163 matches found
Cisco Linksys E4200 Cross Site Scripting / Local File Inclusion
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 ============================================= XSS, LFI in Cisco, Linksys E4200 Firmware ============================================= URL: http://www.cloudscan.me/2013/05/xss-lfi-linksys-e4200-firmware-0d.html...
Cisco Linksys E4200 Firmware - XSS/LFI Vulnerabilities
Exploit for hardware platform in category web applications ============================================= XSS, LFI in Cisco, Linksys E4200 Firmware ============================================= URL: http://www.cloudscan.me/2013/05/xss-lfi-linksys-e4200-firmware-0d.html...
Cisco Linksys E4200 - Multiple Vulnerabilities
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 ============================================= XSS, LFI in Cisco, Linksys E4200 Firmware ============================================= URL: http://www.cloudscan.me/2013/05/xss-lfi-linksys-e4200-firmware-0d.html...
CVE-2013-2678
creationtimestamp| type| source ---|---|--- 2013-02-11 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/24475 2020-10-09 16:57:30+00:00| seen| MISP/f181b6b6-93eb-43e6-8222-d4e22cda192c 2025-09-04 00:00:00+00:00| seen| The Shadowserver honeypot/common-vulnerabilities - 2025-09-04...
CentOS Update for 389-ds-base CESA-2012:0997 centos6
The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...
CVE-2012-2678
389 Directory Server before 1.2.11.6 aka Red Hat Directory Server before 8.2.10-3, after the password for a LDAP user has been changed and before the server has been reset, allows remote attackers to read the plaintext password via the unhasheduserpassword attribute...
CVE-2012-2678
CVE-2012-2678 affects 389-ds-base (also Red Hat Directory Server) before version 1.2.11.6. Per the description, after an LDAP user’s password is changed and before the server is reset, an attacker could remotely read the plaintext password via the unhashed#user#password attribute. This vulnerabil...
Moderate: Red Hat Security Advisory: redhat-ds-base security update
Updated redhat-ds-base packages that fix two security issues are now available for Red Hat Directory Server 8. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, a...
RedHat Update for 389-ds-base RHSA-2012:0997-01
Check for the Version of 389-ds-base OpenVAS Vulnerability Test RedHat Update for 389-ds-base RHSA-2012:0997-01 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it und...
RHEL 6 : 389-ds-base (RHSA-2012:0997)
The remote Redhat Enterprise Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2012:0997 advisory. - rhds/389: plaintext password disclosure flaw CVE-2012-2678 - rhds/389: plaintext password disclosure in audit log CVE-2012-2746 Note that...
CVE-2011-2678
The Cisco VPN Client 5.0.7.0240 and 5.0.7.0290 on 64-bit Windows platforms uses weak permissions NT AUTHORITY\INTERACTIVE:F for cvpnd.exe, which allows local users to gain privileges by replacing this executable file with an arbitrary program, aka Bug ID CSCtn50645. NOTE: this vulnerability exist...
CVE-2011-2678
The CVE-2011-2678 entry maps to Cisco VPN Client on 64-bit Windows, specifically versions 5.0.7.0240 and 5.0.7.0290. The root cause is insecure/weak permissions on cvpnd.exe (NT AUTHORITY\INTERACTIVE:F), which permits a local attacker to replace the executable with arbitrary code, enabling privil...
CVE-2011-2678
The Cisco VPN Client 5.0.7.0240 and 5.0.7.0290 on 64-bit Windows platforms uses weak permissions NT AUTHORITY\INTERACTIVE:F for cvpnd.exe, which allows local users to gain privileges by replacing this executable file with an arbitrary program, aka Bug ID CSCtn50645. NOTE: this vulnerability exist...
CVE-2010-2678
The CVE-2010-2678 entry concerns the Joomla! extension com_xmap (XMap). The vulnerability arises from improper handling of the Itemid parameter in index.php, enabling SQL injection and allowing remote attackers to execute arbitrary SQL commands. Related materials reference Joomla! XMap versions a...
Microsoft IIS ASP Scripts Source Code Disclosure (CVE-2005-2678)
The Internet Information Server IIS is a Web server packaged with several versions of the Windows operating system. The server is capable of serving static, as well as dynamic content. The server is equipped with the Active Server Pages ASP technology which is utilized for dynamic content...
CVE-2009-2678
Technical details are not publicly available in the provided documents. Monitor for updates; the CVE entry shows generic information without specific affected components, versions, or remediation details.
CVE-2008-2678
creationtimestamp| type| source ---|---|--- 2008-06-09 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/5764...
CVE-2007-2678
Affects Netsprint Toolbar 1.1; vulnerable component is toolbar.dll, function isChecked. Description states a buffer overflow that could allow remote code execution via unspecified vectors. No explicit remediation or affected versions beyond 1.1 are provided in the documents. If exploiting details...
CVE-2004-2678
Technical details about CVE-2004-2678 are not publicly available in the provided documents. No explicit affected products, versions, or impact are documented here. Monitor for updates from official sources.
Sql injection
SQL injection vulnerability in Pre News Manager 1.0 allows remote attackers to execute arbitrary SQL commands via the 1 id parameter to a index.php, and the 2 nid parameter to b newsdetail.php, c emailstory.php, d thankyou.php, e printableview.php, f tellafriend.php, and g sendcomments.php. NOTE:...