) vulnerability in phpLinks 2.1.3.1 and earlier, exploitable via the term parameter in index.php. The connected records confirm the affected software/version and the exploitation vector (remote injection of arbitrary web script/HTML). T...
CVE-2002-1825
Summary (CVE-2002-1825): A format-string vulnerability in PerlRTE_example1.pl used by WASD versions 7.1, 7.2.0–7.2.3, and 8.0.0 allows remote attackers to execute arbitrary commands or crash the server via format strings in the $name variable. The NVD entry lists a CVSS v2 base score of 6.4 (MEDI...
CVE-2004-1825
CVE-2004-1825 is a cross-site scripting (XSS) vulnerability in Mambo Open Source’s index.php, specifically in the mos_change_template and return parameters. Multiple connected sources (OpenVAS NASL 16316/136141256231016316, NVD, and CVE records) confirm that vulnerable versions include Mambo Open...
Immunity Canvas: RADEXECD
Name| radexecd ---|--- CVE| CVE-2005-1825 Exploit Pack| CANVAS Description| radexecd.exe Notes| CVE Name: CVE-2005-1825 VENDOR: HP Release Date: Apr 28, 2005 Reliability: This is a one-shot exploit. It's single threaded. CVE Url: http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-1825 CVS...
CVE-2004-1825
Cross-site scripting XSS vulnerability in index.php in Mambo Open Source 4.5 stable 1.0.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the 1 return or 2 moschangetemplate parameters...