CVE-2010-2281

TomatoCMS 2.0.6 is affected by multiple XSS in index.php. Exploitable through (1) keyword or (2) bannerid with /admin/ad/banner/list, and through (3) title or (4) answers with /admin/poll/add, or (5) name with /admin/category/add. Root cause: unsanitized input in these parameters leading to scrip...

CVE-2010-1515

CVE-2010-1515 affects TomatoCMS 2.0.6 and earlier, with multiple XSS vulnerabilities in index.php. The issues arise from unsanitized inputs passed via PATH_INFO parameters across several admin pages (admin/news/article/list, admin/multimedia/set/list, admin/multimedia/file/list, admin/ad/client/l...

CVE-2009-4488

Varnish 2.0.6 writes data to a log file without sanitizing non-printable characters, which might allow remote attackers to modify a window's title, or possibly execute arbitrary commands or overwrite files, via an HTTP request containing an escape sequence for a terminal emulator. NOTE: the vendo...

CVE-2009-4488

Varnish 2.0.6 writes data to a log file without sanitizing non-printable characters, which might allow remote attackers to modify a window's title, or possibly execute arbitrary commands or overwrite files, via an HTTP request containing an escape sequence for a terminal emulator. NOTE: the vendo...

Design/Logic Flaw

DISPUTED Varnish 2.0.6 writes data to a log file without sanitizing non-printable characters, which might allow remote attackers to modify a window's title, or possibly execute arbitrary commands or overwrite files, via an HTTP request containing an escape sequence for a terminal emulator. NOTE:...

CVE-2009-4488

Varnish 2.0.6 writes data to a log file without sanitizing non-printable characters, which might allow remote attackers to modify a window's title, or possibly execute arbitrary commands or overwrite files, via an HTTP request containing an escape sequence for a terminal emulator. NOTE: the vendo...

Wordpress <2.0.6 无效跨站脚本标记跨站脚本漏洞

No description provided by source...

WordPress <2.0.6 字符集解码SQL注入漏洞

No description provided by source...

WordPress <2.0.6 评论表格SQL注入漏洞

No description provided by source...

phpbb 2.0.6 search.php Sql注入

No description provided by source...

CVE-2009-4039

CVE-2009-4039 affects Piwigo before 2.0.6. It is a cross-site scripting (XSS) vulnerability that allows remote attackers to inject arbitrary script/HTML via unspecified vectors. The flaw’s root cause and impacted component are not detailed in the provided sources beyond the version boundary. Reme...

VMware Virtual 8086 - Linux Local Ring0

Bugtraq ID: 36841 Class: Design Error Published: Oct 27 2009 12:00AM Updated: Oct 27 2009 09:18PM Credit: Tavis Ormandy and Julien Tinnes of the Google Security Team Vulnerable: VMWare Workstation 6.5.3 VMWare Workstation 6.5.2 build 156735 VMWare Workstation 6.5.2 VMWare Workstation 6.5.1 VMWare...

VMSA-2009-0013 VMware Fusion resolves two security issues

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------ VMware Security Advisory Advisory ID: VMSA-2009-0013 Synopsis: VMware Fusion resolves two security issues Issue date: 2009-10-01 Updated on: 2009-10-01 initial release of...

Firebird SQL DoS Vulnerability - Windows (Sep 2009)

Firebird SQL is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

TorrentTrader Classic Multiple Vulnerabilities

TorrentTrader Classic is prone to multiple vulnerabilities. Copyright C 2009 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; y...

Sun xVM VirtualBox Insecure Temporary Files Vulnerability (Windows)

This host is installed with Sun xVM VirtualBox and is prone to Insecure Temporary Files vulnerability. OpenVAS Vulnerability Test $Id: secpodvirtualboxacquiredaemonlockvulnwin900407.nasl 7293 2017-09-27 08:49:48Z cfischer $ Description: Sun xVM VirtualBox Insecure Temporary Files Vulnerability...

Sun xVM VirtualBox < 2.0.6 Insecure Temporary Files Vulnerability - Windows

Sun xVM VirtualBox is prone to an SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.900407";...

Sun xVM VirtualBox < 2.0.6 Insecure Temporary Files Vulnerability - Linux

Sun xVM VirtualBox is prone to an SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:sun:xvmvirtualbox"; ifdescription...

CVE-2008-5256

The AcquireDaemonLock function in ipcdUnix.cpp in Sun Innotek VirtualBox before 2.0.6 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/.vbox-$USER-ipc/lock temporary file...

CVE-2008-5256

The CVE-2008-5256 entry concerns VirtualBox prior to 2.0.6. The vulnerability resides in AcquireDaemonLock (ipcdUnix.cpp) and enables local users to overwrite arbitrary files via a symlink attack on a /tmp/.vbox-$USER-ipc/lock temporary file. CVSSv2 base score is 4.4 (Medium) with Local access, N...