94 matches found
CVE-2011-2468
CVE-2011-2468 describes a directory traversal vulnerability in the web interface of AnyMacro Mail System G4X. The issue allows remote attackers to read arbitrary files via directory traversal sequences in a request. Information across connected sources confirms the affected product and the vulner...
CVE-2010-2468
CVE-2010-2468 affects S2 Security NetBox 2.x and 3.x as used in Linear eMerge 50/5000 and Sonitrol eAccess. The root cause is the use of a weak hash algorithm for storing the Administrator password, which can allow context-dependent attackers to recover the password and gain privileged access. Th...
Mac OS X Multiple Vulnerabilities (Security Update 2009-005)
The remote host is running a version of Mac OS X 10.5 or 10.4 that does not have Security Update 2009-005 applied. This security update contains fixes for the following products : - Alias Manager - CarbonCore - ClamAV - ColorSync - CoreGraphics - CUPS - Flash Player plug-in - ImageIO - Launch...
Safari < 4.0.3 Multiple Vulnerabilities
Binary data 801007.prm...
Safari < 4.0.3 Multiple Vulnerabilities
The version of Safari installed on the remote Windows host is earlier than 4.0.3. Such versions are potentially affected by several issues : - A buffer overflow exists in the handling of EXIF metadata that ccould lead to a crash or arbitrary code execution. CVE-2009-2188 - A vulnerability in...
Mozilla Firefox MFSA存在多个安全漏洞
Bugraq ID: 35758 CVE ID：CVE-2009-1194 CVE-2009-2462 CVE-2009-2463 CVE-2009-2464 CVE-2009-2465 CVE-2009-2466 CVE-2009-2467 CVE-2009-2468 CVE-2009-2469 CVE-2009-2471 CVE-2009-2472 CNCVE ID：CNCVE-20091194 CNCVE-20092462 CNCVE-20092463 CNCVE-20092464 CNCVE-20092465 CNCVE-20092466 CNCVE-20092467...
CVE-2009-2468
CVE-2009-2468 text describes an integer overflow in Apple CoreGraphics used by Safari/Firefox/macOS, allowing DoS or possible code execution via a long text run during font glyph rendering, related to CVE-2009-1194. Connected documents primarily provide details on CVE-2009-1194 affecting Pango: i...
CVE-2008-2468
CVE-2008-2468 affects LANDesk Management Suite through the QIP Server Service (qipsrvr.exe). A heap/stack buffer overflow in processing specially crafted heal requests (via MultiByteToWideChar) targets the StringToMap and StringSize arguments, allowing remote code execution with SYSTEM privileges...
Landesk QIP Server服务Heal报文缓冲区溢出溢出漏洞
CVECAN ID: CVE-2008-2468 Landesk管理套件是一款网络管理系统，可控制桌面，服务器和移动设备等。 Landesk的QIP Server服务（qipsrvr.exe）默认 监听于TCP 12175端口。进程使用从报文数据所获得的值以有漏洞的方式调用MultiByteToWideChar，恶意的heal请求可能允许攻击者控制到StringToMap和StringSize参数的指针。目标缓冲区可能分配在栈上或堆上，而这两种情况都可能被溢出，导致以SYSTEM用户的权限执行任意指令。 LANDesk Software Landesk Management Suite...
CVE-2007-2468
HP OpenVMS for Integrity Servers versions 8.2-1 and 8.3 are affected by an unspecified local vulnerability that allows a non-privileged user to cause a denial of service (crash) via Program actions relating to exceptions. The description does not provide details on root cause, vulnerable componen...
CVE-2005-2468
The CVE-2005-2468 entry describes multiple SQL injection vulnerabilities in MySQL Eventum 1.5.5 and earlier that allow remote attackers to execute arbitrary SQL commands. Affected functions include isCorrectPassword and userExist in class.auth.php, getCustomFieldReport in custom_fields.php, (5) c...
CVE-2006-2468
Vulnerability details for CVE-2006-2468 show that BEA WebLogic Server Administration Console exposes the domain name in the login form for BEA WebLogic Server 8.1 up to SP4 and 7.0 up to SP6. The underlying issue is information disclosure in the Console login interface, which can allow remote att...
CVE-2004-2468
SillySearch 2.3 and earlier are affected by a cross-site scripting (XSS) vulnerability that allows remote attackers to inject arbitrary web script or HTML via the search parameter. The entry states the vulnerability type and affected version(s) but does not specify root cause details beyond the p...
