119 matches found
PHP 5.2 < 5.2.14 Multiple Vulnerabilities
According to its banner, the version of PHP 5.2 installed on the remote host is older than 5.2.14. Such versions may be affected by several security issues : - An error exists when processing invalid XML-RPC requests that can lead to a NULL pointer dereference. bug 51288 CVE-2010-0397 - An error...
CVE-2010-2190
CVE-2010-2190 affects PHP 5.2.x (up to 5.2.13) and 5.3.x (up to 5.3.2). The vulnerability arises in the functions trim, ltrim, rtrim, and substr_replace, allowing a context-dependent attacker to obtain sensitive information (memory contents) by triggering an internal function interruption related...
Mac OS X 10.5.8 Update / Mac OS X Security Update 2009-003
The remote host is missing Mac OS X 10.5.8 Update / Mac OS X Security Update 2009-003. SPDX-FileCopyrightText: 2010 LSS Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later ifdescription...
CVE-2009-2190
The CVE-2009-2190 issue affects Mac OS X 10.5 through 10.5.7 with the launchd inetd-based service. Triggered by opening many connections to a launchd service, it can cause an individual service outage. Remediation is provided in Mac OS X 10.5.8 Update / Security Update 2009-003, which addresses t...
Apple Mac OS X 2009-003修补多个安全漏洞
Bugraq ID: 35954 CVE ID：CVE-2009-1723 CVE-2009-1726 CVE-2009-1727 CVE-2009-0151 CVE-2009-1728 CVE-2009-2188 CVE-2009-2190 CVE-2009-2191 CVE-2009-2192 CVE-2009-2193 CVE-2009-2194 CNCVE ID：CNCVE-20091723 CNCVE-20091726 CNCVE-20091727 CNCVE-20090151 CNCVE-20091728 CNCVE-20092188 CNCVE-20092190...
Mac OS X 10.5.x < 10.5.8 Multiple Vulnerabilities
The remote host is running a version of Mac OS X 10.5.x that is prior to 10.5.8. Mac OS X 10.5.8 contains security fixes for the following products : - bzip2 - CFNetwork - ColorSync - CoreTypes - Dock - Image RAW - ImageIO - Kernel - launchd - Login Window - MobileMe - Networking - XQuery C Tenab...
FreeBSD Ports: unzoo
The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
CVE-2008-2190
SQL injection vulnerability in index.php in Online Rent aka Online Rental Property Script 4.5 and earlier allows remote attackers to execute arbitrary SQL commands via the pid parameter. NOTE: it was later reported that 5.0 and earlier are also affected...
CVE-2008-2190
SQL injection vulnerability (CVE-2008-2190) affects Online Rent (Online Rental Property Script) up to v4.5, with reports that v5.0 and earlier are affected. The flaw allows remote attackers to modify or extract data by injecting into the pid parameter of index.php. Exploitation status or fixes ar...
CVE-2008-2190
SQL injection vulnerability in index.php in Online Rent aka Online Rental Property Script 4.5 and earlier allows remote attackers to execute arbitrary SQL commands via the pid parameter. NOTE: it was later reported that 5.0 and earlier are also affected...
CVE-2008-2190
creationtimestamp| type| source ---|---|--- 2008-05-05 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/5542...
SuSE 10 Security Update : Qt3 (ZYPP Patch Number 2190)
Multiple integer overflows have been found in image processing functions within the QT library. These could potentially lead to heap overflows and code execution. CVE-2006-4811 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc...
CVE-2007-2190
PHP remote file inclusion vulnerability in admin/public/webpages.php in Eba News 1.1 allows remote attackers to execute arbitrary PHP code via a URL in the filename parameter...
CVE-2006-2190
CVE-2006-2190 is an XSS vulnerability in OpenWebMail (OWM) affecting 2.51 and earlier, via the sessionid parameter in ow-shared.pl and related scripts (openwebmail-send.pl, openwebmail-advsearch.pl, openwebmail-folder.pl, openwebmail-prefs.pl, openwebmail-abook.pl, openwebmail-read.pl, openwebmai...
CVE-2002-2190
The CVE relates to ArtsCore Studios CuteCast Forum 1.2, where user passwords are stored in plaintext under the web document root. The underlying vulnerability is improper password storage, enabling remote attackers to retrieve passwords by requesting a ".user" file over HTTP. The available source...
CVE-2004-2190
Directory traversal vulnerability in Unzoo 4.4-2 has unknown impact and attack vectors...
CVE-2005-2190
CVE-2005-2190 concerns multiple SQL injection flaws in Comersus Shop Cart. Remote attackers can inject via (1) email to comersus_optAffiliateRegistrationExec.asp or (2) idProduct to comersus_optReviewReadExec.asp, potentially executing arbitrary SQL on the database. The NVD notes a Base Score of ...
CVE-2004-2190
CVE-2004-2190 is a directory traversal vulnerability affecting Unzoo 4.4-2. The available connected sources describe an input validation error during archive unpacking that can lead to files being overwritten outside the target directory. The NVD entry notes unknown impact/attack vectors, but oth...