160 matches found
CVE-2011-2318
CVE-2011-2318 refers to an unspecified vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware versions 9.2.4.0, 10.0.2.0, 10.3.3.0, 10.3.4.0, and 10.3.5.0 that allows local users to affect confidentiality (related to WLS Security). The description does not provide detai...
Debian Security Advisory DSA 2318-1 (cyrus-imapd-2.2)
The remote host is missing an update to cyrus-imapd-2.2 announced via advisory DSA 2318-1. OpenVAS Vulnerability Test $Id: deb23181.nasl 6613 2017-07-07 12:08:40Z cfischer $ Description: Auto-generated from advisory DSA 2318-1 cyrus-imapd-2.2 Authors: Thomas Reinke Copyright: Copyright c 2011...
Debian: Security Advisory (DSA-2318-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora Update for logwatch FEDORA-2011-2318
The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...
CVE-2010-2318
Cross-site scripting XSS vulnerability in cmsdata.php in PHPCityPortal 1.3 allows remote attackers to inject arbitrary web script or HTML via the page parameter...
CVE-2010-2318
PHPCityPortal 1.3 has a Cross-site scripting (XSS) vulnerability in cms_data.php, exploitable via the page parameter to inject arbitrary script/HTML. This is caused by unsanitized input passed to the page parameter, enabling remote attackers to execute embedded scripts in the victim’s browser. Mu...
CVE-2009-2318
CVE-2009-2318 affects the Axesstel MV 410R and describes a remote denial of service caused by a flood of SYN packets. Connected records relate this to CVE-1999-0116 (SYN flood) and consistently describe a DoS condition from crafted TCP connection attempts, without detailing a successful exploit o...
CVE-2008-2318
The CVE-2008-2318 issue affects Apple’s Xcode WebObjects: the WOHyperlink API in WebObjects before Xcode 3.1 appends local session IDs to generated non-local URLs, enabling potential information disclosure by remote attackers reading those requests. Impact is information leakage without exploitat...
CVE-2002-2318
Cross-site scripting XSS vulnerability in Falcon web server 2.0.0.1009 through 2.0.0.1021 allows remote attackers to inject arbitrary web script or HTML via the URI, which is inserted into 301 error messages and executed by 404 error messages...
CVE-2002-2318
CVE-2002-2318 affects Falcon Web Server 2.0.0.1009 through 2.0.0.1021. The vulnerability is a cross-site scripting (XSS) flaw where an attacker can inject arbitrary script/HTML via the request URI, which is then embedded in 301 error messages and rendered by 404 error responses. The underlying ca...
CVE-2007-2318
CVE-2007-2318 affects the FileZilla FTP client prior to 2.2.32. The issue is multiple format-string vulnerabilities within FTP server responses or data sent by the FTP server, enabling remote attackers to execute arbitrary code. The vulnerability is documented across multiple sources (NVD, OSV, D...
FileZilla FTP Client < 2.2.32 Multiple Format Strings
According to its version, the FileZilla FTP client installed on the remote host is affected by multiple format string vulnerabilities. Details on the issues are not currently available, but it is expected that exploitation would require a user visit a malicious FTP site using the affected softwar...
CVE-2006-2318
CVE-2006-2318 affects Ideal Science Ideal BB versions up to 1.5.4a. The flaw is an incomplete blacklist that allows a remote attacker to upload and execute an ASP script by uploading a ".asa" file, bypassing the ".asp" extension check but executable on the server. The NVD entry cites a CVSSv2 bas...
CVE-2004-2318
The administrative interface surgeftpmgr.cgi for SurgeFTP Server 1.0b through 2.2k1 allows remote attackers to cause a temporary denial of service crash via requests with two percent % signs in the CMD parameter...
CVE-2004-2318
The CVE-2004-2318 vulnerability affects SurgeFTP Server versions 1.0b to 2.2k1 and is triggered through the administrative interface, surgeftpmgr.cgi. A crafted request containing two percent (%) signs in the CMD parameter can cause a crash, resulting in a temporary denial of service. The availab...
CVE-2005-2318
Concrete details exist: CVE-2005-2318 is an XSS vulnerability in DVBBS 7.1 SP2, specifically in showerr.asp, exploitable via the action parameter. The issue allows remote injection of arbitrary script/HTML and is rated with CVSS v2.0 base metrics (AV:N/AC:M/Au:N/C:N/I:P/A:N; base score 4.3, MEDIU...
CVE-2004-2318
The administrative interface surgeftpmgr.cgi for SurgeFTP Server 1.0b through 2.2k1 allows remote attackers to cause a temporary denial of service crash via requests with two percent % signs in the CMD parameter...
Full Revolution album.asp aspWebAlbum SQL Injection
Binary data 2318.prm...
CVE-2002-2318
Cross-site scripting XSS vulnerability in Falcon web server 2.0.0.1009 through 2.0.0.1021 allows remote attackers to inject arbitrary web script or HTML via the URI, which is inserted into 301 error messages and executed by 404 error messages...
