191 matches found
VMSA-2008-0008 Updates to VMware Workstation, VMware Player, VMware ACE, VMware Fusion resolve critical security issues
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 - ------------------------------------------------------------------- VMware Security Advisory Advisory ID: VMSA-2008-0008 Synopsis: Updates to VMware Workstation, VMware Player, VMware ACE, VMware Fusion resolve critical security issues Issue date:...
CVE-2007-2098
Multiple cross-site scripting XSS vulnerabilities in showpic.php in Wabbit PHP Gallery 0.9 allow remote attackers to inject arbitrary web script or HTML via the 1 pic and 2 gal parameters...
CVE-2007-2098
Multiple cross-site scripting XSS vulnerabilities in showpic.php in Wabbit PHP Gallery 0.9 allow remote attackers to inject arbitrary web script or HTML via the 1 pic and 2 gal parameters...
CVE-2007-2098
CVE-2007-2098 affects Wabbit PHP Gallery 0.9. The XSS flaw is in showpic.php, exploitable via the pic and gal parameters, enabling remote attackers to inject arbitrary script/HTML. Connected sources (NVD, CVE lists) confirm the vulnerability description; no specific patch/version remediation is p...
CVE-2006-2098
CVE-2006-2098 concerns a PHP remote file inclusion vulnerability in Thumbnail AutoIndex before 2.0. The issue allows remote attackers to execute arbitrary PHP code by leveraging (1) README.html or (2) HEADER.html. The connected documents confirm the affected product and the vulnerable vectors, bu...
CVE-2005-2098
The KEYCTLJOINSESSIONKEYRING operation in the Linux kernel before 2.6.12.5 contains an error path that does not properly release the session management semaphore, which allows local users or remote attackers to cause a denial of service semaphore hang via a new session keyring 1 with an empty nam...
CVE-2005-2098
The CVE-2005-2098 issue affects the Linux 2.6 kernel up to but before 2.6.12.5, where the KEYCTL_JOIN_SESSION_KEYRING error path fails to release the session management semaphore. This can allow local users or remote attackers to cause a denial of service (semaphore hang) by creating a new sessio...
CVE-2002-2098
The CVE-2002-2098 entry describes a buffer overflow in axspawn.c within Axspawn-pam prior to 0.2.1a, allowing remote code execution via large packets. The issue affects the Axspawn-pam component and is caused by unsafe handling in axspawn.c. Impact is described as partial confidentiality, integri...
CVE-2004-2098
Cross-site scripting XSS vulnerability in the banner engine TBE 5.0 allows remote attackers to execute arbitrary script as other users via the HTML banner view/preview capability...