CVE-2009-2438

CVE-2009-2438 describes a cross-site scripting (XSS) vulnerability in ClanSphere, affecting versions 2009.0 and 2009.0.2. The flaw allows remote injection of arbitrary script/HTML via the text parameter in a list action within the search module (index.php). The root cause is an input handling iss...

CVE-2009-2438

Cross-site scripting XSS vulnerability in index.php in the search module in ClanSphere 2009.0 and 2009.0.2 allows remote attackers to inject arbitrary web script or HTML via the text parameter in a list action. NOTE: this might overlap CVE-2008-1399...

CVE-2009-2438

creationtimestamp| type| source ---|---|--- 2009-06-06 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/33068...

CVE-2008-2438

CVE-2008-2438: HP OpenView Network Node Manager (OV NNM) versions 7.01, 7.51 and 7.53 contain an integer overflow in ovalarmsrv.exe that can be exploited remotely via crafted commands to port 2954/TCP, triggering a heap-based buffer overflow and allowing arbitrary code execution. HP patches PHSS_...

[security bulletin] HPSBMA02424 SSRT080125 rev.1 - HP OpenView Network Node Manager (OV NNM), Remote Execution of Arbitrary Code

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c01723303 Version: 1 HPSBMA02424 SSRT080125 rev.1 - HP OpenView Network Node Manager OV NNM, Remote Execution of Arbitrary Code NOTICE: The information in this Security Bulletin should be acted up...

Ubuntu Update for vim vulnerability USN-463-1

Ubuntu Update for Linux kernel vulnerabilities USN-463-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN4631.nasl 7969 2017-12-01 09:23:16Z santu $ Ubuntu Update for vim vulnerability USN-463-1 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.n...

Debian Security Advisory DSA 1364-1 (vim)

The remote host is missing an update to vim announced via advisory DSA 1364-1. OpenVAS Vulnerability Test $Id: deb13641.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1364-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

Debian: Security Advisory (DSA-1364-2)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

openSUSE 10 Security Update : vim (vim-3410)

Files with VIM modelines could call some unsafe VIM functions CVE-2007-2438. Modelines are disabled in the default config /etc/vimrc of openSUSE though. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Securit...

CVE-2007-2653

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2007-2438. Reason: This candidate is a duplicate of CVE-2007-2438. Notes: All CVE users should reference CVE-2007-2438 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...

Design/Logic Flaw

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2007-2438. Reason: This candidate is a duplicate of CVE-2007-2438. Notes: All CVE users should reference CVE-2007-2438 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...

CVE-2007-2653

CVE-2007-2653 is rejected; refer to CVE-2007-2438 instead; not an active vulnerability entry.

CVE-2007-2438

The sandbox for vim allows dangerous functions such as 1 writefile, 2 feedkeys, and 3 system, which might allow user-assisted attackers to execute shell commands and write files via modelines...

CVE-2007-2438

CVE-2007-2438 targets Vim’s sandbox, where modeline parsing grants access to dangerous functions (writefile, feedkeys, system), enabling user-assisted execution of shell commands and file writes. The issue affects Vim components exposed to modelines and has been addressed in multiple advisories a...

CVE-2006-2438

CVE-2006-2438 is a directory traversal in Resin’s viewfile servlet (resin-doc) affecting Resin 3.0.17 and 3.0.18. An unauthenticated remote attacker can read arbitrary files under other web roots via the contextpath parameter, with potential path disclosure when the parameter is invalid. The issu...

CVE-2004-2438

PHP-Fusion 4.01 is affected by a cross-site scripting (XSS) vulnerability that allows remote attackers to inject arbitrary web script or HTML via the Submit News, Submit Link, or Submit Article fields. The CVE-2004-2438 entry documents this XSS issue across multiple input points but provides limi...

CVE-2005-2438

CVE-2005-2438 describes a cross-site scripting (XSS) vulnerability in UseBB 0.5.1 and earlier. The issue allows remote attackers to inject arbitrary JavaScript via the BBCode color value. The provided sources consistently cite the affected product/version and the injection vector, but do not publ...

CVE-2004-2438

Cross-site scripting XSS vulnerability in PHP-Fusion 4.01 allows remote attackers to inject arbitrary web script or HTML via the 1 Submit News, 2 Submit Link or 3 Submit Article field...

Mercury Mail Remote IMAP Stack Buffer Overflow (deprecated)

Binary data 2438.prm...

CVE-2024-2438

CVE-2023-47851 refers to a cross-site scripting (XSS) vulnerability in the Bootstrap Shortcodes Ultimate WordPress plugin. The affected software is the Bootstrap Shortcodes Ultimate plugin for WordPress, reported to be vulnerable in versions up to and including 4.3.1. The issue is described as im...