72 matches found
CVE-2012-2592
CVE-2012-2592 affects Axigen Mail Server 8.0.1 and is a Cross-site Scripting (XSS) vulnerability where an attacker can inject arbitrary web script or HTML via the body of an email. Connected sources confirm the affected product and vulnerability class, but do not provide a patch version or remedi...
Secunia Research: Citrix Access Gateway Plug-in for Windows nsepacom ActiveX Control Buffer Overflow
====================================================================== Secunia Research 01/08/2012 - Citrix Access Gateway Plug-in for Windows - - "nsepacom" ActiveX Buffer Overflow Vulnerability - ====================================================================== Table of Contents Affected...
CVE-2012-2592
creationtimestamp| type| source ---|---|--- 2012-08-08 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/20348...
CVE-2009-2592
SQL injection vulnerability in guestbook.php in PHPJunkYard GBook 1.6 allows remote attackers to execute arbitrary SQL commands via the mesid parameter...
CVE-2009-2592
The CVE-2009-2592 entry affects PHPJunkYard GBook 1.6, where a flaw in guestbook.php enables SQL injection via the mes_id parameter. This allows remote attackers to potentially run arbitrary SQL commands against the application's database. The vulnerability is described in publicly available sour...
CVE-2008-2592
CVE-2008-2592 affects Oracle Database Advanced Replication (SYS.DBMS_DEFER_SYS.DELETE_TRAN) across 9.0.1.5 FIPS+, 9.2.0.8, 9.2.0.8DV, 10.1.0.5, 10.2.0.4, 11.1.0.6. The issue is a SQL injection claim targeting DELETE_TRAN; Oracle CPU July 2008 provides the patch. Exploitation is described as remot...
CVE-2007-2592
CVE-2007-2592 describes multiple cross-site scripting (XSS) vulnerabilities in Nokia Intellisync Mobile Suite, potentially involving Novell GroupWise Mobile Server and Nokia Intellisync Wireless Email Express. The affected software versions are 6.4.31.2, 6.6.0.107, and 6.6.2.2. The flaws allow re...
CVE-2006-2604
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2006-2592. Reason: This candidate is a duplicate of CVE-2006-2592. Notes: All CVE users should reference CVE-2006-2592 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...
CVE-2006-2604
This CVE-2006-2604 entry is rejected and not used; refer to CVE-2006-2592 instead.
CVE-2006-2592
The CVE-2006-2592 entry concerns DSChat 1.0, where a vulnerability in the Nickname field allows remote attackers to execute arbitrary PHP code because the field is not sanitized before creating a file in a user directory. The public record includes a CVSS v2 base score of 7.5 (HIGH) with Network ...
CVE-2004-2592
The CVE-2004-2592 issue affects the Quake II server before R1Q2, used in multiple products. It allows a remote attacker to trigger a denial of service (server/application crash) by a modified client that requests data stored at a negative array offset during processing of Configstrings and Baseli...