113 matches found
USN-889-1: gzip vulnerabilities
It was discovered that gzip incorrectly handled certain malformed compressed files. If a user or automated system were tricked into opening a specially crafted gzip file, an attacker could cause gzip to crash or possibly execute arbitrary code with the privileges of the user invoking the program...
CVE-2008-2624
CVE-2008-2624 affects the Oracle OLAP component of Oracle Database 10.1.0.5. The vulnerability is described as an unspecified issue that could allow remote authenticated users to compromise confidentiality, integrity, and availability via unknown vectors. Connected sources indicate this CVE was a...
CVE-2007-2624
The CVE-2007-2624 entry concerns All In One Control Panel (AIOCP) before 1.3.016, where a dynamic variable evaluation vulnerability in shared/config/cp_config.php enables remote XSS via the SERVER superglobal array. The issue stems from processing user-supplied data in SERVER-related variables, a...
CVE-2006-3907
Siemens SpeedStream 2624 allows remote attackers to cause a denial of service device hang by sending a crafted packet to the web administrative interface...
CVE-2006-3907
Siemens SpeedStream 2624 allows remote attackers to cause a denial of service device hang by sending a crafted packet to the web administrative interface...
CVE-2006-3907
CVE-2006-3907 affects Siemens SpeedStream 2624. A remote attacker can cause a DoS by sending a crafted packet to the device’s web administration interface, resulting in a device hang. The NVD lists a base score of 5.0 (Medium) with network attack vector and no authentication required. Public deta...
PT-2006-4753 · Siemens · Speedstream 2624
Name of the Vulnerable Software and Affected Versions: Siemens SpeedStream 2624 affected versions not specified Description: The issue allows remote attackers to cause a denial of service, resulting in the device hanging, by sending a crafted packet to the web administrative interface...
CVE-2006-3344
Siemens Speedstream Wireless Router 2624 is affected by CVE-2006-3344 via the UPnP/1.0 component, allowing local users to bypass authentication and access protected files. The issue is tied to UPnP/1.0 usage in the router, with impact described as partial on confidentiality, integrity, and availa...
PT-2006-4236 · None +1 · Upnp +1
Name of the Vulnerable Software and Affected Versions: Siemens Speedstream Wireless Router version 2624 Description: The issue allows local users to bypass authentication and access protected files by utilizing the Universal Plug and Play UPnP/1.0 component. Recommendations: For Siemens Speedstre...
CVE-2004-2624
Cross-site scripting XSS vulnerability in "TextSearch" in WackoWiki 3.5 allows remote attackers to inject arbitrary web script or HTML via the "phrase" parameter...
CVE-2004-2624
CVE-2004-2624: WackoWiki 3.5 contains a cross-site scripting (XSS) flaw in the TextSearch feature. The vulnerability enables injection of arbitrary script/HTML via the phrase parameter, allowing remote attackers to execute client-side code in affected pages. Documents consistently identify WackoW...
CVE-2005-2624
CVE-2005-2624 affects CPAINT 1.3-SP. The vulnerability occurs when user-supplied cpaint_argument[] is fed directly into an eval statement in calculator.asp and cpaintfile.asp, allowing remote attackers to execute arbitrary ASP code. The root cause is eval-injection via unsanitized input. The publ...