120 matches found
CVE-2011-1851
CVE-2011-1851 affects HP Intelligent Management Center (IMC) 5.0 before E0101L02. The vulnerability is a stack-based buffer overflow in the tftpserver.exe component triggered by a long mode field in received TFTP packets, enabling remote code execution in the security context of the service. Red ...
ZDI-11-163: HP 3COM/H3C Intelligent Management Center tftpserver mode Remote Code Execution Vulnerability
ZDI-11-163: HP 3COM/H3C Intelligent Management Center tftpserver mode Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-11-163 May 10, 2011 -- CVE ID: CVE-2011-1851 -- CVSS: 10, AV:N/AC:L/Au:N/C:C/I:C/A:C -- Affected Vendors: Hewlett-Packard -- Affected Products:...
CVE-2010-1851
CVE-2010-1851 affects Google Chrome with the Invisible Hand extension enabled. The issue stems from cookies being used during background HTTP requests, which could enable remote servers to correlate requests and identify specific users and their product searches through HTTP request logging, desc...
CVE-2009-1851
SQL injection vulnerability in include.php in phpBugTracker 1.0.4 and earlier allows remote attackers to execute arbitrary SQL commands via the username parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...
CVE-2009-1851
The CVE-2009-1851 issue affects phpBugTracker
CVE-2009-1851
SQL injection vulnerability in include.php in phpBugTracker 1.0.4 and earlier allows remote attackers to execute arbitrary SQL commands via the username parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...
phpBugTracker 'include.php' SQL Injection Vulnerability
According to its version number, the remote version of phpBugTracker is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modi...
FreeBSD Ports: gaim, ja-gaim, ko-gaim, ru-gaim
The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
CVE-2008-1851
ovalarmsrv in HP OpenView Network Node Manager OV NNM 7.51, 7.53, and possibly other versions allows remote attackers to cause a denial of service hang via certain requests that do not provide all required arguments...
CVE-2008-1851
Technical details about CVE-2008-1851 are not publicly provided in the connected documents; the records only reiterate that ovalarmsrv in HP OpenView NNM may cause a DoS via certain incomplete requests. Monitor for updates.
Debian: Security Advisory (DSA-760-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2006-1851
CVE-2006-1851 affects xFlow 5.46.11 and earlier. The flaw allows remote attackers to determine the installation path via the action parameter in members_only/index.cgi and the page parameter in customer_area/index.cgi, likely due to invalid values. Exploitation details are not provided beyond thi...
USN-162-1: ekg and Gadu library vulnerabilities
Marcin Owsiany and Wojtek Kaniewski discovered that some contributed scripts contrib/ekgh, contrib/ekgnv.sh, and contrib/getekg.sh in the ekg package created temporary files in an insecure way, which allowed exploitation of a race condition to create or overwrite files with the privileges of the...
CVE-2005-1851
CVE-2005-1851 affects the ekg Gadu-Gadu client and its contributed scripts. Umbrella advisories describe insecure temporary file handling and a shell command injection path in contributed scripts (including ekgbot-pre1.py), which could allow an attacker to execute arbitrary commands with the priv...
CVE-2005-1851
A certain contributed script for ekg Gadu Gadu client 1.5 and earlier allows attackers to execute shell commands via unknown attack vectors...
CVE-2005-1851
Removed by vendor...
[SECURITY] [DSA 760-1] New ekg packages fix several vulnerabilities
-------------------------------------------------------------------------- Debian Security Advisory DSA 760-1 [email protected] http://www.debian.org/security/ Martin Schulze July 18th, 2005 http://www.debian.org/security/faq -...
CVE-2002-1851
Technical details (affected components, exact exploit vectors, and remediation) are not publicly provided in the connected documents. Monitor updates from Red Hat, CVE listings, and vendor advisories for confirmed information.
CVE-2004-1851
Dameware Mini Remote Control 4.1.0.0 is affected. The root cause is use of insufficiently random data to generate the encryption key, making it easier for remote attackers to obtain sensitive information via brute force guessing. From the provided documents, there is no explicit remediation or pa...