87 matches found
CVE-2004-2741
The CVE covers a Cross-site scripting (XSS) vulnerability in Horde Application Framework 2.2.6, specifically in the Help Window (help.php) of the Horde Help subsystem. The issue arises from improper sanitization of three parameters (module, topic, and module) that can be exploited remotely to inj...
CVE-2007-2741
CVE-2007-2741 attests a stack-based buffer overflow in Little CMS (lcms) prior to 1.15. A crafted ICC profile embedded in a JPG can trigger remote code execution or cause an application crash/DoS. Affected software is Little CMS; root cause is a overflow in handling ICC profiles in JPEG input. Th...
CVE-2006-2741
CVE-2006-2741 concerns an XSS vulnerability in Epicdesigns tinyBB 0.3. The description specifies that remote attackers can inject arbitrary script or HTML via the q parameter in forgot.php, which is echoed in an error message, and notes other unspecified vectors. The affected software is tinyBB 0...
CVE-2005-2741
CVE-2005-2741 affects Apple Mac OS X 10.3.9 where Authorization Services in securityd can be abused by local users to grant themselves administrator-restricted rights, enabling local privilege escalation. Documents confirm the vulnerable component as securityd’s Authorization Services, on Mac OS ...
Mac OS X Multiple Vulnerabilities (Security Update 2005-008)
The remote host is running Apple Mac OS X, but lacks Security Update 2005-008. This security update contains fixes for the following applications : - ImageIO - LibSystem - Mail - QuickDraw - Ruby - SecurityAgent - securityd C Tenable Network Security, Inc. include"compat.inc"; if description...
Sun Cobalt RAQ Server Detection
Binary data 2741.prm...
CVE-2004-2741
Cross-site scripting XSS vulnerability in the "help window" help.php in Horde Application Framework 2.2.6 allows remote attackers to inject arbitrary web script or HTML via the 1 module, 2 topic, or 3 module parameters...