68 matches found
CVE-2009-2351
CVE-2009-1312 is referenced in MiracleLinux AXSA advisories as a vulnerability in Mozilla Firefox and SeaMonkey where javascript: URIs in Refresh headers in HTTP responses were not blocked. Affected versions include Mozilla Firefox before 3.0.9 and SeaMonkey before 1.1.17; this could enable cross...
CVE-2008-2351
creationtimestamp| type| source ---|---|--- 2008-05-18 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/5641...
CVE-2002-2351
CVE-2002-2351 affects Eudora 5.1. An attacker could bypass security warnings and possibly execute arbitrary code through email attachments where the name ends with a trailing dot. The connected documents confirm this behavior across Red Hat, CVE listings, and NVD references, all citing the same d...
openSUSE 10 Security Update : tar (tar-2351)
This security update fixes a directory traversal in tar, where unpacked symlinks could be followed outside of the directory where the tar file is unpacked. CVE-2006-6097 This feature was made optional and needs to be enabled with a commandline option. %NASLMINLEVEL 70300 C Tenable Network Securit...
CVE-2007-2351
Summary: CVE-2007-2351 refers to an unspecified vulnerability in the HP Power Manager Remote Agent (RA) 4.0Build10 and earlier on HP-UX B.11.11 and B.11.23. The vulnerability allegedly allows local users to execute arbitrary code via unspecified vectors. The connected sources confirm affected pro...
CVE-2006-2351
Ipswitch WhatsUp Professional 2006 and WhatsUp Professional 2006 Premium are affected by multiple cross-site scripting (XSS) vulnerabilities. The XSS can be triggered via the following parameters: (1) sDeviceView or (2) nDeviceID to NmConsole/Navigation.asp, and (3) sHostname to NmConsole/ToolRes...
CVE-2004-2351
CVE-2004-2351 describes a cross-site scripting (XSS) vulnerability in GBook for Php-Nuke 1.0. Remote attackers can inject arbitrary web script or HTML through multiple user-input fields (name, email, city, message) that reportedly do not use [removed] or tags, which PHP-Nuke purportedly filters....
CVE-2004-2351
Cross-site scripting XSS vulnerability in GBook for Php-Nuke 1.0 allows remote attackers to inject arbitrary web script or HTML via multiple parameters, including 1 name, 2 email, 3 city, and 4 message, which do not use the and tags, which are filtered by PHP-Nuke...