CVE-2012-2742

Revelation 0.4.13-2 and earlier uses only the first 32 characters of a password followed by a sequence of zeros, which reduces the entropy and makes it easier for context-dependent attackers to crack passwords and obtain access to keys via a brute-force attack...

CVE-2012-2742

The vulnerability (CVE-2012-2742) affects Revelation password manager, specifically versions 0.4.13-2 and earlier. The root cause is that the software uses only the first 32 characters of a password and then pads with zeros, reducing entropy. This can make context-dependent brute-force attacks mo...

CVE-2011-2742

Summary: CVE-2011-2742 affects EMC RSA Adaptive Authentication On-Premise (AAOP). The issue is that AAOP 6.0.2.1 SP1 Patch 2/3, SP2/SP2 Patch 1, and SP3 does not perform forensic evaluation when device tokens are received from mobile apps, potentially allowing a mobile device to bypass applicatio...

CVE-2010-2742

The Netlogon RPC Service in Microsoft Windows Server 2003 SP2 and Server 2008 Gold, SP2, and R2, when the domain controller role is enabled, allows remote attackers to cause a denial of service NULL pointer dereference and reboot via a crafted RPC packet, aka "Netlogon RPC Null dereference DOS...

CVE-2010-2742

The CVE affects the Netlogon RPC Service in Windows Server 2003 SP2 and Windows Server 2008 Gold/SP2/R2 when the domain controller role is enabled. A remote attacker can trigger a denial-of-service via a crafted Netlogon RPC packet, causing a NULL pointer dereference and reboot. The issue is docu...

IBM WebSphere Application Server Cross Site Scripting (CVE-2009-2742)

The IBM WebSphere Application Server is a Java 2 Enterprise Edition J2EE and Web Services-based application server. The software is made available for various vendor operating systems. It comprises of several Java-based tools that allow users to create and manage sophisticated business web sites...

CVE-2009-2742

IBM WebSphere Application Server 6.1 before 6.1.0.27 is affected by a cross-site scripting (XSS) vulnerability in the Eclipse Help component. The root cause is insufficient validation of input in Eclipse Help, allowing remote attackers to inject arbitrary script/HTML via unspecified input. Affect...

CVE-2008-2742

The CVE-2008-2742 entry concerns Achievo versions 1.2.0 through 1.3.2, where an unrestricted file upload vulnerability exists in the mcpuk file editor (atk/attributes/fck/editor/filemanager/browser/mcpuk/connectors/php/config.php). The underlying issue allows remote code execution by uploading a ...

CVE-2008-2742

creationtimestamp| type| source ---|---|--- 2008-06-09 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/5770...

Debian Security Advisory DSA 1125-2 (drupal)

The remote host is missing an update to drupal announced via advisory DSA 1125-2. The Drupal update in DSA 1125 contained a regression. This update corrects this flaw. For completeness, the original advisory text below: Several remote vulnerabilities have been discovered in the Drupal web site...

CVE-2004-2742

Cross-site scripting (XSS) vulnerability in the Crystal Enterprise report viewer affects versions 8.5, 9, and 10. The issue allows remote attackers to inject arbitrary web script or HTML by crafting a script in the URL to a report (RPT) file, leveraging unsanitized input in the report viewer. The...

CVE-2007-2742

CVE-2007-2742 concerns an unrestricted file upload in labs.beffa.org w2box 4.0.0 Beta4, enabling remote attackers to upload arbitrary PHP code by supplying a filename with a double extension (e.g., .php.jpg). Public sources in the connected set describe the issue as an unrestricted file upload vu...

DSA-1125 drupal - several

Bulletin has no description...

CVE-2006-2742

CVE-2006-2742 affects Drupal 4.6.x (before 4.6.7) and 4.7.0, with a SQL injection in the database interface. The vulnerability is exploitable via the count and from variables to database interface files (database.mysql.inc, database.pgsql.inc, database.mysqli.inc), allowing remote attackers to ex...

CVE-2005-2742

SecurityAgent in Apple Mac OS X 10.4.2, under certain circumstances, can cause the "Switch User..." button to appear even though the "Enable fast user switching" setting is disabled, which can allow attackers with physical access to gain access to the desktop and bypass the "Require password to...

CVE-2005-2742

SecurityAgent in Apple Mac OS X 10.4.2 can cause the "Switch User..." button to appear when fast user switching is disabled, potentially allowing attackers with physical access to bypass the wake password requirement. This CVE entry is supported by multiple sources, including NVD and Red Hat, whi...

Mac OS X Multiple Vulnerabilities (Security Update 2005-008)

The remote host is running Apple Mac OS X, but lacks Security Update 2005-008. This security update contains fixes for the following applications : - ImageIO - LibSystem - Mail - QuickDraw - Ruby - SecurityAgent - securityd C Tenable Network Security, Inc. include"compat.inc"; if description...

CVE-2004-2742

Cross-site scripting XSS vulnerability in the report viewer in Crystal Enterprise 8.5, 9, and 10 allows remote attackers to inject arbitrary web script or HTML via script in the URL to a report RPT file...