CVE-2014-2558

The CVE-2014-2558 entry concerns the WordPress File Gallery plugin (versions before 1.7.9.2). The vulnerability stems from improper escaping in the Settings Page that allows a remote attacker to trigger arbitrary PHP code execution via a backslash-quote in fields referencing /wp-admin/options-med...

Microsoft Windows 8未明拒绝服务漏洞(CVE-2013-2558)

CVE-2013-2558 Microsoft Windows 8是一款流行的操作系统。 Microsoft Windows 8在存在一个安全漏洞，允许攻击者构建恶意的TTF文件，诱使用户解析，可使系统崩溃。 0 Microsoft Windows 8 厂商解决方案 目前没有详细解决方案提供： http://www.microsoft.com...

CVE-2013-2558

Technical details about CVE-2013-2558 are not publicly provided in the supplied documents; no concrete affected products/versions/fixes are specified here. Monitor for updates.

Debian Security Advisory DSA 2558-1 (bacula)

The remote host is missing an update to bacula announced via advisory DSA 2558-1. OpenVAS Vulnerability Test $Id: deb25581.nasl 6612 2017-07-07 12:08:03Z cfischer $ Description: Auto-generated from advisory DSA 2558-1 bacula Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc...

Debian DSA-2558-1 : bacula - information disclosure

It was discovered that bacula, a network backup service, does not properly enforce console ACLs. This could allow information about resources to be dumped by an otherwise-restricted client. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin...

CVE-2010-2558

CVE-2010-2558 corresponds to a remote-code-execution vulnerability in Microsoft Internet Explorer (IE 6, 7, and 8) caused by a race condition that may corrupt memory when handling an in-memory object. Attackers can lure a user to view a specially crafted page, triggering arbitrary code execution ...

VUPEN Security Research - Microsoft Internet Explorer "CIframeElement" Object Use-after-free Vulnerability (CVE-2010-2558)

VUPEN Security Research - Microsoft Internet Explorer "CIframeElement" Object Use-after-free Vulnerability CVE-2010-2558 http://www.vupen.com/english/research.php I. BACKGROUND --------------------- "Microsoft Internet Explorer is a web browser developed by Microsoft and included as part of the...

MySQL CREATE FUNCTION init_syms Buffer Overflow (CVE-2005-2558)

MySQL is an open-source implementation of a relational database management system. MySQL supports the SQL Structured Query Language database query language. To extend the functionality of SQL, MySQL provides a mechanism to call C/C++ functions in external binary libraries. This mechanism is known...

SLES9: Security update for MySQL

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: mysql-devel mysql mysql-Max For more information, please visit the referenced security advisories. More details may also be found by searching for keyword...

CVE-2009-2558

system/message.php in Admin News Tools 2.5 does not properly restrict access, which allows remote attackers to post news messages via a direct request...

CVE-2009-2558

system/message.php in Admin News Tools 2.5 does not properly restrict access, which allows remote attackers to post news messages via a direct request...

CVE-2009-2558

CVE-2009-2558 affects Admin News Tools 2.5. The vulnerability is a failure to properly restrict access in system/message.php, enabling remote attackers to post news messages via a direct request. NVD lists a CVSSv2 base score of 7.5 (High) with NETWORK attack vector, LOW attack complexity, and pa...

CVE-2009-2558

creationtimestamp| type| source ---|---|--- 2009-07-15 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/9161...

CVE-2008-2558

CRE Loaded 6.2.13.1 and earlier does not set the "Secure" attribute for cookies that are sent over HTTPS, which might allow remote attackers to sniff the cookies if they are sent over HTTP...

CVE-2008-2558

CVE-2008-2558 affects CRE Loaded 6.2.13.1 and earlier. The issue is that cookies sent over HTTPS do not set the Secure attribute, potentially allowing cookie sniffing if transmitted over HTTP. Affected software: CRE Loaded 6.2.13.1 and earlier. Underlying cause: lack of Secure flag on HTTPS cooki...

CVE-2008-2558

CRE Loaded 6.2.13.1 and earlier does not set the "Secure" attribute for cookies that are sent over HTTPS, which might allow remote attackers to sniff the cookies if they are sent over HTTP...

CVE-2007-2558

CVE-2007-2558 concerns a PHP remote file inclusion in the web app pfa CMS (phpFullAnnu CMS) version 6.0, specifically in index.php via the repinc parameter. The vulnerability is described as enabling remote PHP code execution through a URL if repinc is used to include code. However, the CVE notes...

CVE-2006-2558

Cross-site scripting XSS vulnerability in IpLogger 1.7 and earlier allows remote attackers to inject arbitrary HTML or web script via the User-Agent useragent header in an HTTP request, which is not filtered when the log files are viewed...

CVE-2006-2558

Cross-site scripting XSS vulnerability in IpLogger 1.7 and earlier allows remote attackers to inject arbitrary HTML or web script via the User-Agent useragent header in an HTTP request, which is not filtered when the log files are viewed...

CVE-2006-2558

IpLogger vulnerable to cross-site scripting (XSS) in versions 1.7 and earlier. The issue arises from unfiltered User-Agent header content being written to log files and later rendered/viewed, enabling arbitrary HTML/script injection. Documented impact aligns with partial confidentiality and integ...