119 matches found
Critical: Red Hat Security Advisory: firefox security update
Updated firefox packages that fix several security issues are now available for Red Hat Enterprise Linux 4 and 5. The Red Hat Security Response Team has rated this update as having critical security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings...
RHEL 4 / 5 : thunderbird (RHSA-2010:0682)
An updated thunderbird package that fixes several security issues is now available for Red Hat Enterprise Linux 4 and 5. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity...
RHEL 3 / 4 : seamonkey (RHSA-2010:0680)
Updated SeaMonkey packages that fix several security issues are now available for Red Hat Enterprise Linux 3 and 4. The Red Hat Security Response Team has rated this update as having critical security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity...
CVE-2010-2765
Integer overflow in the FRAMESET element implementation in Mozilla Firefox before 3.5.12 and 3.6.x before 3.6.9, Thunderbird before 3.0.7 and 3.1.x before 3.1.3, and SeaMonkey before 2.0.7 might allow remote attackers to execute arbitrary code via a large number of values in the cols aka columns...
CVE-2004-2765
CVE-2004-2765 is an XSS vulnerability in Sun ONE Messaging Server 6.1 and iPlanet Messaging Server 5.2 prior to 5.2hf2.02. The issue occurs in Webmail when using Internet Explorer, where a crafted e-mail message can cause arbitrary web script/HTML to be injected. Connected sources (Red Hat and NV...
DD-WRT HTTP Daemon Arbitrary Command Execution
$Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'DD-WRT HTTP...
CVE-2009-2765
httpd.c in httpd in the management GUI in DD-WRT 24 sp1, and other versions before build 12533, allows remote attackers to execute arbitrary commands via shell metacharacters in a request to a cgi-bin/ URI...
CVE-2009-2765
The CVE-2009-2765 issue affects the DD-WRT HTTPd management GUI, where httpd.c in the HTTP daemon is vulnerable to shell metacharacter injection via requests to a CGI-bin URI. The vulnerability allows an unauthenticated remote attacker to execute arbitrary commands with root privileges on affecte...
DD-WRT HTTP Daemon Metacharacter Injection Remote Code Execution
The remote web server is vulnerable to a command injection attack that may allow an attacker to execute arbitrary commands on the remote server usually with root privileges. An attacker can exploit this flaw to take complete ownership of the remote device. C Tenable Network Security, Inc...
DD-WRT HTTP v24-SP1 - Command Injection
DD-WRT HTTP v24-SP1 - Command Injection $Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require...
CVE-2009-2765
creationtimestamp| type| source ---|---|--- 2009-07-20 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/9209 2009-07-20 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/10030 2010-07-07 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/16856 2018-05-29...
Solaris 9 (x86) : 116569-99
Messaging Server 6.1x86: core patch. Date this patch was last updated by Sun : Feb/09/05 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if descriptio...
CVE-2008-2765
The CVE-2008-2765 entry concerns a SQL injection in the gallery.asp component of Xigla Absolute Image Gallery XE. The vulnerability is triggered by the categoryid parameter in a viewimage action, enabling remote attackers to execute arbitrary SQL commands. This document set confirms the affected ...
CVE-2007-2765
CVE-2007-2765 concerns BlockHosts prior to 2.0.3, where improper parsing of daemon logs lets remote attackers add arbitrary entries to /etc/hosts.allow, enabling a denial of service by injecting IPs into a log file. Related entries (e.g., CVE-2007-4322/4323) describe a similar issue affecting Blo...
CVE-2006-2765
Cross-site scripting XSS vulnerability in newsinformation.php in Interlink Advantage allows remote attackers to inject arbitrary web script or HTML via the flag parameter...
CVE-2006-2765
Cross-site scripting XSS vulnerability in newsinformation.php in Interlink Advantage allows remote attackers to inject arbitrary web script or HTML via the flag parameter...
CVE-2006-2765
CVE-2006-2765 is an XSS vulnerability in Interlink Advantage’s news_information.php, exploitable via the flag parameter to inject arbitrary script/HTML. The NVD entry cites a low base score (CVSS2.0: AV:N/AC:H/Au:N/C:N/I:P/A:N) with partial integrity impact; no exploit code or in-the-wild details...
CVE-2005-2765
The CVE-2005-2765 entry concerns the Windows Firewall UI not properly displaying certain malformed Windows Registry entries. The underlying issue is an information-hiding condition that could enable attackers with already elevated (administrator) privileges to obscure activity when monitoring exc...