80 matches found
Mozilla Firefox 'keygen' HTML Tag DOS Vulnerability - Linux
Mozilla Firefox is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
CVE-2009-1827
CVE-2009-1827 affects Mozilla Firefox 3.0.4 via the SVG component. An attacker can trigger a denial of service (application hang) by sending a large value in the r (Radius) attribute of a circle element, related to an “unclamped loop.” Public sources in the provided documents corroborate a DoS ri...
CVE-2009-1827
creationtimestamp| type| source ---|---|--- 2009-05-26 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/8794...
CVE-2008-1827
Technical details about CVE-2008-1827 are not publicly provided in the supplied documents. The connected sources do not reveal specific affected versions, root cause, or remediation. Monitor for updates from official advisories.
Debian: Security Advisory (DSA-1048-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2007-1827
Affected software: web-app.org WebAPP before 0.9.9.6. Issue: multiple unspecified flaws in form input validation allow remote authenticated users to corrupt data files, access private files, and execute arbitrary code via certain characters. Root cause is tied to input validation weaknesses; expl...
Debian DSA-1048-1 : asterisk - several vulnerabilities
Several problems have been discovered in Asterisk, an Open Source Private Branch Exchange telephone control center. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2005-3559 Adam Pointon discovered that due to missing input sanitising it is possible to...
[SECURITY] [DSA 1048-1] New Asterisk packages fix arbitrary code execution
-------------------------------------------------------------------------- Debian Security Advisory DSA 1048-1 [email protected] http://www.debian.org/security/ Martin Schulze May 1st, 2006 http://www.debian.org/security/faq -...
CVE-2006-1827
Integer signedness error in formatjpeg.c in Asterisk 1.2.6 and earlier allows remote attackers to execute arbitrary code via a length value that passes a length check as a negative number, but triggers a buffer overflow when it is used as an unsigned length...
CVE-2006-1827
Integer signedness error in formatjpeg.c in Asterisk 1.2.6 and earlier allows remote attackers to execute arbitrary code via a length value that passes a length check as a negative number, but triggers a buffer overflow when it is used as an unsigned length...
DEBIAN-CVE-2006-1827
Integer signedness error in formatjpeg.c in Asterisk 1.2.6 and earlier allows remote attackers to execute arbitrary code via a length value that passes a length check as a negative number, but triggers a buffer overflow when it is used as an unsigned length...
CVE-2004-2141
CVE-2004-2141 is a duplicate of CVE-2004-1827 and is not a separate active entry. Connected details for CVE-2004-1827 show a Cross-site scripting (XSS) vulnerability in YaBB 1 Gold(SP1.3) and YaBB SE 1.5.1 Final, allowing remote attackers to inject arbitrary web script via the background:url prop...
CVE-2002-1827
Affected software: Sendmail 8.9.0–8.12.3. The issue is that local users can trigger a denial of service by obtaining an exclusive lock on the (1) alias, (2) map, (3) statistics, and (4) pid files. The available connected documents confirm the vulnerability is a local DoS via file locking, but do ...
CVE-2005-1827
The CVE-2005-1827 issue affects the D-Link DSL-504T, where an unauthenticated remote attacker can bypass authentication by sending a direct request to the firmwarecfg endpoint. This allows privilege escalation to perform actions such as upgrading firmware, restarting the router, or restoring a sa...
CVE-2004-1827
CVE-2004-1827 is an XSS vulnerability in YaBB 1 Gold(SP1.3) and YaBB SE 1.5.1 Final. The issue allows remote attackers to inject arbitrary web script via the background:url property in (1) glow or (2) shadow tags. Affected software is YaBBForum components mentioned in the CVE record, with the vul...
CVE-2004-1827
Cross-site scripting XSS vulnerability in YaBB 1 GoldSP1.3 and YaBB SE 1.5.1 Final allows remote attackers to inject arbitrary web script via the background:url property in 1 glow or 2 shadow tags...
CVE-2004-2141
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2004-1827. Reason: This candidate is a duplicate of CVE-2004-1827. Notes: All CVE users should reference CVE-2004-1827 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...
CVE-2004-1827
Cross-site scripting XSS vulnerability in YaBB 1 GoldSP1.3 and YaBB SE 1.5.1 Final allows remote attackers to inject arbitrary web script via the background:url property in 1 glow or 2 shadow tags...