84 matches found
CVE-2014-3948
CVE-2014-3948 applies to the TYPO3 powermail extension. The HTML export wizard in the powermail backend module is affected by a cross-site scripting (XSS) vulnerability in versions up to 1.6.10, allowing remote attackers to inject arbitrary script via unspecified vectors. A fixed release is 1.6.1...
Arbitrary code execution in extension "powermail" (powermail)
It has been discovered that the extension "powermail" powermail is susceptible to arbitrary code execution and Cross-Site Scripting Release Date: May 22, 2014 Component Type: Third party extension. This extension is not a part of the TYPO3 default installation. Affected Versions: powermail:...
Design/Logic Flaw
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2013-3948. Reason: This candidate is a duplicate of CVE-2013-3948. Notes: All CVE users should reference CVE-2013-3948 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...
CVE-2014-1277
CVE-2014-1277 is rejected and not an active vulnerability entry; reference CVE-2013-3948.
CVE-2013-3948
Apple iOS 6.1.3 is affected by an open-redirect vulnerability in hostname determination during Enterprise Deployment prompts. This vulnerability can be leveraged by a remote attacker to trigger installation of arbitrary applications via a download-manifest itms-services:// URL that abuses a trust...
CVE-2005-3948
creationtimestamp| type| source ---|---|--- 2011-10-29 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/18045...
COWON Media Center JetAudio .wav File Denial Of Service Vulnerability
This host has COWON Media Center JetAudio installed and is prone to Denial of Service vulnerability. Vulnerabilities Insight: An error occurs while parsing a .wav file containing an overly long string at the end. OpenVAS Vulnerabilities Test $Id: secpodcowonjetaudiowavdosvuln.nasl 5055 2017-01-20...
CVE-2009-3948
CVE-2009-3948 affects JetAudio 7.5.3 (COWON Media Center). A remote denial-of-service can be triggered by a long string at the end of a .wav file, causing memory consumption and application crash. CVSS context indicates network vector, no authentication, moderate complexity, and partial availabil...
CVE-2009-3948
creationtimestamp| type| source ---|---|--- 2009-07-14 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/9139...
Gentoo Security Advisory GLSA 200708-11 (lighttpd)
The remote host is missing updates announced in advisory GLSA 200708-11. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Gentoo Security Advisory GLSA 200708-11 (lighttpd)
The remote host is missing updates announced in advisory GLSA 200708-11. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...
CVE-2008-3948
CVE-2008-3948: SQL injection in XRMS, affecting admin/users/self-2.php. Remote attackers can execute arbitrary SQL and modify name/email via unspecified vectors. No explicit remediation details provided in the documents; exploitation details not documented.
Debian: Security Advisory (DSA-1609-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Debian DSA-1609-1 : lighttpd - various
Several local/remote vulnerabilities have been discovered in lighttpd, a fast webserver with minimal memory footprint. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2008-0983 lighttpd 1.4.18, and possibly other versions before 1.5.0, does not properly...
openSUSE 10 Security Update : lighttpd (lighttpd-3985)
Multiple bugs in lighttpd allowed remote attackers to crash lighttpd, circumvent access restricions or even execute code. CVE-2007-3946, CVE-2007-3947, CVE-2007-3948, CVE-2007-3949, CVE-2007-3950 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this...
CVE-2007-3948
connections.c in lighttpd before 1.4.16 might accept more connections than the configured maximum, which allows remote attackers to cause a denial of service failed assertion via a large number of connection attempts...
CVE-2007-3948
connections.c in lighttpd before 1.4.16 might accept more connections than the configured maximum, which allows remote attackers to cause a denial of service failed assertion via a large number of connection attempts...
CVE-2007-3948
connections.c in lighttpd before 1.4.16 might accept more connections than the configured maximum, which allows remote attackers to cause a denial of service failed assertion via a large number of connection attempts...
CVE-2007-3948
Vulnerability (CVE-2007-3948) in lighttpd prior to 1.4.16: the code path in connections.c may accept more connections than the configured maximum, enabling remote attackers to cause a denial of service via a flood of connection attempts (failed assertion). Affected product/version: lighttpd befor...