136 matches found
CVE-2010-2045
creationtimestamp| type| source ---|---|--- 2010-05-13 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/12595...
Debian DSA-2045-1 : libtheora - integer overflow
Bob Clary, Dan Kaminsky and David Keeler discovered that in libtheora, a video library part of the Ogg project, several flaws allow context-dependent attackers via a large and specially crafted media file, to cause a denial of service crash of the player using this library, and possibly arbitrary...
CVE-2009-2045
The Cisco Video Surveillance Stream Manager firmware before 5.3, as used on Cisco Video Surveillance Services Platforms and Video Surveillance Integrated Services Platforms, allows remote attackers to cause a denial of service reboot via a malformed payload in a UDP packet to port 37000, related ...
Cisco Security Advisory: Vulnerabilities in Cisco Video Surveillance Products
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: Vulnerabilities in Cisco Video Surveillance Products Advisory ID: cisco-sa-20090624-video Revision 1.0 For Public Release 2009 June 24 1600 UTC GMT +--------------------------------------------------------------------- Summary...
CVE-2009-2045
CVE-2009-2045 affects Cisco Video Surveillance Stream Manager firmware on Cisco Video Surveillance Services Platforms and Video Surveillance Integrated Services Platforms, versions before 5.3. An attacker can cause a DoS reboot by sending a malformed UDP payload to port 37000, triggering the xvcr...
Fedora Core 9 FEDORA-2009-2045 (libpng10)
The remote host is missing an update to libpng10 announced via advisory FEDORA-2009-2045. OpenVAS Vulnerability Test $Id: fcore20092045.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-2045 libpng10 Authors: Thomas Reinke Copyright: Copyright c 2009...
Fedora Core 9 FEDORA-2009-2045 (libpng10)
The remote host is missing an update to libpng10 announced via advisory FEDORA-2009-2045. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by t...
DoS attacks on MIME-capable software via complex MIME emails
== DoS attacks on MIME-capable software via complex MIME emails == == Preface == On the phneutral 0x7d8 and RSS 08, I gave short talks on a widely unregarded problem with MIME software. Due to popular demand, I decided to publish a short writeup of the talk. == What is MIME? == MIME is the standa...
CVE-2008-2045
creationtimestamp| type| source ---|---|--- 2008-04-29 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/5521...
CVE-2006-2045
CVE-2006-2045 concerns IP3 Networks NetAccess NA75. The shadow password file in na-img-4.0.34.bin is world-readable, enabling local users to view encrypted passwords; the NetAccess database file is world-readable and world-writable, enabling local users to view sensitive data and modify it. No ex...
CVE-2002-2045
CVE-2002-2045 affects x-stat 2.3 and earlier, via x_stat_admin.php. The flaw allows remote attackers to (1) execute PHP commands (e.g., phpinfo) or (2) reveal the web server’s full path through an invalid action parameter that leaks the pathname in an error message. The NVD CVSS v2 score is 6.4 (...
CVE-2005-2045
CVE-2005-2045 concerns multiple SQL injection flaws in DUportal Pro 3.4.3 from DUware. The product does not properly sanitize user input before using it in SQL queries, enabling remote attackers to affect database queries. Affected parameters include (1) iChannel to default.asp, (2) iData to deta...
CVE-2004-2045
The CVE-2004-2045 issue affects the Conceptronic CADSLR1 ADSL router (firmware 3.04n). The HTTP administration interface is vulnerable to a denial-of-service (device reboot) caused by sending an HTTP request with a long username. The root cause is not detailed beyond the long username triggering ...
CVE-2004-2045
The HTTP administration interface on Conceptronic CADSLR1 ADSL router running firmware 3.04n allows remote attackers to cause a denial of service device reboot via an HTTP request with a long username...
CVE-2002-2045
xstatadmin.php in x-stat 2.3 and earlier allows remote attackers to 1 execute PHP commands such as phpinfo or 2 obtain the full path of the web server via an invalid action parameter, which leaks the pathname in an error message...