62 matches found
Synology DiskStation Manager arbitrary file modification
Overview Synology DiskStation Manager versions 4.3-3776-3 and below contain a vulnerability that allows a remote unauthenticated user to append arbitrary data to an arbitrary file under root privileges. Description CWE-284: Improper Access Control - CVE-2013-6955Synology DiskStation Manager...
CVE-2012-2259
CVE-2012-2259 is rejected/not used; this CVE entry does not represent an active vulnerability.
CVE-2011-2259
Unspecified vulnerability in Oracle Solaris 8, 9, 10, and 11 Express allows local users to affect availability, related to UFS...
CVE-2011-2259
Technical details about CVE-2011-2259 are not publicly provided in the supplied documents; records only indicate an unspecified local vulnerability in Oracle Solaris UFS affecting availability. Monitor for updates in official advisories.
Debian DSA-2259-1 : fex - authentication bypass
It was discovered that FEX, a web service for transferring very large files, is not properly validating authentication IDs. While the service properly validates existing authentication IDs, an attacker who is not specifying any authentication ID at all can bypass the authentication procedure. The...
CVE-2010-2259
Directory traversal vulnerability in the BF Survey combfsurvey component for Joomla! allows remote attackers to include and execute arbitrary local files via a .. dot dot in the controller parameter to index.php...
CVE-2010-2259
Directory traversal vulnerability in the BF Survey combfsurvey component for Joomla! allows remote attackers to include and execute arbitrary local files via a .. dot dot in the controller parameter to index.php...
CVE-2010-2259
CVE-2010-2259 is a directory traversal / local file inclusion vulnerability in the Joomla! BF Survey component (com_bfsurvey). The Nuclei template and related references describe exploitation via a ../ in the controller parameter to index.php, enabling remote attackers to include and potentially ...
CVE-2010-2259
creationtimestamp| type| source ---|---|--- 2010-01-03 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/10946...
CVE-2009-2259
creationtimestamp| type| source ---|---|--- 2009-06-26 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/9023...
Microsoft IE HTML组件处理多个内存破坏漏洞（MS08-045）
BUGTRAQ ID: 30614,30611,30612 CVECAN ID: CVE-2008-2254,CVE-2008-2256,CVE-2008-2259 Internet Explorer是微软操作系统中默认捆绑的WEB浏览器。 IE访问尚未正确初始化或已被删除的对象的方式中存在远程执行代码漏洞，在打印预览处理过程中处理参数验证的方式中存在另一个远程执行代码漏洞。攻击者可以通过构建特制的网页来利用该漏洞，当用户查看网页时，该漏洞可能允许远程执行代码。成功利用此漏洞的攻击者可以获得与登录用户相同的用户权限。 Microsoft Internet Explorer 7.0...
CVE-2008-2259
The CVE-2008-2259 entry refers to a set of memory corruption/argument-validation issues in Microsoft Internet Explorer 6 and 7 during print preview, described as the HTML Component Handling Vulnerability. Affected products are IE 6.x and IE 7.x on Windows; the underlying cause is improper validat...
Internet Explorer print preview argument validation vulnerability
Added: 08/13/2008 CVE: CVE-2008-2259 BID: 30612 OSVDB: 47414 Background Internet Explorer is an HTML web browser which comes by default on Microsoft operating systems. Problem A flaw in the handling of validation of arguments by the print preview function in Internet Explorer allows command...
MS08-045: Cumulative Security Update for Internet Explorer (953838)
The remote host is missing the IE cumulative security update 953838. The remote version of IE is vulnerable to several flaws that could allow an attacker to execute arbitrary code on the remote host. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid33874;...
CVE-2002-2259
CVE-2002-2259 describes a buffer overflow in the French documentation patch for Gnuplot 3.7 in SuSE Linux before 8.0, enabling local users to execute arbitrary code as root via unknown attack vectors. The public records indicate the vulnerable component is the patch used in SuSE Linux packaging f...
CVE-2006-2259
This CVE (CVE-2006-2259) is a SQL injection vulnerability in Logon.asp of MaxxSchedule 1.0, exploitable via the txtLogon parameter to execute arbitrary SQL commands. The NVD entry specifies a base score of 7.5 (HIGH) with network attack vector and low attack complexity, indicating remote exposure...
CVE-2004-2259
Vulnerability CVE-2004-2259 affects vsftpd before 1.2.2. Under heavy load, a SIGCHLD signal during malloc/free (non-reentrant) can cause the FTP daemon to crash, producing a denial of service. Multiple connected sources confirm a signal-handling bug where unsafe operations in signal handlers coul...
CVE-2005-2259
The CVE-2005-2259 issue affects multiple USANet Creations products (USANet Shopping Mall Software, Domain Name Auction Software, Standard Classified Ads Software, and MakeBid Reverse Auction). The vulnerability lies in the dispallclosed2 function within dispallclosed.pl, which allows remote attac...