CVE-2009-2641

creationtimestamp| type| source ---|---|--- 2009-06-10 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/8924...

Fedora Update for libsilc FEDORA-2008-2641

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Sql injection

SQL injection vulnerability in forum.asp in W1L3D4 Philboard 1.14 and 1.2 allows remote attackers to execute arbitrary SQL commands via the forumid parameter. NOTE: this might overlap CVE-2008-2334, CVE-2008-1939, CVE-2007-2641, or CVE-2007-0920...

CVE-2008-5192

SQL injection vulnerability in forum.asp in W1L3D4 Philboard 1.14 and 1.2 allows remote attackers to execute arbitrary SQL commands via the forumid parameter. NOTE: this might overlap CVE-2008-2334, CVE-2008-1939, CVE-2007-2641, or CVE-2007-0920...

CVE-2008-5192

CVE-2008-5192 concerns a SQL injection vulnerability in forum.asp of W1L3D4 Philboard versions 1.14 and 1.2, exploitable via the forumid parameter. The root cause is an unsafely handled input for forumid that allows arbitrary SQL execution by an attacker. Connected records corroborate the vulnera...

Gentoo Security Advisory GLSA 200808-10 (acroread)

The remote host is missing updates announced in advisory GLSA 200808-10. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

FreeBSD Ports: pam_ldap

The remote host is missing an update to the system as announced in the referenced advisory. VID 38c76fcf-1744-11da-978e-0001020eed82 OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

FreeBSD Ports: pam_ldap

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

openSUSE 10 Security Update : acroread (acroread-5467)

This update of acroread fixes an unknown error in a JavaScript method that can lead to remote code execution. CVE-2008-2641 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update acroread-5467. The...

Critical: Red Hat Security Advisory: acroread security update

Updated acroread packages that fix various security issues are now available for Red Hat Enterprise Linux 3 Extras, 4 Extras, and 5 Supplementary. This update has been rated as having critical security impact by the Red Hat Security Response Team. Adobe Acrobat Reader allows users to view and pri...

CVE-2008-2641

CVE-2008-2641 is an Adobe Reader/Acrobat vulnerability affecting multiple versions (PDF viewer on Windows and Linux) where an input validation flaw in a JavaScript method can cause a remote crash or allow arbitrary code execution. Connected advisories confirm the root cause is an input validation...

Sql injection

Multiple SQL injection vulnerabilities in W1L3D4 Philboard 1.0 allow remote attackers to execute arbitrary SQL commands via the 1 id and 2 topic parameters to a philboardreply.asp, and the 3 forumid parameter to b philboardnewtopic.asp, different vectors than CVE-2007-2641 and CVE-2007-0920...

Debian Security Advisory DSA 785-1 (libpam-ldap)

The remote host is missing an update to libpam-ldap announced via advisory DSA 785-1. It has been discovered that libpam-ldap, the Pluggable Authentication Module allowing LDAP interfaces, ignores the result of an attempt to authenticate against an LDAP server that does not set an optional data...

CVE-2007-2641

CVE-2007-2641: SQL injection in W1L3D4 Philboard 0.2 via the forumid parameter of W1L3D4_bolum.asp (and related forum pages) allows remote attackers to execute arbitrary SQL commands. The vulnerability affects the PHP/ASP-based W1L3D4 Philboard variants referenced in the record, with the vector d...

CentOS 4 : openldap / nss_ldap (CESA-2005:767)

Updated openldap and nssldap packages that correct a potential password disclosure issue and possible authentication vulnerability are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. OpenLDAP is an open source suite of LDAP...

CVE-2006-2641

UNVERIFIABLE NOTE: this issue does not contain any verifiable or actionable details. Cross-site scripting XSS vulnerability in John Frank Asset Manager AssetMan 2.4a and earlier allows remote attackers to inject arbitrary web script or HTML via "any of its input." NOTE: the original disclosure is...

CVE-2006-2641

Technical details for CVE-2006-2641 are not publicly available in the provided documents; no affected product, component, or exploit information is specified. Monitor for updates.

CVE-2004-2641

CVE-2004-2641 describes an unspecified vulnerability affecting Sun Fire 3800/4800/4810/6800, Sun Fire V1280, and Netra 1280. The issue allows remote attackers to cause a denial of service (system controller hang) by sending IP packets with the Type of Service (TOS) bits set. Documents consistentl...

Mandrake Linux Security Advisory : nss_ldap (MDKSA-2005:190)

A bug was found in the way the pamldap module processed certain failure messages. If the server includes supplemental data in an authentication failure result message, but the data does not include any specific error code, the pamldap module would proceed as if the authentication request had...

[SECURITY] [DSA 785-1] New libpam-ldap packages fix authentication bypass

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- Debian Security Advisory DSA 785-1 [email protected] http://www.debian.org/security/ Martin Schulze August 25th, 2005 http://www.debian.org/security/faq -...