CVE-2015-2144

Issuetracker phpBugTracker is affected by multiple XSS vulnerabilities in versions before 1.7.0. Remote authenticated users can inject arbitrary script/HTML via several fields: project name (project.php), use_js (user.php and group.php), Description (status.php, severity.php), Regex (os.php), and...

CVE-2017-2144

Cybozu Garoon versions 3.0.0–4.2.4 are affected by multiple CVEs (CVE-2017-2144, CVE-2017-2145, CVE-2017-2146) per sources in CVE/NVD listings and OpenVAS. CVE-2017-2144 (improper access restriction) may allow a logged-in attacker to lock another user’s files via a specially crafted page. CVE-201...

RHEL 6 : Virtualization Manager (RHSA-2013:0888)

Red Hat Enterprise Virtualization Manager 3.2 is now available. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available from the CVE link in the...

Cisco IOS XR ICMPv6重定向处理拒绝服务漏洞

CVE ID:CVE-2014-2144 Cisco IOS是多数思科系统路由器和网络交换机上使用的互联网络操作系统。 Cisco IOS XR 4.3.1.K9SEC及其他版本处理ICMPv6重定向数据包时出错，如果攻击者向受影响设备发送特制的 ICMPv6 重定向数据，此漏洞可造成几乎所有IPv4及IPv6通讯失败。 0 Cisco IOS XR 4.3.1.K9SEC 目前没有详细解决方案： http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-2144...

Cisco IOS XR ICMPv6 Redirect Denial of Service

The remote Cisco device is running a version Cisco IOS XR software that is potentially affected by a denial of service vulnerability related to handling ICMPv6 redirect messages. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid73436; scriptversion"1.7";...

CVE-2014-2144

Cisco IOS XR is affected by CVE-2014-2144, where ICMPv6 redirect packets are not properly throttled, allowing remote attackers to cause a denial of service that impacts IPv4 and IPv6 transit. The vulnerability stems from improper handling of ICMPv6 redirect messages and is associated with Bug CSC...

CVE-2013-2144

Red Hat Enterprise Virtualization Manager (RHEVM) before 3.2 is affected. The issue is inadequate permission checks on the target storage domain when cloning a VM from a snapshot, which can allow an attacker to cause a denial of service via disk space exhaustion on the target domain. Remediation ...

Fedora Update for python-django-horizon FEDORA-2012-7369

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

CVE-2012-2144

CVE-2012-2144 : Session fixation in OpenStack Horizon (folsom-1 and 2012.1) allows remote attackers to hijack web sessions via the sessionid cookie. Vulnerable component: Horizon UI. Impact: session hijacking via cookie manipulation. Root cause: session fixation through sessionid handling as desc...

Fedora 17 : python-django-horizon-2012.1-3.fc17 (2012-7369)

Fixes session hijack vulnerability Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300...

CVE-2011-2144

The CVE-2011-2144 entry affects IBM Datacap Taskmaster Capture prior to and including 8.0.1 FP1, in the eDocument Conversion Actions component. The vulnerability allows remote attackers to cause a denial of service (batch abort) by sending a long subject line in an e-mail message represented in a...

Solaris 9 (sparc) : 112920-03

SunOS 5.9: libipp, lp, IKE Patch. Date this patch was last updated by Sun : Apr/08/11 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if description...

Debian DSA-2144-1 : wireshark - buffer overflow

It was discovered that a buffer overflow in the ENTTEC dissector may lead to the execution of arbitrary code. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Security Advisory DSA-2144. The text itself is...

CVE-2010-2144

CVE-2010-2144 describes a cross-site scripting (XSS) vulnerability in SignInForm.php of the Zeeways eBay Clone Auction Script, exploitable by remote attackers via the msg parameter. Affected component: signinform.php; vulnerability arises from improper handling of user-supplied input leading to s...

CVE-2010-2144

creationtimestamp| type| source ---|---|--- 2010-05-30 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/12805...

openSUSE Security Update : squid (squid-2144)

The following vulnerabilities have been fixed in squid : - CVE-2009-2855: DoS via special crafted auth header - CVE-2010-0308: DoS via invalid DoS header - CVE-2009-2622: DoS in squid3 via broken HTTP handling - CVE-2009-2621: DoS in squid3 via not enforced 'buffer limits and related bound checks...

FireStats Unspecified SQL Injection Vulnerability

FireStats is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlyin...

FireStats < 1.6.2 Multiple Vulnerabilities

According to its version number, the install of FireStats running on the remote host is affected by multiple vulnerabilities : - A remote file include vulnerability in the 'fsjavascript' parameter of 'firestats-wordpress.php'. CVE-2009-2143 - An unspecified SQL injection vulnerability...

CVE-2009-2144

The CVE-2009-2144 entry concerns the FireStats WordPress plugin. Affected: FireStats prior to version 1.6.2-stable. Vulnerability type: SQL injection due to improper handling of user-supplied data in the plugin, allowing remote attackers to execute arbitrary SQL commands via unspecified vectors. ...

Immunity Canvas: SOL_PRINTER_CONF

Name| solprinterconf ---|--- CVE| CVE-2008-2144 Exploit Pack| CANVAS Description| solprinterconf Notes| CVE Name: CVE-2008-2144 VENDOR: Sun Advisory: http://sunsolve.sun.com/search/document.do?assetkey=1-66-236884-1 Notes: This exploit gets remote root on Solaris servers given a working printer...