Debian: Security Advisory (DSA-2638-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2012-2638

Cross-site scripting XSS vulnerability in SmallPICT.cgi in SmallPICT before 2.7 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2012-2638

The CVE-2012-2638 issue affects SmallPICT, impacting SmallPICT.cgi in SmallPICT versions prior to 2.7. It is a cross-site scripting (XSS) vulnerability that could allow a remote attacker to inject arbitrary web script or HTML, potentially leading to arbitrary script execution in a user’s browser....

CVE-2011-2042

The Sybase SQL Anywhere database component in Cisco CiscoWorks Common Services 3.x and 4.x before 4.1 allows remote attackers to obtain potentially sensitive information about the engine name and database port via an unspecified request to UDP port 2638, aka Bug ID CSCsk35018...

Design/Logic Flaw

The Sybase SQL Anywhere database component in Cisco CiscoWorks Common Services 3.x and 4.x before 4.1 allows remote attackers to obtain potentially sensitive information about the engine name and database port via an unspecified request to UDP port 2638, aka Bug ID CSCsk35018...

CVE-2011-2042

The Sybase SQL Anywhere database component in Cisco CiscoWorks Common Services 3.x and 4.x before 4.1 allows remote attackers to obtain potentially sensitive information about the engine name and database port via an unspecified request to UDP port 2638, aka Bug ID CSCsk35018...

CVE-2011-2638

CVE-2011-2638 affects Opera browser prior to 11.10. The vulnerability allows remote attackers to trigger an application crash (DoS) via unspecified content on a web page (e.g., games on zylom.com). Public references in Red Hat, SUSE, Gentoo GLSA, and OpenVAS entries confirm the same description. ...

CVE-2010-2638

IBM WebSphere MQ 7.0 up to 7.0.1.5 is affected by a vulnerability that lets remote authenticated users cause a denial-of-service (disk consumption) by triggering an FDC with RM680004 Probe Id. No exploit details are provided in the sources; CVSS info indicates a low–medium impact (base score 4.0)...

CVE-2009-2638

SQL injection vulnerability in the AkoBook comakobook component 2.3 for Joomla! allows remote attackers to execute arbitrary SQL commands via the gbid parameter in a reply action to index.php...

CVE-2009-2638

CVE-2009-2638 describes an SQL injection vulnerability in the AkoBook (com_akobook) Joomla! component version 2.3. The underlying flaw is exploitable via the gbid parameter in a reply action to index.php, allowing remote attackers to inject arbitrary SQL commands. The NVD entry confirms a high se...

CVE-2009-2638

creationtimestamp| type| source ---|---|--- 2009-06-09 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/8911...

CVE-2008-2638

CVE-2008-2638 affects 1Book 1.0.1 and earlier . The vulnerability is in guestbook.php : remote attackers can upload arbitrary PHP code via the message parameter of an HTML web form, which is written to data.php . The CVSS vector (as per NVD) indicates _network-based, low complexity, no auth with ...

EMC NetWorker管理控制台远程绕过认证漏洞

EMC NetWorker之前被称为Legato NetWorker，是一款跨平台的备份和恢复系统。 EMC NetWorker的管理控制台在连接到NetWorker备份服务器时使用了弱加密机制。如果远程攻击者了解这种认证机制的话，就可以通过中间人攻击扮演成为NetWorker管理控制台系统，以root用户权限连接到受影响的服务器。 EMC Networker 7.3.2 临时解决方法： 阻断对2638/tcp和2638/udp端口的访问。 厂商补丁： EMC --- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...

CVE-2006-2638

SQL injection vulnerability in member.asp in qjForum allows remote attackers to execute arbitrary SQL commands via the uName parameter...

CVE-2004-2638

The CVE-2004-2638 vulnerability affects osCommerce 1.5.1 via the Admin Access With Levels plugin. The issue allows remote attackers to access files in the admin/ directory by setting in_login to a non-zero value, enabling partial confidentiality and integrity impact. No exploitation details or sp...

CVE-2005-2638

CVE-2005-2638 concerns multiple cross-site scripting (XSS) vulnerabilities in PHPFreeNews 1.40 and earlier. The issues allow remote attackers to inject arbitrary web script or HTML via (1) the NewsMode parameter to NewsCategoryForm.php, or (2) the Match or (3) NewsMode parameter to SearchResults....