136 matches found
Debian: Security Advisory (DSA-2118-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Debian Security Advisory DSA 2118-1 (subversion)
The remote host is missing an update to subversion announced via advisory DSA 2118-1. OpenVAS Vulnerability Test $Id: deb21181.nasl 6614 2017-07-07 12:09:12Z cfischer $ Description: Auto-generated from advisory DSA 2118-1 subversion Authors: Thomas Reinke Copyright: Copyright c 2010 E-Soft Inc...
Debian DSA-2118-1 : subversion - logic flaw
Kamesh Jayachandran and C. Michael Pilat discovered that the moddavsvn module of Subversion, a version control system, is not properly enforcing access rules which are scope-limited to named repositories. If the SVNPathAuthz option is set to 'shortcircuit' set this may enable an unprivileged...
Microsoft Internet Explorer 'IFRAME' Denial Of Service Vulnerability (June-10)
This host is installed with Internet Explorer and is prone to Denial Of Service vulnerability. OpenVAS Vulnerability Test $Id: gbmsieiframedosvulnjune10.nasl 5323 2017-02-17 08:49:23Z teissa $ Microsoft Internet Explorer 'IFRAME' Denial Of Service Vulnerability June-10 Authors: Antu Sanadi...
CVE-2010-2118
Microsoft Internet Explorer vulnerable components: Internet Explorer 6.0.2900.2180 and 8.0.7600.16385. Root cause: JavaScript code that loops indefinitely to create IFRAMEs for invalid news:// URIs, triggering a denial of service through resource consumption. Affected product surfaces are browser...
CVE-2009-2118
Summary (CVE-2009-2118): IrfanView 4.23 is affected by a heap-based buffer overflow triggered by an integer overflow when resampling or screen fitting is enabled while processing a crafted TIFF 1 BPP image. This can lead to remote code execution. Public references confirm the vulnerability detail...
CVE-2008-2118
SQL injection vulnerability in info.php in Project Alumni 1.0.9 allows remote attackers to execute arbitrary SQL commands via the id parameter...
CVE-2008-2118
creationtimestamp| type| source ---|---|--- 2008-05-02 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/31723...
CVE-2007-2118
The CVE-2007-2118 entry concerns Oracle Database Upgrade/Downgrade component vulnerabilities in 9.0.1.5 and 9.2.0.7. The description indicates an unspecified vulnerability with unknown impact/attack vectors, and a note that claims this may be a buffer overflow in the mig utility. No additional te...
CVE-2006-2118
JMK's Picture Gallery allows remote attackers to bypass authentication via a direct request to admingallery.php3, possibly related to the add action...
CVE-2006-2118
Vulnerability summary (CVE-2006-2118): JMK’s Picture Gallery allows remote attackers to bypass authentication by issuing a direct request to admin_gallery.php3, possibly related to the add action. The available documents do not provide further details on affected versions, root cause specifics, o...
CVE-2005-2118
Summary (CVE-2005-2118 / CVE-2005-2122) : Both vulnerabilities stem from how Windows Shell handles .lnk shortcut files, enabling remote code execution through crafted shortcuts or properties. Affected products include Windows 2000 SP4, XP SP1/SP2, and Windows Server 2003. The issues differ in the...
CVE-2002-2118
CVE-2002-2118 affects Blue World Lasso Web Data Engine 3.6.5. A buffer overflow in the URL handling allows remote attackers to trigger a denial of service. The available description confirms a network-facing vector via a long URL, with impact limited to DoS; no additional exploit details, affecte...
CVE-2004-2118
CVE-2004-2118 affects Tiny Server 1.1. The vulnerability allows remote attackers to cause a denial of service (crash) by sending a GET request with a long filename, possibly due to a buffer overflow. The provided documents do not include a confirmed patch or fix version. No exploitation details o...