CVE-2012-2317

CVE-2012-2317 concerns a vulnerability in the Debian/Ubuntu patch for PHP 5.3.x where an empty salt string is not handled properly by the crypt() password hashing path. This could let remote attackers bypass authentication if an application relies on PHP’s crypt() salt selection. Affected package...

Ubuntu: Security Advisory (USN-1481-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[Onapsis Security Advisory 2012-01] Oracle JD Edwards JDENET Arbitrary File Write

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Onapsis Security Advisory: Oracle JD Edwards JDENET Arbitrary File Write This advisory can be downloaded in PDF format from http://www.onapsis.com/. By downloading this advisory from the Onapsis Resource Center, you will gain access to beforehand...

CVE-2011-2317

CVE-2011-2317 affects Oracle JD Edwards JDENET/EnterpriseOne Tools 8.98 SP 24. Affected component: JD ENET/Tools in JD Edwards EnterpriseOne. Root cause: Arbitrary file write via a crafted File Packet sent to the JDENet port (default 6015), enabling a remote attacker to save files on the server. ...

Debian DSA-2317-1 : icedove - several vulnerabilities

CVE-2011-2372 Mariusz Mlynski discovered that websites could open a download dialog -- which has 'open' as the default action --, while a user presses the ENTER key. - CVE-2011-2995 Benjamin Smedberg, Bob Clary and Jesse Ruderman discovered crashes in the rendering engine, which could lead to the...

SuSE 11 Security Update : MySQL (SAT Patch Number 2317)

Updated MySQL packages fix the following bugs : - upstream 47320 - checking server certificates. CVE-2009-4028 - upstream 48291 - error handling in subqueries. CVE-2009-4019 - upstream 47780 - preserving nullvalue flag in GeomFromWKB. CVE-2009-4019 - upstream 39277 - symlink behaviour fixed...

CVE-2010-2317

CVE-2010-2317 concerns multiple SQL injection vulnerabilities in WmsCms 2.0 and earlier. The flaws allow remote attackers to inject arbitrary SQL through specific parameters: default.asp: (1) search, (2) sbr, (3) pid, (4) sbl, (5) FilePath; and printpage.asp: (6) sbr, (7) pr, (8) psPrice. The des...

CVE-2010-2317

creationtimestamp| type| source ---|---|--- 2010-06-06 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/13739...

CVE-2009-2317

The CVE-2009-2317 entry pertains to the Axesstel MV 410R router that ships with a default administrator password and does not require changing it. This configuration allows remote attackers to obtain access. The available connected documents confirm the issue exists in the MV 410R as described, b...

Safari < 3.2 Multiple Vulnerabilities

Binary data 4754.prm...

Mac OS X : Apple Safari < 3.2

The version of Apple Safari installed on the remote Mac OS X host is earlier than 3.2. As such, it is potentially affected by several issues : - A signedness issue in Safari's handling of JavaScript array indices could lead to a crash or arbitrary code execution. CVE-2008-2303 - A memory corrupti...

Memory corruption

JavaScriptCore in WebKit on Apple iPhone before 2.0 and iPod touch before 2.0 does not properly perform runtime garbage collection, which allows remote attackers to execute arbitrary code or cause a denial of service application crash via unspecified vectors that trigger memory corruption, a...

CVE-2008-2317

CVE-2008-2317 affects Apple Safari/WebKit (WebCore) in the garbage collection path for JavaScript document elements. When a STYLE element’s CSSStyleSheet is copied and the element is deallocated, a reference to the copied object’s ownerNode can cause heap corruption, enabling remote code executio...

Debian Security Advisory DSA 223-1 (geneweb)

The remote host is missing an update to geneweb announced via advisory DSA 223-1. OpenVAS Vulnerability Test $Id: deb2231.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 223-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

CVE-2002-2317

CVE-2002-2317 concerns VelociRaptor 1.0, indicating a memory leak in three components: httpd, nntpd, and the vpn driver. The underlying issue is a memory consumption DoS that can be triggered by remote attackers using an unknown method. Referenced sources (NVD, Red Hat, CVE listings) confirm the ...

CVE-2007-2317

CVE-2007-2317 describes multiple PHP remote file inclusion vulnerabilities in MiniBB Forum 1.5a and earlier used with Tosmo/Mambo 4.0.12 and possibly other products. The vulnerability allows an attacker to execute arbitrary PHP code by supplying a URL to the absolute_path parameter in bb_plugins....

CVE-2007-2317

Multiple PHP remote file inclusion vulnerabilities in MiniBB Forum 1.5a and earlier, as used by TOSMO/Mambo 4.0.12 and probably other products, allow remote attackers to execute arbitrary PHP code via a URL in the absolutepath parameter to bbplugins.php in 1 components/minibb/ or 2...

[SECURITY] [DSA 849-1] New shorewall packages fix firewall bypass

-------------------------------------------------------------------------- Debian Security Advisory DSA 849-1 [email protected] http://www.debian.org/security/ Martin Schulze October 8th, 2005 http://www.debian.org/security/faq -...

CVE-2004-2317

Technical details for CVE-2004-2317 are not publicly available in the provided documents. No concrete information on affected products, versions, root cause, or impact is present. Monitor for updates from credible sources.

CVE-2005-2317

Shorewall 2.4.x before 2.4.1, 2.2.x before 2.2.5, and 2.0.x before 2.0.17, when MACLISTTTL is greater than 0 or MACLISTDISPOSITION is set to ACCEPT, allows remote attackers with an accepted MAC address to bypass other firewall rules or policies...