76 matches found
CVE-2012-1826
dotCMS 1.9 before 1.9.5.1 allows remote authenticated users to execute arbitrary Java code via a crafted 1 XSLT or 2 Velocity template...
CVE-2012-1826
The CVE-2012-1826 vulnerability affects dotCMS 1.9 prior to 1.9.5.1, where an authenticated user with permissions to author/upload templates can craft malicious XSLT or Velocity templates that execute arbitrary Java code on the web service account. This can lead to remote code execution and poten...
dotCMS template permissions allow arbitrary code execution
Overview The dotCMS content management system version 1.9 and possibly earlier versions, contains a vulnerability that allows users with the appropriate permissions to create a malicious template with arbitrary code. Description An authenticated dotCMS user with the permissions required to author...
MySQL 3.x Password Disclosure
The version of MySQL installed on the remote host reportedly uses a weak algorithm for authentication. A remote attacker who can monitor network traffic could retrieve passwords by breaking the used cryptographic algorithms. C Tenable Network Security, Inc. include"compat.inc"; if description...
CVE-2011-1826
CA Arcot WebFort Versatile Authentication Server (VAS) before 6.2.5 is vulnerable to an open redirect in the Administrative Console due to insufficient filtering of a request parameter, enabling attackers to redirect users to arbitrary sites and facilitate phishing via crafted URLs. Affected prod...
Debian DSA-1826-1 : eggdrop - several vulnerabilities
Several vulnerabilities have been discovered in eggdrop, an advanced IRC robot. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2007-2807 It was discovered that eggdrop is vulnerable to a buffer overflow, which could result in a remote user executing...
Debian Security Advisory DSA 1826-1 (eggdrop)
The remote host is missing an update to eggdrop announced via advisory DSA 1826-1. OpenVAS Vulnerability Test $Id: deb18261.nasl 6615 2017-07-07 12:09:52Z cfischer $ Description: Auto-generated from advisory DSA 1826-1 eggdrop Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...
CVE-2009-1826
The CVE-2009-1826 entry affects myGesuad 0.9.14 (aka 0.9). The vulnerability is that modules/admuser.php does not require administrative authentication, enabling remote authenticated users to list user accounts via a Find action. This is the explicit root cause and impact stated in multiple sourc...
CVE-2009-1826
creationtimestamp| type| source ---|---|--- 2009-05-15 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/8708...
CVE-2008-1826
Technical details about CVE-2008-1826 are not publicly available in the provided documents. No concrete information on impacted components, root cause, or fixes is included; monitor for updates.
CVE-2007-1826
CVE-2007-1826 affects Cisco Unified CallManager (CUCM) 5.0 before 5.0(4a)SU1 and Cisco Unified Presence Server (CUPS) 1.0 before 1.0(3). The issue is an unspecified vulnerability that lets remote attackers cause a denial of service (loss of cluster services) by sending a specific UDP packet to UD...
CVE-2002-1826
The CVE-2002-1826 issue affects grsecurity 1.9.4 for the Linux kernel (2.4.18). Local users can bypass read-only protections by using mmap to directly map /dev/mem or /dev/kmem into kernel memory, as described in multiple sources (NVD/Red Hat/CVE lists). The connected documents provide the vulner...
CVE-2005-1826
CVE-2005-1826 affects HP Radia Notify Daemon (versions 2.x, 3.x, 4.x; formerly Novadigm) where a buffer overflow via a long file extension allows a remote attacker to execute arbitrary code. The description specifies remote code execution but does not provide exploit code or in-the-wild details. ...
CVE-2004-1826
CVE-2004-1826 affects Mambo Open Source 4.5 stable 1.0.3 and earlier, where index.php is vulnerable to SQL injection via the id parameter. The vulnerability arises from improper input handling in the application, enabling remote attackers to craft SQL payloads and potentially influence database q...