CVE-2013-1854

The Active Record component in Ruby on Rails 2.3.x before 2.3.18, 3.1.x before 3.1.12, and 3.2.x before 3.2.13 processes certain queries by converting hash keys to symbols, which allows remote attackers to cause a denial of service via crafted input to a where method...

CVE-2013-1854

CVE-2013-1854 summary (Rails ActiveRecord): Rails 2.3.x < 2.3.18, 3.1.x < 3.1.12, and 3.2.x

CVE-2013-1854 rubygem-activerecord: attribute_dos Symbol DoS vulnerability

The Active Record component in Ruby on Rails 2.3.x before 2.3.18, 3.1.x before 3.1.12, and 3.2.x before 3.2.13 processes certain queries by converting hash keys to symbols, which allows remote attackers to cause a denial of service via crafted input to a where method. A flaw was found in the way...

CVE-2012-1854

The CVE-2012-1854 entry describes an insecure library loading vulnerability in Microsoft Visual Basic for Applications (VBA) via VBE6.dll. Affected products include Microsoft Office 2003 SP3, 2007 SP2/SP3, and 2010 Gold/SP1, with VBA and Summit VBA SDK also implicated. The root cause is untrusted...

Microsoft Visual Basic for Applications Insecure Library Loading (MS12-046; CVE-2012-1854)

A remote code execution vulnerability has been reported in Microsoft Visual Basic for Applications VBA...

HP Intelligent Management Center < 5.0 E0101-L02 Multiple Vulnerabilities

According to its version number, the HP Intelligent Management Center install on the remote host is potentially affected by multiple vulnerabilities : - A stack-based buffer overflow vulnerability exists in the 'img.exe' component. CVE-2011-1848 - A flaw exists in the 'tftpserver.exe' component...

CVE-2011-1854

CVE-2011-1854 is an HP IMC 5.0 vulnerability (before E0101L02) in the imcsyslogdm.exe component, where processing oversized syslog packets triggers a use-after-free and remote code execution. The issue is documented by multiple sources (NVD entry, Red Hat advisory, Nessus plugin HP_IMC_MULTIPLE_C...

ZDI-11-166: HP 3COM/H3C Intelligent Management Center imcsyslogdm Remote Code Execution Vulnerability

ZDI-11-166: HP 3COM/H3C Intelligent Management Center imcsyslogdm Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-11-166 May 10, 2011 -- CVE ID: CVE-2011-1854 -- CVSS: 10, AV:N/AC:L/Au:N/C:C/I:C/A:C -- Affected Vendors: Hewlett-Packard -- Affected Products:...

CVE-2010-1854

CVE-2010-1854 concerns an XSS in auktion.php of Pay Per Watch & Bid Auktions System, exploitable through the id_auk parameter, where an injected script/HTML appears in a forced SQL error message. Related records (NVD/Red Hat) confirm this vulnerability and its association to CVE-2010-1855 (SQL in...

Debian Security Advisory DSA 1854-1 (apr, apr-util)

The remote host is missing an update to apr, apr-util announced via advisory DSA 1854-1. OpenVAS Vulnerability Test $Id: deb18541.nasl 6615 2017-07-07 12:09:52Z cfischer $ Description: Auto-generated from advisory DSA 1854-1 apr, apr-util Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft...

Debian: Security Advisory (DSA-1854-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2009-1854

CVE-2009-1854 applies to Million Dollar Text Links 1.0 , where remote attackers can bypass authentication and gain administrative access by setting the userid cookie to 1. The NVD entry scores it as CVSSv2: 7.5 (HIGH) with network access, low complexity, and no authentication required, resulting ...

CVE-2009-1854

creationtimestamp| type| source ---|---|--- 2009-05-27 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/8813...

CVE-2008-1854

creationtimestamp| type| source ---|---|--- 2008-04-04 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/31607...

Debian Security Advisory DSA 772-1 (apt-cacher)

The remote host is missing an update to apt-cacher announced via advisory DSA 772-1. Eduard Bloch discovered a bug in apt-cacher, a caching system for Debian package and source files, that could allow remote attackers to execute arbitrary commands on the caching host as user www-data. The old...

CVE-2007-1854

Technical details are not publicly provided in the supplied documents. Monitor for updates from official advisories.

CVE-2006-1854

The CVE-2006-1854 entry describes multiple XSS vulnerabilities in BluePay Manager 2.0 and earlier, allowing remote attackers to inject arbitrary script/HTML during login via the Account Name and Username fields. The vendor disputes the vulnerability, stating it may not exist in BluePay 2.0 and th...

CVE-2005-1854

Unknown vulnerability in apt-cacher in Debian 3.1, related to "missing input sanitising," allows remote attackers to execute arbitrary commands on the caching server...

[SECURITY] [DSA 772-1] New apt-cacher package fixes arbitrary command execution

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- Debian Security Advisory DSA 772-1 [email protected] http://www.debian.org/security/ Martin Schulze August 3rd, 2005 http://www.debian.org/security/faq -...

[SECURITY] [DSA 772-1] New apt-cacher package fixes arbitrary command execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 772-1 [email protected] http://www.debian.org/security/ Martin Schulze August 3rd, 2005 http://www.debian.org/security/faq -...