173 matches found
CVE-2011-4155
CVE-2011-4155 is an XSS vulnerability reported for HP Network Node Manager i (NNMi) in 9.0x and 9.1x, enabling remote injection of arbitrary web script/HTML via unspecified vectors. Connected documents also describe related entries (CVE-2011-5184) with multiple XSS vectors in NNMi 9.10 (specific ...
SuSE 11.1 Security Update : clamav (SAT Patch Number 4155)
Specially crafted VBA data in Microsoft Office documents could crash clamav or potentially even cause execution of arbitrary code. clamav was updated to version 0.97 to fix the issue. CVE-2011-1003 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in thi...
CVE-2010-4155
Multiple cross-site scripting XSS vulnerabilities in eXV2 CMS 2.10 allow remote attackers to inject arbitrary web script or HTML via the 1 rssfeedURL parameter to manual/caferss/example.php and the sumb parameter to 2 modules/news/archive.php, 3 modules/news/topics.php, and 4...
CVE-2010-4155
Multiple cross-site scripting XSS vulnerabilities in eXV2 CMS 2.10 allow remote attackers to inject arbitrary web script or HTML via the 1 rssfeedURL parameter to manual/caferss/example.php and the sumb parameter to 2 modules/news/archive.php, 3 modules/news/topics.php, and 4...
CVE-2010-4155
The CVE-2010-4155 entry documents multiple cross-site scripting (XSS) vulnerabilities in eXV2 CMS 2.10, allowing remote attackers to inject arbitrary HTML/JS when user input is not properly sanitized. Affected vectors include the rssfeedURL parameter to manual/caferss/example.php and the sumb par...
CVE-2009-4155
creationtimestamp| type| source ---|---|--- 2009-11-30 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/10253...
CVE-2008-4155
CVE-2008-4155 affects EasySite 2.3 with multiple directory traversal vulnerabilities. The issue allows remote attackers to read arbitrary files or list directories by supplying a .. payload in specific parameters across several PHP scripts: (a) www/index.php (module or action), (b) modules/Module...
CVE-2008-4155
creationtimestamp| type| source ---|---|--- 2008-08-21 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6288...
VMware Workstation < 5.5.5 and Server < 1.0.4 Multiple Vulnerabilities
The version of VMware Workstation/Server installed on the remote host is affected by multiple vulnerabilities, including a privelege elevation vulnerability that allows a guest to take over a host and a buffer overflow vulnerability in the DHCP daemon. The buffer overlflow in the DHCP server may...
CVE-2007-4155
CVE-2007-4155 is a Windows-hosted vulnerability in VMware’s vielib.dll (ActiveX) that enables absolute path traversal to trigger CreateProcess/CreateProcessEx, allowing remote attackers to execute arbitrary local programs on VMware Workstation/Player 6.0.0 family. VMware advisories (VMSA-2007-000...
CVE-2006-4155
CVE-2006-4155 affects Invision Power Board (IPB) prior to 2.1.7. The vulnerability is in func_topic_threaded.php (threaded view mode) and allows remote attackers to access posts outside the topic. The available references describe the issue as an unspecified vulnerability with network exposure (b...
CVE-2005-4155
CVE-2005-4155 affects ATutor 1.5.1 pl2: registration.PHP permits remote SQL execution via an e-mail address ending with a NULL character that bypasses the PHP regex check. Root cause: input crafted to defeat validation, enabling arbitrary SQL commands. Impact is remote compromise of ATutor via th...