CVE-2011-2087

CVE-2011-2087 affects the javatemplates (Java Templates) plugin in Apache Struts 2.x prior to 2.2.3. The issue is multiple XSS vulnerabilities in eight component handlers (FileHandler.java, HiddenHandler.java, PasswordHandler.java, RadioHandler.java, ResetHandler.java, SelectHandler.java, SubmitH...

Debian Security Advisory DSA 2087-1 (cabextract)

The remote host is missing an update to cabextract announced via advisory DSA 2087-1. OpenVAS Vulnerability Test $Id: deb20871.nasl 6614 2017-07-07 12:09:12Z cfischer $ Description: Auto-generated from advisory DSA 2087-1 cabextract Authors: Thomas Reinke Copyright: Copyright c 2010 E-Soft Inc...

Debian: Security Advisory (DSA-2087-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian DSA-2087-1 : cabextract - programming error

It was discovered that a programming error in the archive test mode of cabextract, a program to extract Microsoft Cabinet files, could lead to the execution of arbitrary code. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracte...

CVE-2010-2087

Oracle Mojarra 1.214 and 2.0.2, as used in IBM WebSphere Application Server, Caucho Resin, and other applications, does not properly handle an unencrypted view state, which allows remote attackers to conduct cross-site scripting XSS attacks or execute arbitrary Expression Language EL statements v...

CVE-2010-2087

Oracle Mojarra 1.214 and 2.0.2, as used in IBM WebSphere Application Server, Caucho Resin, and other applications, does not properly handle an unencrypted view state, which allows remote attackers to conduct cross-site scripting XSS attacks or execute arbitrary Expression Language EL statements v...

CVE-2010-2087

CVE-2010-2087: Oracle Mojarra 1.2_14 and 2.0.2 (as used in IBM WebSphere Application Server, Caucho Resin, and other apps) fails to properly protect an unencrypted view state. This enables remote attackers to perform cross-site scripting (XSS) or execute arbitrary Expression Language (EL) stateme...

CVE-2009-2087

CVE-2009-2087 affects IBM WebSphere Application Server (WAS) 6.1 prior to 6.1.0.25 and 7.0 prior to 7.0.0.5. In certain circumstances involving the ibm-webservicesclient-bind.xmi file and custom password encryption, WAS uses weak password obfuscation that can allow local users to cause a denial o...

Fedora Update for imp FEDORA-2008-2087

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

CVE-2008-2087

SQL injection vulnerability in searchresult.php in Softbiz Web Host Directory Script, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the hostid parameter, a different vector than CVE-2005-3817...

CVE-2008-2087

The CVE-2008-2087 vulnerability affects Softbiz Web Host Directory Script, specifically in search_result.php. When magic_quotes_gpc is disabled, the host_id parameter can be exploited to inject SQL commands, enabling remote execution of arbitrary SQL. The description does not provide details on a...

CVE-2008-2087

SQL injection vulnerability in searchresult.php in Softbiz Web Host Directory Script, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the hostid parameter, a different vector than CVE-2005-3817...

CVE-2008-2087

creationtimestamp| type| source ---|---|--- 2008-04-28 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/5517...

CVE-2007-2087

CNStats 2.12 contains multiple PHP remote file inclusion vulnerabilities that let an attacker execute arbitrary PHP code via a URL in the bn parameter to reports/who_r.php or reports/who_s.php when register_globals is enabled and .htaccess is not recognized. CVSS v2 base score 6.8 (Medium) with N...

Internet Explorer Javaprxy.dll heap overflow

Added: 06/05/2006 CVE: CVE-2005-2087 BID: 14087 OSVDB: 17680 Background Windows operating systems use the Component Object Model COM to allow various program components to be run within different applications. One such object, the JView Profiler Javaprxy.dll, is a debugger interface for Microsoft...

CVE-2006-2087

The CVE-2006-2087 entry concerns Hitachi Groupmax’s Gmax Mail client prior to 20060426. The vulnerability arises from processing an attachment with an MS-DOS device filename, which can cause a denial of service (application hang or erroneous behavior). Documented affected component: the Gmax Mail...

CVE-2002-2087

The CVE-2002-2087 entry describes a buffer overflow in Borland InterBase 6.0 that allows local users to execute arbitrary code by supplying a long INTERBASE environment variable when invoking gds_drop, gds_lock_mgr, or gds_inet_server. This is documented across multiple feeds (Red Hat, CVE listin...

JVIEW Profiler (javaprxy.dll) COM object contains an unspecified vulnerability

Overview The JVIEW Profiler COM object contains an unspecified vulnerability, which may allow a remote attacker to execute arbitrary code on a vulnerable system. Description Microsoft COMMicrosoft COM is a technology that allows programmers to create reusable software components that can be...

CVE-2005-2087

CVE-2005-2087 affects Internet Explorer on Windows, via the JView Profiler (Javaprxy.dll) COM object. The vulnerability is a heap overflow when the COM object is instantiated from a crafted web page, potentially allowing arbitrary code execution or a crash in the user’s context. Exploitation requ...

CVE-2004-2087

CVE-2004-2087 affects SandSurfer prior to version 1.7.0. The provided sources describe an access issue in which an attacker could gain access as a logged-in user (per CVE entry) and, per Nessus content, an authentication bypass affecting versions up to 1.6.5. The exact root cause is not consisten...