CVE-2010-2522

CVE-2010-2522 concerns the mipv6d/UMIP 0.4 stack where the mipv6 daemon does not verify that netlink messages originate from the kernel, enabling local users to spoof netlink socket communication by sending a crafted unicast message. This vulnerability is documented across multiple advisories (op...

CVE-2008-3556

Multiple SQL injection vulnerabilities in index.php in Battle.net Clan Script 1.5.2 allow remote attackers to execute arbitrary SQL commands via the 1 showmember parameter in a members action and the 2 thread parameter in a board action. NOTE: vector 1 might be the same as CVE-2008-2522...

CVE-2008-2522

The CVE-2008-2522 entry concerns SQL injection in members.php of Battle.net Clan Script for PHP 1.5.3 and earlier. When magic_quotes_gpc is disabled, remote attackers can inject SQL through the showmember parameter in a members action. The NVD note specifies a CVSS v2 base score of 6.8 (Network a...

CVE-2007-2522

Summary (CVE-2007-2522): A stack-based buffer overflow in the CA Console Server component (InoWeb.exe) of multiple CA products (CA Anti-Virus for the Enterprise, CA Threat Manager, CA Anti-Spyware for the Enterprise, CA Protection Suites) allows remote attackers to execute arbitrary code by sendi...

CVE-2007-2522

Stack-based buffer overflow in the inoweb Console Server in CA Anti-Virus for the Enterprise r8, Threat Manager r8, Anti-Spyware for the Enterprise r8, and Protection Suites r3 allows remote attackers to execute arbitrary code via a long 1 username or 2 password...

Computer Associates eTrust AntiVirus Server buffer overflow

Overview Computer Associates eTrust AntiVirus Server contains a buffer overflow vulnerability. This vulnerability may allow an attacker to execute arbitrary code, or create a denial of service condition. Description Computer Associates eTrust AntiVirus Server is an antivirus product distributed b...

CVE-2006-2522

CVE-2006-2522 affects Dayfox Blog 2.0 and earlier. The credential store is kept in edit/slog_users.txt at the web document root with insufficient access control, enabling remote attackers to gain privileges. The connected sources confirm this direct exposure of user credentials and the resulting ...

CVE-2004-2522

CVE-2004-2522 describes a cross-site scripting (XSS) vulnerability in the Gattaca Server 2003, version 1.1.10.0, within the web.tmpl component. The issue allows remote attackers to inject arbitrary web script or HTML by supplying manipulated values to either the template or language parameters. T...

CVE-2005-2522

The CVE-2005-2522 issue affects Apple Mac OS X Safari/WebKit prior to Security Update 2005-007. Description from multiple sources confirms that Safari could directly access URLs inside PDF files, bypassing normal security checks, which may allow remote command execution. Affected range includes M...