96 matches found
CVE-2011-2792
Removed by vendor...
CVE-2010-2792
CVE-2010-2792 is a race-condition vulnerability in the SPICE Firefox plug‑in (spice-xpi) and its qspice-client interaction. The plug‑in and client communicate over a UNIX socket; an attacker locally could abuse this to access authentication details and perform a man‑in‑the‑middle attack on the SP...
CentOS 5 : qspice-client (CESA-2010:0632)
An updated qspice-client package that fixes one security issue is now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity ratin...
CentOS 5 : spice-xpi (CESA-2010:0651)
An updated spice-xpi package that fixes two security issues and three bugs is now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severi...
spice security update
CentOS Errata and Security Advisory CESA-2010:0651 An updated spice-xpi package that fixes two security issues and three bugs is now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring...
CVE-2007-2792
creationtimestamp| type| source ---|---|--- 2010-02-28 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/11603...
CVE-2009-2792
Directory traversal vulnerability in plugings/pagecontent.php in Really Simple CMS RSCMS 0.3a allows remote attackers to include and execute arbitrary local files via a .. dot dot in the PT parameter...
CVE-2009-2792
CVE-2009-2792 affects Really Simple CMS (RSCMS) version 0.3a, with a directory traversal flaw in plugings/pagecontent.php. The underlying issue allows an attacker to include andexecute arbitrary local files by manipulating the PT parameter with a .. (dot dot) sequence. This is a server-side file-...
CVE-2009-2792
creationtimestamp| type| source ---|---|--- 2009-07-30 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/9313...
Fedora Core 9 FEDORA-2009-2792 (evolution-data-server)
The remote host is missing an update to evolution-data-server announced via advisory FEDORA-2009-2792. OpenVAS Vulnerability Test $Id: fcore20092792.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-2792 evolution-data-server Authors: Thomas Reinke...
CVE-2008-2792
CVE-2008-2792 is a SQL injection vulnerability in eroCMS 1.4 and earlier, affecting index.php where an attacker can inject via the site parameter to execute arbitrary SQL commands. The connected records confirm the affected software (eroCMS prior to 1.4) and the vulnerable component (index.php), ...
CVE-2008-2792
creationtimestamp| type| source ---|---|--- 2008-06-17 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/5846...
CVE-2007-2792
CVE-2007-2792 affects the YaNC (com_yanc) Newsletter component for Mambo/Joomla! prior to 1.5 beta 3. The vulnerability is a SQL injection in the listid parameter (index.php / yanc.html.php showPageHeader), allowing remote attackers to manipulate database queries and potentially disclose or modif...
CVE-2006-2792
SQL injection vulnerability in misc.php in Woltlab Burning Board WBB 2.3.4 allows remote attackers to execute arbitrary SQL commands via the sid parameter...
CVE-2006-2792
The CVE-2006-2792 entry concerns Woltlab Burning Board (WBB) 2.3.4. A SQL injection flaw exists in misc.php that lets remote attackers manipulate the database by supplying a crafted sid parameter, enabling arbitrary SQL execution. This is documented in the NVD entry for CVE-2006-2792 and reflecte...
SSLv3 Traffic Negotiation Detection
Binary data 2792.prm...