100 matches found
CVE-2012-2080
Cross-site request forgery CSRF vulnerability in the Node Limit Number module before 6.x-1.2 for Drupal allows remote attackers to hijack the authentication of users with the administer node limitnumber permission for requests that delete limits...
SA-CONTRIB-2012-052 - Node Limit Number - Cross Site Request Forgery (CSRF)
CVE: CVE-2012-2080 The Node Limit Number module enables an administrator to place limits on how many nodes may be created by each user. Node Limit Number does not protect the delete URL against Cross Site Request Forgery attacks, allowing a malicious user to trick someone with "administer node...
CVE-2011-2080
CVE-2011-2080 affects MediaCAST 8 and earlier. The vulnerability is a SQL injection in two entry points: (1) a CP_ENLARGESTYLE cookie to the default URI under inventivex/managetraining/ and (2) unspecified input to authenticate_ad_setup_finished.cfm. This allows remote attackers to execute arbitr...
CVE-2010-2080
Multiple cross-site scripting XSS vulnerabilities in Open Ticket Request System OTRS 2.3.x before 2.3.6 and 2.4.x before 2.4.8 allow remote authenticated users to inject arbitrary web script or HTML via unspecified vectors...
CVE-2010-3476
Open Ticket Request System OTRS 2.3.x before 2.3.6 and 2.4.x before 2.4.8 does not properly handle the matching of Perl regular expressions against HTML e-mail messages, which allows remote attackers to cause a denial of service CPU consumption via a large message, a different vulnerability than...
CVE-2010-2080
OTRS 2.3.x before 2.3.6 and 2.4.x before 2.4.8 are affected by CVE-2010-2080, a cross-site scripting (XSS) vulnerability in the web interface allowing remote authenticated users to inject script/HTML via unspecified vectors. The issue is documented across multiple sources (NVD and OSV/OpenVAS ent...
Debian Security Advisory DSA 2080-1 (ghostscript)
The remote host is missing an update to ghostscript announced via advisory DSA 2080-1. OpenVAS Vulnerability Test $Id: deb20801.nasl 6614 2017-07-07 12:09:12Z cfischer $ Description: Auto-generated from advisory DSA 2080-1 ghostscript Authors: Thomas Reinke Copyright: Copyright c 2010 E-Soft Inc...
Debian: Security Advisory (DSA-2080-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Debian DSA-2080-1 : ghostscript - several vulnerabilities
Several security issues have been discovered in Ghostscript, a GPL PostScript/PDF interpreter, which might lead to the execution of arbitrary code if a user processes a malformed PDF or Postscript file. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks i...
CVE-2009-2080
CVE-2009-2080 concerns admin.php in MRCGIGUY The Ticket System 2.0. The vulnerability is a failure to properly restrict access, enabling remote attackers to (1) obtain sensitive configuration information via the editconfig action and (2) change the administrator’s password via the id parameter in...
CVE-2009-2080
creationtimestamp| type| source ---|---|--- 2009-06-09 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/8917...
Gentoo Security Advisory GLSA 200805-14 (cdf)
The remote host is missing updates announced in advisory GLSA 200805-14. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...
CVE-2008-2080
The CVE-2008-2080 issue affects the NASA Goddard Space Flight Center Common Data Format (CDF) library up to version 3.2.0, where a stack-based buffer overflow in Read32s_64 (src/lib/cdfread64.c) can be triggered by specially crafted CDF files with invalid length tags. The underlying cause is impr...
NASA's Common Data Format Buffer Overflow
Advisory ID Internal CORE-2008-0326 Advisory Information: Advisory ID: CORE-2008-0326 Advisory URL:https://www.coresecurity.com/?action=item&id=2260 Date published: 2008-05-05 Date of last update: 2008-05-05 Vendors contacted: GODDARD Space Flight Center Release mode: Coordinated release...
CVE-2007-2080
CVE-2007-2080 involves multiple SQL injection vulnerabilities in XAMPP 1.6.0a for Windows. The root cause is unspecified SQL injections in test scripts that allow remote attackers to execute arbitrary SQL commands. Affected product is XAMPP on Windows; impact is partial confidentiality, integrity...
CVE-2006-2080
CVE-2006-2080 affects Verosky Media Instant Photo Gallery 1.0.2. The vulnerability is an SQL injection in portfolio_photo_popup.php (id parameter) that is not cleansed before calling count_click in includes/functions/fns_std.php, allowing remote attackers to execute arbitrary SQL commands. The no...
CVE-2002-2080
Floositek FTGate PRO 1.05 is affected by a denial-of-service vulnerability where an attacker can trigger memory and CPU exhaustion by sending a large number of RCPT TO: messages during an SMTP session. The impact is partial availability as per CVSS 2.0 metrics. No remediation details are provided...
CVE-2005-2080
CVE-2005-2080 affects VERITAS Backup Exec RAWS: vulnerable versions include Backup Exec 9.0–10.0 for Windows and 9.0.4019–9.1.307 for NetWare. The root cause is that remote attackers can gain privileges by copying the server handle. Impact and remediation details are limited to the cited records;...
CVE-2004-2080
CVE-2004-2080 affects Red-M Red-Alert 2.7.5 with software 3.1 build 24. The issue is that multiple spaces in an SSID are collapsed to a single space, which prevents Red-Alert from correctly identifying the SSID. The connected documents confirm the affected product/version and the underlying cause...
