CVE-2011-1980

CVE-2011-1980 affects Microsoft Office 2003 SP3 and Office 2007 SP2, with an Untrusted Search Path vulnerability that allows local privilege escalation via loading a Trojan horse DLL from the current working directory when a .doc/.xls/.ppt file is present. The root cause is insecure library loadi...

MS11-073: Vulnerabilities in Microsoft Office Could Allow Remote Code Execution (2587634)

The remote Windows host is running a version of Microsoft Office that is potentially affected by two vulnerabilities : - The application insecurely restricts the path used for loading external libraries when opening documents that use the .doc, .xls, or .ppt Office binary format and when the Offi...

Microsoft PowerPoint .dll Insecure Library Loading (MS11-073; CVE-2011-1980)

The vulnerability is due to insecure library loading issue in Microsoft PowerPoint. A remote attacker could trigger this flaw by convincing a victim to open a specially crafted PowerPoint file. Successful exploitation of this issue may allow execution of arbitrary code on a vulnerable system...

CVE-2010-1980

Directory traversal vulnerability in joomlaflickr.php in the Joomla Flickr comjoomlaflickr component 1.0.3 for Joomla! allows remote attackers to include and execute arbitrary local files via a .. dot dot in the controller parameter to index.php...

CVE-2010-1980

CVE-2010-1980 is a Local File Inclusion vulnerability in the Joomla! Flickr (com_joomlaflickr) component 1.0.3 for Joomla!, documented as a directory traversal in joomlaflickr.php that allows an attacker to include and execute arbitrary local files via a .. in the controller parameter to index.ph...

CVE-2010-1980

creationtimestamp| type| source ---|---|--- 2010-04-06 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/12085...

Debian DSA-1980-1 : ircd-hybrid/ircd-ratbox - integer underflow/denial of service

David Leadbeater discovered an integer underflow that could be triggered via the LINKS command and can lead to a denial of service or the execution of arbitrary code CVE-2009-4016 . This issue affects both, ircd-hybrid and ircd-ratbox. It was discovered that the ratbox IRC server is prone to a...

CVE-2009-1980

CVE-2009-1980 is an Oracle E-Business Suite vulnerability affecting Oracle Application Object Library in E-Business Suite 11.5.10.2, 12.0.6, and 12.1. The Oracle CPU July 2009 advisory fixes this issue. The Oracle E-Business Suite risk matrix shows a network-accessible vulnerability (HTTP) with a...

CVE-2008-1980

Cross-site scripting XSS vulnerability in E-Publish 5.x before 5.x-1.1 and 6.x before 6.x-1.0 beta1, a Drupal module, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2008-1980

CVE-2008-1980 describes a cross-site scripting (XSS) vulnerability in the Drupal module E-Publish . Affected are E-Publish 5.x before 5.x-1.1 and 6.x before 6.x-1.0 beta1 . The vulnerability allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. The underlying cau...

Cross site scripting

Cross-site scripting XSS vulnerability in auth.w2b in W2B Online Banking allows remote attackers to inject arbitrary web script or HTML via the adtype parameter, a different vector than CVE-2006-1980...

CVE-2007-1980

The CVE-2007-1980 vulnerability affects the Topliste 1.0 module for PHP-Fusion, specifically in index.php. It is a SQL injection flaw exploitable via the cid parameter, allowing remote attackers to execute arbitrary SQL commands. The NVD CVSS v2 base score is 7.5 (HIGH) with network access, low a...

CVE-2006-1980

CVE-2006-1980 is an XSS vulnerability in W2B Online Banking. The vulnerability allows remote attackers to inject arbitrary script via (1) query string, (2) SID parameter, or (3) ilang parameter. The NVD entry reports a CVSS v2.0 base score of 2.6 (low) with Network attack vector, high attack comp...

SSH1 CRC-32 detect_attack Function Overflow

Binary data 1980.prm...

CVE-2004-1980

Directory traversal vulnerability in glossary.php in PROPS 0.6.1 allows remote attackers to view arbitrary files via a .. dot dot in 1 module or 2 format variables...

CVE-2024-1980

**CVE-2024-1980 is a reservation duplicate of CVE-2023-6876 and should reference CVE-2023-6876 as the active entry. The Red Hat advisory confirms CVE-2023-6876 involves a missing capability check in Clever Fox WordPress theme activation, impacting versions up to 25.2.0. Details about CVE-2024-198...