226 matches found
CVE-2010-3572
Unspecified vulnerability in the Sound component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 25, 1.4.227, and 1.3.128 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors...
Oracle Java SE Multiple Vulnerabilities (October 2010 CPU)
The version of Oracle formerly Sun Java SE or Java for Business installed on the remote host is earlier than 6 Update 22 / 5.0 Update 26 / 1.4.228. Such versions are potentially affected by security issue in the following components : - CORBA - Deployment - Deployment Toolkit - Java 2D - Java Web...
CVE-2009-3572
OpenBSD 4.4–4.6 running on i386 kernels is affected by a local DoS due to improper handling of XMM exceptions, which can trigger a kernel panic via unspecified vectors. The CVE description and connected records identify the affected platform and symptom but do not specify exact vulnerable compone...
Sql injection
SQL injection vulnerability in lire/index.php in Peel 3.1 allows remote attackers to execute arbitrary SQL commands via the rubid parameter. NOTE: this might be the same issue as CVE-2005-3572...
CVE-2008-3572
CVE-2008-3572 describes a cross-site scripting (XSS) vulnerability in the Pligg application (version 9.9.5) where the web parameter category in index.php can be manipulated to inject arbitrary script/HTML. The linked sources confirm the affected product/version and the input vector but do not pro...
CVE-2007-3572
The vulnerability CVE-2007-3572 affects the Yoggie Pico and Pico Pro (web interface cgi-bin/runDiagnostics.cgi). An incomplete blacklist allows remote attackers to execute arbitrary commands by supplying shell metacharacters in the param parameter, demonstrated with URL-encoded backtick character...