CVE-2014-2708

Multiple SQL injection vulnerabilities in graphxport.php in Cacti 0.8.7g, 0.8.8b, and earlier allow remote attackers to execute arbitrary SQL commands via the 1 graphstart, 2 graphend, 3 graphheight, 4 graphwidth, 5 graphnolegend, 6 printsource, 7 localgraphid, or 8 rraid parameter...

CVE-2014-2708

Cacti 0.8.7g/0.8.8b and earlier are affected by CVE-2014-2708 due to multiple SQL injection flaws in graph_xport.php. The underlying issue is improper handling of input parameters (graph_start, graph_end, graph_height, graph_width, graph_nolegend, print_source, local_graph_id, rra_id), allowing r...

Debian DSA-2708-1 : fail2ban - denial of service

Krzysztof Katowicz-Kowalewski discovered a vulnerability in Fail2ban, a log monitoring and system which can act on attack by preventing hosts to connect to specified services using the local firewall. When using Fail2ban to monitor Apache logs, improper input validation in log parsing could enabl...

Debian: Security Advisory (DSA-2708-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

WordPress Content Slide插件跨站请求伪造漏洞

CVE-2013-2708 Content Slide是WordPress软件基金会的一款插件。可在WordPress网站的任何地方创建完全自定义的jquery Fading图像幻灯片。 WordPress的Content Slide插件中存在跨站请求伪造漏洞。远程攻击者可利用该漏洞在受影响应用程序上下文中执行某些未授权操作，也可能存在其他形式的攻击。Content Slide 1.4.2版本中存在漏洞，其他版本也可能受到影响。 0 WordPress Content Slide 目前厂商已经发布了升级补丁以修复此安全问题，补丁获取链接： http://wordpress.org/...

CVE-2012-2708

CVE-2012-2708 affects the Drupal-hosted Hostmaster (Aegir) module, specifically the 6.x-1.x line, with versions prior to 6.x-1.9. The vulnerability is an XSS in the _hosting_task_log_table function of hosting_task.module that allows remote authenticated users with certain permissions to inject ar...

CVE-2011-2708

...

CVE-2011-2708

This CVE-2011-2708 entry is rejected/not used and should reference CVE-2011-2710.

[security bulletin] HPSBGN02561 SSRT100194 rev.1 - HP ProCurve 2610 Switches running DHCP, Remote Denial of Service (DoS)

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c02436045 Version: 1 HPSBGN02561 SSRT100194 rev.1 - HP ProCurve 2610 Switches running DHCP, Remote Denial of Service DoS NOTICE: The information in this Security Bulletin should be acted upon as...

CVE-2010-2708

CVE-2010-2708 affects HP ProCurve 2610 switches running DHCP prior to R.11.22. The vulnerability allows remote denial of service via unknown vectors; HP’s security bulletin notes only those firmware versions prior to R.11.22 are affected. Remediation: upgrade to R.11.22 or later as provided by HP...

CVE-2008-2708

CVE-2008-2708 affects Sun Solaris 10 and OpenSolaris (pre-sn v_93) on UltraSPARC T2 and UltraSPARC T2+ kernel modules. The vulnerability is an unspecified local issue that can cause a denial of service (panic) via unspecified vectors, likely related to core files. Connected documents confirm the ...

CVE-2004-2708

Gyach Enhanced (Gyach-E) before 1.0.0 stores passwords in plaintext in its configuration file, enabling an attacker with access to the file to obtain user passwords. This vulnerability is associated with CVE-2004-2708 and is corroborated by multiple sources in the connected documents (Red Hat, CV...

Immunity Canvas: NEWS2_INCLUDE

Name| news2include ---|--- CVE| CVE-2007-2708 Exploit Pack| CANVAS Description| Feindt Computerservice News 2.0 Remote file inclusion Notes| CVSS: 7.5 Repeatability: Infinite VENDOR: tools4web.de CVE Url: http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-2708 CVE Name: CVE-2007-2708...

CVE-2006-2708

CVE-2006-2708 affects Secure Elements Class 5 AVR client (C5 EVM) prior to version 2.8.1. Affected component: EM_GET_CE_PARAMETER and EM_SET_CE_PARAMETER message handling. Root cause: remote attackers can alter the size parameter, causing a buffer over-read/read of process memory. Impact (per sou...

RHEL 3 : kernel (RHSA-2006:0140)

Updated kernel packages that fix several security issues in the Red Hat Enterprise Linux 3 kernel are now available. This security advisory has been rated as having important security impact by the Red Hat Security Response Team. The Linux kernel handles the basic functions of the operating syste...

CVE-2005-2708

CVE-2005-2708 details: a flaw in Linux 2.4 kernel on 64‑bit x86 where exec.c’s search_binary_handler fails to check a return code under low virtual memory, enabling local users to trigger a denial of service (panic). Public discussions in Ubuntu/Bash contexts confirm the issue affects 64‑bit x86,...