109 matches found
CVE-2016-2297
Meteocontrol WEB’log Basic 100, Light, Pro, and Pro Unlimited are affected by CVE-2016-2297 via a hidden/obscured access command shell-like feature that allows remote execution of commands without authentication. The vulnerability, part of an improper access control issue alongside related CVEs i...
Sybase EAServer 5.2 - Remote Stack Buffer Overflow
No description provided by source. $Id: sybaseeaserver.rb 9583 2010-06-22 19:11:05Z todb $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of us...
CVE-2013-2297
Eucalyptus EuStore sets a blank root password in the default configuration of EMI 3868652036, EMI 0400376721, EMI 2425352071, and EMI 1347115203, which allows local users to gain privileges via unspecified vectors, a related issue to CVE-2013-2069...
CVE-2013-2297
CVE-2013-2297 concerns Eucalyptus EuStore in default EMI configurations (EMI 3868652036, EMI 0400376721, EMI 2425352071, EMI 1347115203). The issue arises from a blank root password being set, enabling local users to gain privileges via unspecified vectors. This is a local-privilege-escalation ri...
CVE-2012-2297
The CVE-2012-2297 entry refers to the Creative Commons module for Drupal (6.x-1.x) with XSS vulnerabilities in the 6.x-1.0 to 6.x-1.1 range. The root cause is insufficient filtering of license description text, enabling remote authenticated users with the administer creative commons permission to...
Debian: Security Advisory (DSA-2297-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2011-2297
Technical details about CVE-2011-2297 are not publicly provided in the supplied documents. Monitor for updates from Oracle/CERT advisories for affected products and fixes.
Google Chrome 'WebKit' Multiple Vulnerabilities (Linux) - Sep 10
This host is installed with Google Chrome and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: secpodgooglechromemultvulnlin01sep10.nasl 5394 2017-02-22 09:22:42Z teissa $ Google Chrome 'WebKit' Multiple Vulnerabilities Linux - Sep 10 Authors: Sooraj KS Copyright: Copyright c...
Google Chrome 'WebKit' Multiple Vulnerabilities (Windows) - June 10
This host is installed with Google Chrome and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: secpodgooglechromemultvulnwinjun10.nasl 5394 2017-02-22 09:22:42Z teissa $ Google Chrome 'WebKit' Multiple Vulnerabilities Windows - June 10 Authors: Madhuri D Updated By: Sooraj KS...
CVE-2005-2297
creationtimestamp| type| source ---|---|--- 2010-06-22 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/16766 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/http/sybaseeaserver.rb 2025-02-06 03:13:38+00:00| seen|...
CVE-2010-2297
rendering/FixedTableLayout.cpp in WebCore in WebKit in Google Chrome before 5.0.375.70 allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via an HTML document that has a large colspan attribute within a table...
CVE-2010-2297
rendering/FixedTableLayout.cpp in WebCore in WebKit in Google Chrome before 5.0.375.70 allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via an HTML document that has a large colspan attribute within a table...
CVE-2010-2297
Removed by vendor...
CVE-2010-2297
CVE-2010-2297 affects Google Chrome’s WebKit/WebCore (FixedTableLayout.cpp) where an HTML document with a large colspan inside a table can crash the browser or potentially execute arbitrary code. Affected version: Chrome prior to 5.0.375.70. Public references in NVD, SUSE/SUSE-verified advisories...
Microsoft Windows itss.dll CHM File Handling Heap Corruption (CVE-2006-2297)
Microsoft Windows operating systems contain numerous libraries that facilitate the processing of the many file formats that are recognized by standard Windows installations. One such file format is the Microsoft compiled help files, known as CHM. A vulnerability exists in the Microsoft Windows...
Sybase EAServer WebConsole Buffer Overflow (CVE-2005-2297)
Sybase EAServer is a web service application server suite. The software provides a web-based management console to allow a remote user using a web browser to perform database administration tasks. The communication between the client and the web-based management console is encapsulated in the HTT...
CVE-2009-2297
The CVE-2009-2297 entry concerns an unspecified vulnerability in the UDP subsystem of the Solaris/OpenSolaris kernel when Trusted Extensions is enabled. The issue is triggered by a regression in earlier kernel patches that affects the crgetlabel path, leading to a remote denial-of-service (panic)...
CVE-2008-2297
The admin.php file in Rantx allows remote attackers to bypass authentication and gain privileges by setting the logininfo cookie to "", which is present in the password file and probably passes an insufficient comparison...
CVE-2008-2297
CVE-2008-2297 concerns the Rantx admin.php file where remote attackers can bypass authentication and gain privileges by setting the logininfo cookie to "". The vulnerability arises because the logininfo cookie is present in the password file and likely does not perform a sufficiently strict compa...
Debian Security Advisory DSA 1358-1 (asterisk)
The remote host is missing an update to asterisk announced via advisory DSA 1358-1. OpenVAS Vulnerability Test $Id: deb13581.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1358-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...