CVE-2008-2410

CVE-2008-2410 relates to an XSS vulnerability in the IBM Lotus Domino Web Server’s servlet engine/Web container, affecting Domino before 7.0.3 FP1 and before 8.0.1 (8.x). Connected Nessus data adds that older Domino web server versions may also be affected by a stack overflow via a crafted Accept...

CVE-2002-2410

OpenWebMail is affected: Open WebMail 1.7 and 1.71 expose sensitive information via error messages and respond differently for existing vs non-existent users, enabling remote username enumeration and disclosure of certain configuration and version information. Affected component: openwebmail.pl. ...

CVE-2007-2410

CVE-2007-2410 affects WebCore component on Apple Mac OS X 10.3.9 and 10.4.10. The flaw causes WebCore to retain properties of certain global objects when a new URL loads in the same window, enabling remote XSS attacks. The impact is cross-site scripting, as described in the CVE entry. Apple relea...

Mac OS X Multiple Vulnerabilities (Security Update 2007-007)

The remote host is running a version of Mac OS X 10.4 or 10.3 which does not have the security update 2007-007 applied. This update contains several security fixes for the following programs : - bzip2 - CFNetwork - CoreAudio - cscope - gnuzip - iChat - Kerberos - mDNSResponder - PDFKit - PHP -...

CVE-2006-2410

The vulnerability CVE-2006-2410 affects Raydium software: raydium_network_netcall_exec in network.c for SVN revision 312 and earlier. A remote attacker can trigger a denial of service (application crash) by sending a packet of type 0xFF, which causes a null dereference. The connected documents co...

CVE-2004-2410

Unknown vulnerability in sh_hash_compdata for Samhain 1.8.9 through 2.0.1 might allow attackers to cause a denial of service via a null pointer dereference. Affected software is Samhain; the description does not specify broader impact, root cause details, or a remediation. No exploits or patches ...

CVE-2005-2410

Format string vulnerability in the nminfohandler function in Network Manager may allow remote attackers to execute arbitrary code via format string specifiers in a Wireless Access Point identifier, which is not properly handled in a syslog call...

CVE-2005-2410

Format string vulnerability in the nminfohandler function in Network Manager may allow remote attackers to execute arbitrary code via format string specifiers in a Wireless Access Point identifier, which is not properly handled in a syslog call...

CVE-2005-2410

The CVE-2005-2410 entry concerns NetworkManager’s nm_info_handler, where a format string vulnerability arises from improper handling of a Wireless Access Point identifier in a syslog call. The impact described in the sources is remote code execution via crafted input, with attack vector over the ...

CVE-2004-2410

Unknown vulnerability in shhashcompdata for Samhain 1.8.9 through 2.0.1 might allow attackers to cause a denial of service null pointer dereference...

CVE-2002-2410

openwebmail.pl in Open WebMail 1.7 and 1.71 reveals sensitive information in error messages and generates different responses whether a user exists or not, which allows remote attackers to identify valid usernames via brute force attacks and obtain certain configuration and version information...