Design/Logic Flaw

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2013-2617. Reason: This candidate is a duplicate of CVE-2013-2617. Notes: All CVE users should reference CVE-2013-2617 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...

CVE-2013-2617 rubygem-curl: insufficient URL escaping command injection

lib/curl.rb in the Curl Gem for Ruby allows remote attackers to execute arbitrary commands via shell metacharacters in a URL...

Debian: Security Advisory (DSA-2617-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Opera Browser Multiple Vulnerabilities July-11 (Mac OS X)

The host is installed with Opera browser and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gboperamultvulnmacosxjuly11.nasl 5956 2017-04-14 09:02:12Z teissa $ Opera Browser Multiple Vulnerabilities July-11 Mac OS X Authors: Madhuri D Copyright: Copyright c 2012 Greenbone...

Opera Browser Multiple Vulnerabilities (Jul 2011) - Linux

Opera browser is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2011-2617

Technical details for CVE-2011-2617 are not publicly provided in the supplied documents; the materials only reiterate an unspecified denial-of-service vulnerability in Opera before 11.50. Monitor for updates.

PHP Bible Search 'bible.php' SQL Injection and Cross Site Scripting Vulnerabilities

PHP Bible Search is prone to SQL injection and cross site scripting vulnerabilities. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

CVE-2010-2617

Cross-site scripting XSS vulnerability in bible.php in PHP Bible Search allows remote attackers to inject arbitrary web script or HTML via the chapter parameter...

CVE-2010-2617

The CVE-2010-2617 entry concerns PHP Bible Search’s bible.php. The affected component is the bible.php script; the vulnerability is an XSS flaw exploitable via the chapter parameter, enabling remote script/HTML injection. OpenVAS adds a related SQL injection/XSS note for PHP Bible Search, but the...

CVE-2010-2617

creationtimestamp| type| source ---|---|--- 2010-06-29 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/34214...

BaoFeng Storm '.smpl' File Buffer Overflow Vulnerability

BaoFeng Storm is prone to a buffer overflow vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2009-2617

BaoFeng Storm 3.9.62 is affected by a stack-based buffer overflow in medialib.dll that can be triggered by a long pathname in the source attribute of an item element in a .smpl playlist file, allowing remote code execution. The issue is documented under CVE-2009-2617 with a high impact (C:C / I:C...

CVE-2009-2617

creationtimestamp| type| source ---|---|--- 2009-05-28 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/33059...

CVE-2008-2617

Unspecified vulnerability in the PeopleSoft PeopleTools component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.48.17 and 8.49.11 has unknown impact and remote authenticated attack vectors, a different vulnerability than CVE-2008-2615, CVE-2008-2616, CVE-2008-2618, CVE-2008-2620,...

CVE-2008-2617

CVE-2008-2617 affects Oracle PeopleSoft Enterprise PeopleTools components 8.48.17 and 8.49.11. Documented as an HTTP-accessible vulnerability requiring a valid session (authenticated), with partial impact to confidentiality, integrity, and availability. It is listed under the PeopleSoft/JD Edward...

CVE-2007-2617

srsexec in Sun Remote Services SRS Net Connect Software Proxy Core package in Sun Solaris 10 does not enforce file permissions when opening files, which allows local users to read the first line of arbitrary files via the -d and -v options...

CVE-2007-2617

srsexec in Sun Remote Services SRS Net Connect Software Proxy Core package in Sun Solaris 10 does not enforce file permissions when opening files, which allows local users to read the first line of arbitrary files via the -d and -v options...

CVE-2007-2617

Sun Solaris 10 Net Connect Software Proxy Core srsexec has a local-privilege/file-read flaw: it does not enforce file permissions when opening files in debug (-d) and verbose (-v) modes, allowing a local user to read the first line of arbitrary files. Affected component: srsexec under Sun Remote ...

CVE-2007-2617

srsexec in Sun Remote Services SRS Net Connect Software Proxy Core package in Sun Solaris 10 does not enforce file permissions when opening files, which allows local users to read the first line of arbitrary files via the -d and -v options. Recent assessments: h00die at March 25, 2020 12:46am UTC...

CVE-2006-2617

1 AlstraSoft Web Host Directory 1.2, aka 2 HyperStop WebHost Directory 1.2, allows remote attackers to obtain the installation path via an invalid entry in the Username field on the login page, which causes the path to be displayed in an SQL error. NOTE: this issue might be resultant from SQL...