148 matches found
Gentoo Security Advisory GLSA 200506-03 (dzip)
The remote host is missing updates announced in advisory GLSA 200506-03. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...
Gentoo Security Advisory GLSA 200506-03 (dzip)
The remote host is missing updates announced in advisory GLSA 200506-03. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2008-1874
creationtimestamp| type| source ---|---|--- 2008-04-04 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/5358...
CVE-2007-1874
CVE-2007-1874 affects Adobe ColdFusion MX 7 for Linux and Solaris. The vulnerability stems from insecure permissions on specific scripts and directories (including CFMX7DreamWeaverExtensions.mxp, CFReportBuilderInstaller.exe, .com.zerog.registry.xml, uninstall.lax, license.txt, Readme.htm, k2admi...
CVE-2006-1874
CVE-2006-1874 affects Oracle Database Server 8.1.7.4, 9.0.1.5, and 9.2.0.6 in the Oracle Spatial component (DB09). The issue is described as a SQL injection in MDSYS.PRVT_IDX via the functions EXECUTE_INSERT, EXECUTE_DELETE, EXECUTE_UPDATE, EXECUTE UPDATE, and CRT_DUMMY. OpenVAS/Nessus entries co...
CVE-2002-1874
CVE-2002-1874 affects AstroCam 0.9-1-1 through 1.4.0 (astrocam.cgi). The vulnerability allows remote attackers to execute arbitrary commands by injecting shell metacharacters in an HTTP request, indicating a command-injection risk in the CGI handler. The description notes vendor clarification tha...
CVE-2005-1874
CVE-2005-1874 describes a directory-traversal vulnerability in the Dzip tool prior to version 2.9, allowing remote attackers to create arbitrary files by supplying a filename containing a “..” in a .dz archive. The issue affects Dzip’s archive extraction logic and could enable arbitrary file writ...
CVE-2004-1874
CVE-2004-1874 describes multiple XSS vulnerabilities in A-CART Pro and A-CART 2.0, specifically in the vulnerable components deliver.asp and billing.asp, allowing remote attackers to inject arbitrary web script or HTML via the user information forms. Connected documents confirm the affected produ...