151 matches found
CVE-2010-3541
CVE-2010-3541 affects Oracle Java SE/Java for Business (e.g., 6 Update 21; 5.0 Update 25; 1.4.2_27; 1.3.1_28) and is linked in OpenVAS/SUSE advisories. The Connected/OpenVAS entries note the vulnerability arises from limit setting of some request headers in HttpURLConnection, impacting confidenti...
Fedora 14 : java-1.6.0-openjdk-1.6.0.0-44.1.9.1.fc14 (2010-16312)
Bug 533125 - CVE-2009-3555 TLS: MITM attacks via session renegotiation - Bug 642202 - CVE-2010-3541 CVE-2010-3573 OpenJDK HttpURLConnection allows arbitrary request headers 6961084,6980004 - Bug 639909 - CVE-2010-3548 OpenJDK DNS server IP address information leak 6957564 - Bug 642180 -...
Oracle Java SE Multiple Vulnerabilities (October 2010 CPU)
The version of Oracle formerly Sun Java SE or Java for Business installed on the remote host is earlier than 6 Update 22 / 5.0 Update 26 / 1.4.228. Such versions are potentially affected by security issue in the following components : - CORBA - Deployment - Deployment Toolkit - Java 2D - Java Web...
Critical: Red Hat Security Advisory: java-1.6.0-sun security update
Updated java-1.6.0-sun packages that fix several security issues are now available for Red Hat Enterprise Linux 4 Extras and 5 Supplementary. The Red Hat Security Response Team has rated this update as having critical security impact. Common Vulnerability Scoring System CVSS base scores, which gi...
PHPGenealogie 2.0 'CoupleDB.php' RFI Vulnerability
PHPGenealogie is prone to a remote file inclusion RFI vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
CVE-2009-3541
PHP remote file inclusion vulnerability in CoupleDB.php in PHPGenealogy 2.0 allows remote attackers to execute arbitrary PHP code via a URL in the DataDirectory parameter...
CVE-2009-3541
PHPGenealogie 2.0 is affected by a remote file inclusion (RFI) in CoupleDB.php, triggered via the DataDirectory parameter which allows an attacker to execute arbitrary PHP code. The vulnerability is documented across multiple sources (e.g., NVD, OpenVAS NASL entries) with CVE-2009-3541 and a CVSS...
CVE-2009-3541
creationtimestamp| type| source ---|---|--- 2009-07-15 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/9155...
CVE-2007-3541
CVE-2007-3541 concerns Kurinton sHTTPd (version 20070408 and earlier) with a cross-site scripting (XSS) vulnerability that allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. The connected documents corroborate this XSS issue in sHTTPd and note that an arbitrar...
CVE-2006-3541
SQL injection vulnerability in Kyberna ky2help's Meine Links (aka My Links) module allows remote authenticated users to execute arbitrary SQL commands via unspecified textboxes. Impact includes partial confidentiality, integrity, and availability. Exploitability per the provided data: network vec...