61 matches found
CVE-2009-2701
The CVE-2009-2701 issue affects Zope Object Database (ZODB) with ZEO storage-server sharing and blob support enabled, specifically ZODB versions prior to 3.8.3 (3.8.x) and prior to 3.9.0c2 (3.9.x). The vulnerability allows remote authenticated users to read or delete arbitrary files via unknown v...
CVE-2008-2701
SQL injection vulnerability in the GameQ comgameq component 4.0 and earlier for Joomla! allows remote attackers to execute arbitrary SQL commands via the categoryid parameter in a page action to index.php...
CVE-2008-2701
CVE-2008-2701 corresponds to a SQL injection in the GameQ (com_gameq) component for Joomla! up to version 4.0 and earlier. The vulnerability arises from improper handling of the category_id parameter in a page action to index.php, enabling remote attackers to inject and execute arbitrary SQL comm...
CVE-2008-2701
SQL injection vulnerability in the GameQ comgameq component 4.0 and earlier for Joomla! allows remote attackers to execute arbitrary SQL commands via the categoryid parameter in a page action to index.php...
CVE-2008-2701
creationtimestamp| type| source ---|---|--- 2008-06-07 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/5752...
Debian Security Advisory DSA 868-1 (mozilla-thunderbird)
The remote host is missing an update to mozilla-thunderbird announced via advisory DSA 868-1. Several security-related problems have been discovered in Mozilla and derived programs. Some of the problems don't exactly apply to Mozilla Thunderbird, even though the code is present. In order to keep...
Debian Security Advisory DSA 866-1 (mozilla)
The remote host is missing an update to mozilla announced via advisory DSA 866-1. Several security-related problems have been discovered in Mozilla and derived programs. For details, please visit the referenced security advisories. OpenVAS Vulnerability Test $Id: deb8661.nasl 6616 2017-07-07...
Debian: Security Advisory (DSA-868-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Debian Security Advisory DSA 866-1 (mozilla)
The remote host is missing an update to mozilla announced via advisory DSA 866-1. Several security-related problems have been discovered in Mozilla and derived programs. For details, please visit the referenced security advisories. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions...
CVE-2004-2701
CVE-2004-2701 is a cross-site scripting (XSS) vulnerability in AspDotNetStorefront 3.3, specifically in signin.aspx where an attacker can inject arbitrary web script or HTML via the returnurl parameter. Affected component is the signin.aspx handling of returnurl; root cause is improper handling o...
CVE-2007-2701
Technical details about CVE-2007-2701 are not publicly provided in the supplied documents. No concrete affected products, versions, or remediations are confirmed here. Monitor for updates as new information may emerge.
CentOS 4 : firefox (CESA-2005:785)
An updated firefox package that fixes several security bugs is now available for Red Hat Enterprise Linux 4. This update has been rated as having critical security impact by the Red Hat Security Response Team. Mozilla Firefox is an open source Web browser. A bug was found in the way Firefox...
CentOS 3 / 4 : Mozilla (CESA-2005:789)
Updated mozilla packages that fix several security bugs are now available. This update has been rated as having critical security impact by the Red Hat Security Response Team. Mozilla is an open source Web browser, advanced email and newsgroup client, IRC chat client, and HTML editor. A bug was...
CVE-2006-2701
SQL injection vulnerability in Geeklog 1.4.0sr2 and earlier allows remote attackers to execute arbitrary SQL commands via unknown vectors related to story submission...
CVE-2006-2701
The CVE-2006-2701 issue affects Geeklog ≤ 1.4.0sr2, and is a SQL injection vulnerability in the story submission path that could allow remote attackers to execute arbitrary SQL commands. The connected documents confirm affected software and the underlying vulnerability type but do not provide con...
MDKSA-2005:169 : mozilla-firefox
A number of vulnerabilities have been discovered in Mozilla Firefox that have been corrected in version 1.0.7: A bug in the way Firefox processes XBM images could be used to execute arbitrary code via a specially crafted XBM image file CVE-2005-2701. A bug in the way Firefox handles certain Unico...
GLSA-200509-11 : Mozilla Suite, Mozilla Firefox: Multiple vulnerabilities
The remote host is affected by the vulnerability described in GLSA-200509-11 Mozilla Suite, Mozilla Firefox: Multiple vulnerabilities The Mozilla Suite and Firefox are both vulnerable to the following issues: Tom Ferris reported a heap overflow in IDN-enabled browsers with malicious Host: headers...
RHEL 4 : firefox (RHSA-2005:785)
The remote Redhat Enterprise Linux 4 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2005:785 advisory. Mozilla Firefox is an open source Web browser. A bug was found in the way Firefox processes XBM image files. If a user views a specially...
[SECURITY] [DSA 838-1] New mozilla-firefox packages fox multiple vulnerabilities
-------------------------------------------------------------------------- Debian Security Advisory DSA 838-1 [email protected] http://www.debian.org/security/ Michael Stone October 2nd, 2005 http://www.debian.org/security/faq -...
CVE-2005-2701
Heap-based buffer overflow in Firefox before 1.0.7 and Mozilla Suite before 1.7.12 allows remote attackers to execute arbitrary code via an XBM image file that ends in a large number of spaces instead of the expected end tag...