121 matches found
HP OpenView Network Node Manager Multiple Code Execution Vulnerabilities (HPSBMU02712 SSRT100649)
The installed version of HP Network Node Manager is affected by the following vulnerabilities : - A remote code execution vulnerability exists because the 'nnmRptConfig.exe' CGI application does not adequately validate user-supplied input. CVE-2011-3165 - A remote code execution vulnerability...
[security bulletin] HPSBMU02712 SSRT100649 rev.1 - HP OpenView Network Node Manager (OV NNM), Remote Execution of Arbitrary Code
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c03054052 Version: 1 HPSBMU02712 SSRT100649 rev.1 - HP OpenView Network Node Manager OV NNM, Remote Execution of Arbitrary Code NOTICE: The information in this Security Bulletin should be acted up...
CVE-2011-3165
HP OpenView Network Node Manager (OV NNM) versions 7.51 and 7.53 are affected by multiple remote code execution vulnerabilities (CVE-2011-3165, CVE-2011-3166, CVE-2011-3167) due to insufficient input validation/boundary checks in components such as nnmRptConfig.exe CGI, ov.dll (format string hand...
CVE-2010-3165
Untrusted search path vulnerability (CVE-2010-3165) affects multiple Yokka products, including NoEditor <=1.33.1.1, OuiEditor <=1.6.1.1, UnEditor <=1.10.1.2, DeuxEditor <=1.7.1.2, SQLEditorXP <=3.14.1.2, SQLEditorTE <=1.9.1.3, SQLEditor8 <=3.8.1.2, and SQLEditorClassic
Fedora Update for bugzilla FEDORA-2010-1458
The remote host is missing an update for the SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...
Mozilla Bugzilla 'Bug.create()' WebService Function SQL Injection Vulnerability
Bugzilla is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying...
Fedora 10 : bugzilla-3.2.5-1.fc10 (2009-9550)
Update to upstream version 3.2.5 fixing two SQL injection security flaws CVE-2009-3125, CVE-2009-3165 detailed in the upstream security advisory: http://www.bugzilla.org/security/3.0.8/ Note that Tenable Network Security has extracted the preceding description block directly from the Fedora...
Fedora Core 11 FEDORA-2009-9554 (bugzilla)
The remote host is missing an update to bugzilla announced via advisory FEDORA-2009-9554. OpenVAS Vulnerability Test $Id: fcore20099554.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-9554 bugzilla Authors: Thomas Reinke Copyright: Copyright c 2009...
Fedora Core 10 FEDORA-2009-9550 (bugzilla)
The remote host is missing an update to bugzilla announced via advisory FEDORA-2009-9550. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by t...
Fedora 11 : bugzilla-3.2.5-1.fc11 (2009-9554)
Update to upstream version 3.2.5 fixing two SQL injection security flaws CVE-2009-3125, CVE-2009-3165 detailed in the upstream security advisory: http://www.bugzilla.org/security/3.0.8/ Note that Tenable Network Security has extracted the preceding description block directly from the Fedora...
CVE-2009-3165
CVE-2009-3165 is a SQL injection vulnerability affecting Bugzilla 2.23.4–3.0.8, 3.1.1–3.2.4, and 3.3.1–3.4.1 via Bug.create WebService parameters, enabling remote arbitrary SQL execution. Connected advisories confirm impact and remediation guidance, notably Gentoo GLSA 2010-06-19 recommending upg...
Bugzilla < 3.0.9/3.2.5/3.4.2 Multiple Vulnerabilities
Binary data 5169.prm...
Directory traversal
Directory traversal vulnerability in code/track.php in FuzzyLime 3.03 allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the p parameter, a different vector than CVE-2007-4805 and CVE-2008-3165...
CVE-2008-3165
Directory traversal vulnerability in rss.php in fuzzylime cms 3.01a and earlier, when magicquotesgpc is disabled, allows remote attackers to include and execute arbitrary local files via a .. dot dot in the p parameter, as demonstrated using content.php, a different vector than CVE-2007-4805...
CVE-2008-3165
CVE-2008-3165 affects fuzzylime (CMS) versions 3.01a and earlier. The vulnerability is a directory traversal flaw in rss.php that allows remote attackers to include and execute arbitrary local files by supplying a .. sequence in the p parameter, demonstrated via content.php; this is a different v...
CVE-2008-3165
creationtimestamp| type| source ---|---|--- 2008-07-05 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6009...
CVE-2007-3165
CVE-2007-3165 affects Tor before 0.1.2.14, where an entry guard can be in the same family as the exit node, potentially compromising anonymity by exposing traffic to inappropriate remote observers. The vulnerability is documented across multiple sources (NVD/OSV/Ubuntu/Red Hat/Fedora). The core d...
CVE-2006-3165
SQL injection vulnerability in propview.php in Free Realty 2.9-0.7 and earlier allows remote attackers to execute arbitrary SQL commands via the sort parameter...
CVE-2006-3165
CVE-2006-3165 affects Free Realty 2.9-0.7 and earlier, with a SQL injection in propview.php exploitable via the sort parameter. The vulnerability allows remote attackers to execute arbitrary SQL commands, leading to potential data disclosure or modification. Exploit details, affected versions bey...
CVE-2005-3165
Multiple cross-site scripting XSS vulnerabilities in MediaWiki before 1.4.9 allow remote attackers to inject arbitrary web script or HTML via 1 tags or 2 Extension or sections that "bypass HTML style attribute restrictions" that are intended to protect against XSS vulnerabilities in Internet...