66 matches found
CVE-2014-2970
CVE-2014-2970 is rejected/not used and does not represent an active vulnerability entry.
Debian DSA-2970-1 : cacti - security update
Multiple security issues cross-site scripting, cross-site request forgery, SQL injections, missing input sanitising have been found in Cacti, a web frontend for RRDTool. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from...
CVE-2013-2970
CVE-2013-2970 affects IBM QRadar SIEM (7.0 and 7.1) and is a command-injection flaw exploitable by an authenticated user to run OS commands, potentially gaining remote shell access. The issue originates from a vulnerability allowing limited command execution by a webservices user. Remediation pro...
Synel SY-780/A terminal denial-of-service vulnerability
Overview Synel SY-780/A terminals contain a denial-of-service vulnerability when specific ports of the device are scanned. Description According to Synel's website the SY-780/A terminal is a stand-alone device used for time & attendance monitoring, production floor control, job costing, and acces...
CVE-2010-2970
Multiple cross-site scripting XSS vulnerabilities in MoinMoin 1.9.x before 1.9.3 allow remote attackers to inject arbitrary web script or HTML via crafted content, related to 1 action/SlideShow.py, 2 action/anywikidraw.py, and 3 action/languagesetup.py, a similar issue to CVE-2010-2487...
CVE-2010-2970
Multiple cross-site scripting XSS vulnerabilities in MoinMoin 1.9.x before 1.9.3 allow remote attackers to inject arbitrary web script or HTML via crafted content, related to 1 action/SlideShow.py, 2 action/anywikidraw.py, and 3 action/languagesetup.py, a similar issue to CVE-2010-2487...
CVE-2010-2970
MoinMoin 1.9.x prior to 1.9.3 is affected by CVE-2010-2970 (XSS) via crafted content in action/SlideShow.py, action/anywikidraw.py, and action/language_setup.py. The vulnerability allows remote attackers to inject arbitrary script/HTML; impact is partial integrity and potential client-side data e...
CVE-2010-2970
Multiple cross-site scripting XSS vulnerabilities in MoinMoin 1.9.x before 1.9.3 allow remote attackers to inject arbitrary web script or HTML via crafted content, related to 1 action/SlideShow.py, 2 action/anywikidraw.py, and 3 action/languagesetup.py, a similar issue to CVE-2010-2487...
MoinMoin 'PageEditor.py' Cross-Site Scripting Vulnerability
MoinMoin is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied input data. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may help the attacker...
UiPlayer UiCheck组件栈溢出漏洞
CVE ID: CVE-2009-2970 UiPlayer网络视频播放软件是联合网视（UITV）公司的视频播放软件。 UiPlayer的安装目录下的UiCheck.dll是一个ActiveX控件，该控件允许在IE中加载。UiCheck.dll提供了一个接口函数 GetUiDllVersion，该函数会把接收到的文件名参数拷贝到一个固定大小的缓冲区，如果文件名超长，就会导致栈溢出。 因为和百度等公司的合作，很多视频播放软件中也集成了UiPlayer，例如百度下吧等。 UiTV UiPlayer UiCheck.dll 1.0.0.6 Baidu BaiduV 临时解决方法：...
CVE-2009-2970
CVE-2009-2970 affects UiTV UiPlayer’s UiCheck.dll (ActiveX) prior to version 1.0.0.7. The GetUiDllVersion function copies the filename parameter into a fixed-size buffer, and long filenames trigger a stack-based buffer overflow. This could allow remote code execution via crafted input delivered t...
KLA10374 ACE vulnerability in UiTV UiPlayer
A buffer overflow was found in UiTV UiPlayer. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited remotely via a specially designed filename parameter. Original advisories - Related products UiTV-UiPlayer CVE list CVE-2009-2970 critical...
NSFOCUS SA2009-01 : UiTV UiPlayer UiCheck Component Stack Buffer Overflow Vulnerability
NSFOCUS Security Advisory SA2009-01 UiTV UiPlayer UiCheck Component Stack Buffer Overflow Vulnerability Release Date: 2009-10-16 CVE ID: CVE-2009-2970 http://www.nsfocus.com/en/advisories/0901.html Affected system: ============== UiTV UiPlayer UiCheck.dll 1.0.0.6 and prior versions Unaffected...
Fedora Core 10 FEDORA-2009-2970 (lcms)
The remote host is missing an update to lcms announced via advisory FEDORA-2009-2970. OpenVAS Vulnerability Test $Id: fcore20092970.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-2970 lcms Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft...
Fedora Core 10 FEDORA-2009-2970 (lcms)
The remote host is missing an update to lcms announced via advisory FEDORA-2009-2970. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...
CVE-2008-2970
CVE-2008-2970 describes multiple session fixation vulnerabilities in Academic Web Tools (AWT YEKTA) versions 1.4.3.1 and 1.4.2.8 and earlier. The issue allows remote attackers to hijack user sessions by supplying a crafted PHPSESSID value targeted at index.php and login.php within the homepg/ dir...
CVE-2008-2970
creationtimestamp| type| source ---|---|--- 2008-06-19 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/5861...
Cross site scripting
Cross-site scripting XSS vulnerability in the 8e6 R3000 Enterprise Filter before 2.0.05 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. NOTE: this may be the same as CVE-2007-2970...
CVE-2007-3842
Cross-site scripting XSS vulnerability in the 8e6 R3000 Enterprise Filter before 2.0.05 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. NOTE: this may be the same as CVE-2007-2970...