74 matches found
CVE-2011-3664
Mozilla Firefox before 9.0, Thunderbird before 9.0, and SeaMonkey before 2.6 on Mac OS X do not properly handle certain DOM frame deletions by plugins, which allows remote attackers to cause a denial of service incorrect pointer dereference and application crash or possibly have unspecified other...
CVE-2011-3664
Affected software: Mozilla Firefox, Thunderbird, and SeaMonkey on Mac OS X. Vulnerable behavior: plugins can delete a DOM frame, triggering an incorrect pointer dereference that may crash the application (DoS) and potentially other unspecified impacts. Severity: base CVSS 2.0 score 6.8 (MEDIUM). ...
CVE-2009-3664
CVE-2009-3664 affects Nullam Blog 0.1.2. The vulnerability is a directory traversal in index.php that allows remote attackers to include or execute arbitrary files via a .. in the p or s parameters. This can lead to partial impacts on confidentiality, integrity, and availability (per CVSS 2.0 bas...
CVE-2009-3664
creationtimestamp| type| source ---|---|--- 2009-09-10 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/9625...
Multiple Cross Site Scripting (XSS) and SQL injection Vulnerabilities in XRMS, CVE-2008-3664
Multiple Cross Site Scripting XSS and SQL injection Vulnerabilities in XRMS, CVE-2008-3664 References https://vulners.com/cve/CVE-2008-3664 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2008-3664 http://xrms.sourceforge.net Description XRMS is a web-based application for managing business entities such...
CVE-2008-3664
XRMS is affected by multiple XSS vulnerabilities (CVE-2008-3664) in its web interface. The issues allow remote attackers to inject arbitrary script/HTML via numerous inputs, including the real name field (user list), login.php target, activities/some.php title, and several other parameters (compa...
xrms-sqlxss.txt
Multiple Cross Site Scripting XSS and SQL injection Vulnerabilities in XRMS, CVE-2008-3664 References http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-3664 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2008-3664 http://xrms.sourceforge.net Description XRMS is a web-based application for managing...
CVE-2008-3664
creationtimestamp| type| source ---|---|--- 2008-09-04 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/32321 2008-09-04 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/32322 2008-09-04 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/32323 2008-09-04...
CVE-2006-3664
CVE-2006-3664 is an unspecified DoS vulnerability in the Solaris NIS (ypserv) service affecting Sun Solaris 8–10 (various SPARC/x86 platforms). The NVD notes a MEDIUM severity (base score 5.0) with network access and no authentication required, causing a ypserv hang via unknown vectors. Patches e...
CVE-2005-3664
The CVE-2005-3664 entry describes a heap-based buffer overflow in the Kaspersky Anti-Virus Engine, used by Kaspersky Personal 5.0.227, Anti-Virus On-Demand Scanner for Linux 5.0.5, and F-Secure Anti-Virus for Linux 4.50, allowing remote code execution via a crafted CHM file. The provided referenc...
Solaris 9 (sparc) : 113579-12
SunOS 5.9: ypserv/ypxfrd patch. Date this patch was last updated by Sun : Feb/20/07 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if !...
Solaris 8 (sparc) : 109328-07
SunOS 5.8: ypserv, ypxfr and ypxfrd patch. Date this patch was last updated by Sun : Feb/20/07 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if...
Solaris 8 (x86) : 109329-07
SunOS 5.8x86: ypserv, ypxfr and ypxfrd patch. Date this patch was last updated by Sun : Feb/20/07 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if...