119 matches found
Debian: Security Advisory (DSA-2774-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2012-2774
The ffMPVframestart function in libavcodec/mpegvideo.c in FFmpeg before 0.11 allows remote attackers to cause a denial of service memory corruption via unspecified vectors, related to starting "a frame outside SETUP state."...
CVE-2012-2774
The ffMPVframestart function in libavcodec/mpegvideo.c in FFmpeg before 0.11 allows remote attackers to cause a denial of service memory corruption via unspecified vectors, related to starting "a frame outside SETUP state."...
CVE-2012-2774
FFmpeg vulnerability CVE-2012-2774 affects libavcodec/mpegvideo.c:ff_MPV_frame_start, with FFmpeg versions before 0.11. Remote memory corruption possible by starting a frame outside the SETUP state. Mitigation: upgrade to FFmpeg 0.11 or later (per public advisories).
CVE-2012-2774
The ffMPVframestart function in libavcodec/mpegvideo.c in FFmpeg before 0.11 allows remote attackers to cause a denial of service memory corruption via unspecified vectors, related to starting "a frame outside SETUP state."...
CVE-2011-2774
The vulnerability CVE-2011-2774 affects Mahara 1.3.x and 1.4.x before 1.4.1, where the "Reply to message" feature allows remote authenticated users to read another user’s messages by tampering with the replyto parameter. Impact is unauthorized access to message content (no additional impact detai...
NIPrint LPD Request Overflow
$Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'NIPrint LPD...
CVE-2009-2774
CVE-2009-2774 describes an SQL injection in paidbanner.php of PHP Paid 4 Mail Script, exploitable via the ID parameter. The vulnerability allows remote attackers to craft SQL statements, leading to potential unauthorized data access or modification. Affected component: paidbanner.php in PHP Paid ...
CVE-2009-2774
creationtimestamp| type| source ---|---|--- 2009-07-28 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/9287...
CVE-2008-2774
SQL injection vulnerability in item.php in CartKeeper CKGold Shopping Cart 2.5 and 2.7 allows remote attackers to execute arbitrary SQL commands via the categoryid parameter, a different vector than CVE-2007-4736...
CVE-2008-2774
CVE-2008-2774 is a SQL injection vulnerability in CartKeeper CKGold Shopping Cart 2.5 and 2.7. The flaw resides in item.php, where the category_id parameter enables remote attackers to execute arbitrary SQL commands. This is a different vector than CVE-2007-4736. Public references in the connecte...
CVE-2008-2774
creationtimestamp| type| source ---|---|--- 2008-05-27 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/5678...
CVE-2007-2774
Multiple PHP remote file inclusion vulnerabilities in SunLight CMS 5.3 allow remote attackers to execute arbitrary PHP code via a URL in the root parameter to 1 connect.php or 2 modules/startup.php...
NIPrint LPD Request Overflow
This module exploits a stack buffer overflow in the Network Instrument NIPrint LPD service. Inspired by Immunity's VisualSploit :- This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'NIPrint LPD...
CVE-2006-2774
Cross-site scripting XSS vulnerability in search.php in QontentOne CMS allows remote attackers to inject arbitrary web script or HTML via the searchphrase parameter...
CVE-2006-2774
Cross-site scripting XSS vulnerability in search.php in QontentOne CMS allows remote attackers to inject arbitrary web script or HTML via the searchphrase parameter...
CVE-2006-2774
CVE-2006-2774 is an XSS vulnerability in QontentOne CMS, reported in search.php via the search_phrase parameter. The root cause, as described, is improper handling/sanitization of user-supplied input, allowing remote attackers to inject arbitrary web script or HTML. The documents state the impact...
CVE-2005-2774
CVE-2005-2774 affects Lithium II mod 1.24 for Quake 2. The vulnerability is a format string flaw in the nickname handling that can cause a server denial of service and may allow arbitrary code execution. Exploitation details are not provided in the available documents; no specific exploit vectors...
