78 matches found
CVE-2012-2399
Cross-site scripting XSS vulnerability in swfupload.swf in SWFupload 2.2.0.1 and earlier, as used in WordPress before 3.5.2, TinyMCE Image Manager 1.1 and earlier, and other products allows remote attackers to inject arbitrary web script or HTML via the buttonText parameter, a different...
CVE-2012-2399
CVE-2012-2399 is an XSS vulnerability in swfupload.swf (SWFUpload 2.2.0.1 and earlier), used in WordPress before 3.5.2 and TinyMCE Image Manager 1.1 and earlier. The flaw allows remote attackers to inject arbitrary web script or HTML via the buttonText parameter. The connected documents do not pr...
Debian: Security Advisory (DSA-2399-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Debian DSA-2399-2 : php5 - several vulnerabilities
Several vulnerabilities have been discovered in PHP, the web scripting language. The Common Vulnerabilities and Exposures project identifies the following issues : - CVE-2011-1938 The UNIX socket handling allowed attackers to trigger a buffer overflow via a long path name. - CVE-2011-2483 The...
CVE-2011-2399
CVE-2011-2399 is a remote denial-of-service vulnerability in HP Data Protector’s Media Management Daemon (mmd), affecting HP Data Protector versions up to 6.11. The issue allows an unauthenticated, remote attacker to cause a DoS via unknown vectors, with CVSSv2 base score 7.8 (HIGH). HP’s securit...
[security bulletin] HPSBMU02669 SSRT100346 rev.3 - HP Data Protector Media Management Daemon (mmd), Remote Denial of Service (DoS)
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c02940981 Version: 1 HPSBMU02669 SSRT100346 rev.3 - HP Data Protector Media Management Daemon mmd, Remote Denial of Service DoS NOTICE: The information in this Security Bulletin should be acted up...
CVE-2010-2399
CVE-2010-2399 affects Oracle Solaris 10 and OpenSolaris (Kernel/VM). Descriptions specify a local vulnerability that can impact availability via unknown vectors; root cause and exploit details are not disclosed in the provided documents. No patch/fix details are given for this CVE within the conn...
DM FileManager 'album.php' Remote File Inclusion Vulnerability
The host is running DM FileManager and is prone to remote File Inclusion vulnerability. OpenVAS Vulnerability Test $Id: gbdmfilemanagerfileincvuln.nasl 4865 2016-12-28 16:16:43Z teissa $ DM FileManager 'album.php' Remote File Inclusion Vulnerability Authors: Sharath S Copyright: Copyright c 2009...
DM FileManager <= 3.9.4 RFI Vulnerability - Active Check
DM FileManager is prone to a remote file inclusion RFI vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2009-2399
DM FileManager
CVE-2009-2399
creationtimestamp| type| source ---|---|--- 2009-06-29 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/9044...
CVE-2008-2399
Technical details on CVE-2008-2399 are not publicly available in the provided connected documents. Monitor for updates.
CVE-2002-2399
The CVE-2002-2399 entry describes a directory traversal vulnerability in W3Mail 1.0.6, specifically in viewAttachment.cgi, where an attacker can read arbitrary files by supplying a .. sequence in the file parameter. This is supported by multiple sources (NVD entry and Red Hat security page) that ...
CVE-2002-2399
Directory traversal vulnerability in viewAttachment.cgi in W3Mail 1.0.6 allows remote attackers to read arbitrary files via a .. dot dot in the file parameter...
CVE-2007-2399
WebKit in Apple Mac OS X 10.3.9/10.4.9+ and iPhone
CVE-2006-2399
CVE-2006-2399 affects Outgun 1.0.3 bot 2 and earlier. The stack-based buffer overflow occurs in ServerNetworking::incoming_client_data (servnet.cpp) and can be triggered by a data_file_request command with a long type or name string, potentially causing remote denial of service and arbitrary code...
CVE-2004-2399
Summary: CVE-2004-2399 affects Secure Computing Corporation Sidewinder G2 6.1.0.01. The vulnerability allows remote attackers to cause a denial of service via delayed responses to DNS queries, resulting in CPU consumption. The connected documentation confirms the affected product/version and the ...
CVE-2005-2399
PHP Surveyor 0.98 is affected by multiple vulnerabilities exposing SQL errors (remote) via missing parameters to browse.php, export.php, conditions.php, and spss.php. Connected sources also indicate possible SQL injection, path disclosure, and XSS in the PHP Surveyor suite, with exploitation deta...