CVE-2017-2254

CVE-2017-2254 affects Cybozu Garoon versions 3.5.0 to 4.2.5. The vulnerability is a denial-of-service in the application menu’s edit function triggered by specially crafted input. Underlying cause and exact exploit vector are not elaborated in the provided documents beyond noting a DoS condition....

JVN#63564682: Multiple vulnerabilities in Cybozu Garoon

Cybozu Garoon provided by Cybozu, Inc. contains multiple vulnerabilities listed below. Denial-of-service DoS vulnerability in the application menu's edit function CWE-20 - CVE-2017-2254 Version| Vector| Score ---|---|--- CVSS v3| CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H| Base Score: 5.5 CVSS...

CVE-2012-2254

This CVE-2012-2254 entry is rejected/not used and does not represent an active vulnerability.

CVE-2012-2254

...

CVE-2011-2254

CVE-2011-2254 entry is rejected/not used and does not represent an active vulnerability.

CVE-2016-2254

CVE-2016-2254 entry is rejected and not used per the Initial Description.

Ubuntu 14.04 LTS : PHP updates (USN-2254-2)

The remote Ubuntu 14.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-2254-2 advisory. USN-2254-1 fixed vulnerabilities in PHP. The fix for CVE-2014-0185 further restricted the permissions on the PHP FastCGI Process Manager FPM UNIX socket. This...

Ubuntu 14.04 LTS : PHP vulnerabilities (USN-2254-1)

The remote Ubuntu 14.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-2254-1 advisory. Christian Hoffmann discovered that the PHP FastCGI Process Manager FPM set incorrect permissions on the UNIX socket. A local attacker could use this issu...

Siemens SIMATIC S7-1200多个漏洞

CVE ID: CVE-2014-2249,CVE-2014-2250,CVE-2014-2252,CVE-2014-2254,CVE-2014-2256,CVE-2014-2258 SIMATIC S7-1200是可编程控制器，可实现简单却高度精确的自动化任务。 Siemens SIMATIC S7-1200 4.0.0之前版本在实现上存在多个漏洞，可被恶意利用执行跨站请求伪造、劫持用户会话、造成拒绝服务。 1、向TCP端口443发送特制的数据包造成的错误可造成设备进入defect模式。 2、随机生成器内弱熵相关错误，可导致劫持另外用户的会话。...

CVE-2013-2254

CVE-2013-2254 affects Apache Sling’s org.apache.sling.servlets.post.bundle in deepGetOrCreateNode (AbstractCreateOperation.java). The root cause is improper handling of a NULL value when the session lacks permissions to the root node, enabling remote denial of service via an infinite loop in Slin...

Internet Explorer Objects Handling Memory Corruption (CVE-2008-2254)

Microsoft Internet Explorer IE is the most widely used web browser application today. The browser is capable of processing HTML, scripting languages, and interpretation of various other popular Internet specifications. There are numerous versions of the HTML standard that are interpreted by the...

CVE-2010-2254

The vulnerability CVE-2010-2254 affects the Shape5 Bridge of Hope template for Joomla! where a SQL injection is possible through the id parameter in an article action to index.php. The underlying issue is improper handling of user-supplied input in the Joomla! template component, enabling a remot...

Zen Cart <= 1.3.8a Multiple Vulnerabilities

Zen Cart is prone to multiple vulnerabilities. Copyright C 2009 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

CVE-2009-2254

Zen Cart 1.3.8a, 1.3.8 and earlier versions are affected by an unauthenticated access flaw in admin/sqlpatch.php combined with PATH_INFO password_forgotten.php, allowing remote attackers to inject and execute arbitrary SQL via the query_string in an execute action. The issue enables potentially u...

Microsoft IE HTML组件处理多个内存破坏漏洞（MS08-045）

BUGTRAQ ID: 30614,30611,30612 CVECAN ID: CVE-2008-2254,CVE-2008-2256,CVE-2008-2259 Internet Explorer是微软操作系统中默认捆绑的WEB浏览器。 IE访问尚未正确初始化或已被删除的对象的方式中存在远程执行代码漏洞，在打印预览处理过程中处理参数验证的方式中存在另一个远程执行代码漏洞。攻击者可以通过构建特制的网页来利用该漏洞，当用户查看网页时，该漏洞可能允许远程执行代码。成功利用此漏洞的攻击者可以获得与登录用户相同的用户权限。 Microsoft Internet Explorer 7.0...

CVE-2008-2254

CVE-2008-2254 corresponds to a memory corruption vulnerability in Microsoft Internet Explorer 6/7 . The issue arises when IE accesses objects that are not properly initialized in HTML processing, leading to a crash or remote code execution within the user’s context. Multiple connected sources cor...

MS08-045: Cumulative Security Update for Internet Explorer (953838)

The remote host is missing the IE cumulative security update 953838. The remote version of IE is vulnerable to several flaws that could allow an attacker to execute arbitrary code on the remote host. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid33874;...

CVE-2002-2254

The CVE describes a vulnerability in the Linux kernel’s Netfilter/IPTables: the experimental IP packet queuing feature in kernels 2.4 (up to 2.4.19) and 2.5 (up to 2.5.31). If a privileged process exits while traffic is not queued, a later process with the same PID may access network traffic that...

CVE-2006-2254

CVE-2006-2254 describes a buffer overflow in FileCOPA 1.01’s filecpnt.exe that permits remote attackers to cause an application crash (DoS) by sending a username containing a large number of newline characters. The provided data indicates a network attack surface with low attack complexity and no...

CVE-2004-2254

SurgeLDAP 1.0g (Build 12), and possibly earlier 1.0h, contains an authentication bypass vulnerability in the administration interface. The issue allows remote attackers to bypass login by sending a direct request to admin.cgi with a modified utoken parameter. The affected product/version informat...