130 matches found
CVE-2013-2270
CVE-2013-2270 corresponds to a cross-site scripting (XSS) vulnerability in the Airvana HubBub C1-600-RT and Sprint AIRAVE 2.5 router administration page. The linked Neohapsis advisory indicates this is a stored XSS flaw that can be exploited by an attacker who has authenticated access to execute ...
PHP 5.5.x < 5.5.10 Multiple Vulnerabilities
According to its banner, the version of PHP 5.5.x installed on the remote host is a version prior to 5.5.10. It is, therefore, potentially affected by the following vulnerabilities : - An error exists related to the Fileinfo extension and the bundled libmagic library that could allow denial of...
PHP 5.4.x < 5.4.26 Multiple Vulnerabilities
According to its banner, the version of PHP 5.4.x installed on the remote host is a version prior to 5.4.26. It is, therefore, potentially affected by the following vulnerabilities : - An error exists related to the Fileinfo extension and the bundled libmagic library that could allow denial of...
Stored Cross-site Scripting ('XSS') in Airvana HubBub C1-600-RT Femtocell
Advisory ID: NEOCAN-2013-002 Advisory Title: Stored XSS 'cross-site scripting' in Airvana HubBub C1-600-RT router Author: Scott Behrens / [email protected] Release Date: 02/27/2013 Vendor: Airvana Application: Airrave 2.5 router administration page Platform: Web Application Severity:...
CVE-2012-2270
Open redirect vulnerability in index.php aka the Login Page in ownCloud before 3.0.3 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the redirecturl parameter...
CVE-2012-2270
Open redirect vulnerability in index.php aka the Login Page in ownCloud before 3.0.3 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the redirecturl parameter...
CVE-2012-2270
CVE-2012-2270 is an open redirect vulnerability in the ownCloud login page (index.php) affecting version 3.0.0 (and related 3.0.x). The issue arises from unsafely handling the redirect_url parameter, enabling attackers to redirect users to arbitrary sites and facilitate phishing. According to the...
CVE-2012-2270
creationtimestamp| type| source ---|---|--- 2012-04-18 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/37094...
Debian DSA-2270-1 : qemu-kvm - programming error
It was discovered that incorrect sanitising of virtio queue commands in KVM, a solution for full virtualization on x86 hardware, could lead to denial of service or the execution of arbitrary code. The oldstable distribution lenny is not affected by this problem. %NASLMINLEVEL 70300 C Tenable...
CVE-2010-2270
CVE-2010-2270 affects Accoria Web Server (Rock Web Server) 1.4.7. The vulnerability is due to a predictable httpmod-sessionid cookie used for session management, enabling remote attackers to hijack sessions via a modified cookie. Root cause: predictable session identifiers in the server’s cookie ...
CVE-2009-2270
CVE-2009-2270 describes an unrestricted file upload in the DedecMS 5.3 component, specifically in member/uploads_edit.php, allowing remote code execution when an attacker uploads a double-extension filename (e.g., .jpg.php) and then accesses it via unspecified vectors. Affected software: DedecMS ...
Gentoo Security Advisory GLSA 200507-24 (mozilla)
The remote host is missing updates announced in advisory GLSA 200507-24. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2008-2270
CVE-2008-2270 : In PHPWAY Kostenloses Linkmanagementscript, multiple PHP remote file inclusion vulnerabilities exist in template\index.php, allowing an attacker to supply a URL through the (1) main_page_directory or (2) page_to_include parameters to cause the execution of arbitrary PHP code on th...
Debian Security Advisory DSA 779-1 (mozilla-firefox)
The remote host is missing an update to mozilla-firefox announced via advisory DSA 779-1. Several problems have been discovered in Mozilla Firefox, a lightweight web browser based on Mozilla. For more details, please visit the referenced security advisory. The old stable distribution woody is not...
Debian: Security Advisory (DSA-810-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2002-2270
The CVE-2002-2270 entry concerns HP-UX (versions 10.10, 10.20, 11.0) with an unspecified vulnerability in the built‑in ied command that allows local users to view normally invisible data via unknown attack vectors. The affected component is the ied command on those HP-UX releases; the underlying ...
CVE-2007-2270
CVE-2007-2270 affects the Linksys SPA941 VoIP Phone. The vulnerability is triggered by a 0xff character in the SIP INVITE From header (and possibly other locations), leading to a denial of service via device reboot. The available documents provide the impact and affected component but do not spec...
CentOS 4 : thunderbird (CESA-2005:601)
Updated thunderbird package that fixes various bugs is now available for Red Hat Enterprise Linux 4. This update has been rated as having important security impact by the Red Hat Security Response Team. Mozilla Thunderbird is a standalone mail and newsgroup client. A bug was found in the way...
CentOS 4 : firefox (CESA-2005:586)
An updated firefox package that fixes various security bugs is now available for Red Hat Enterprise Linux 4. This update has been rated as having important security impact by the Red Hat Security Response Team. Mozilla Firefox is an open source Web browser. A bug was found in the way Firefox...
CentOS 3 / 4 : mozilla (CESA-2005:587)
Updated mozilla packages that fix various security issues are now available. This update has been rated as having important security impact by the Red Hat Security Response Team. Mozilla is an open source Web browser, advanced email and newsgroup client, IRC chat client, and HTML editor. A bug wa...