90 matches found
CVE-2009-4177
Buffer overflow in webappmon.exe in HP OpenView Network Node Manager OV NNM 7.01, 7.51, and 7.53 allows remote attackers to execute arbitrary code via a long HTTP Host header...
TPTI-09-10: HP OpenView NNM webappmon.exe CGI Host Header Buffer Overflow Vulnerability
TPTI-09-10: HP OpenView NNM webappmon.exe CGI Host Header Buffer Overflow Vulnerability http://dvlabs.tippingpoint.com/advisory/TPTI-09-10 December 9, 2009 -- CVE ID: CVE-2009-4177 -- Affected Vendors: Hewlett-Packard -- Affected Products: Hewlett-Packard OpenView Network Node Manager --...
CVE-2008-4177
CVE-2008-4177 describes an SQL injection in search.php of Pre Real Estate Listings, allowing remote attackers to execute arbitrary SQL via the c parameter. NVD lists CVSS v2 base score 7.5 (HIGH) with NETWORK/vector: AV:N, AC:L, Au:N, C:P/I:P/A:P.
Opera < 9.23 Arbitrary Code Execution
Binary data 4177.prm...
CVE-2007-4177
CVE-2007-4177: Multiple cross-site scripting (XSS) vulnerabilities in Interact before 2.4 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors. The linked record notes potential overlap with CVE-2007-3328. Public details in the provided documents do not specify th...
CVE-2006-4177
Heap-based buffer overflow in the NCP engine in Novell eDirectory before 8.8.1 FTF1 allows remote attackers to execute arbitrary code via a crafted NCP over IP packet that causes NCP to read more data than intended...
CVE-2006-4177
Heap-based buffer overflow in the NCP engine in Novell eDirectory before 8.8.1 FTF1 allows remote attackers to execute arbitrary code via a crafted NCP over IP packet that causes NCP to read more data than intended...
CVE-2006-4177
CVE-2006-4177 affects Novell eDirectory’s NCP engine. The issue is a heap-based buffer overflow triggered by a crafted NCP over IP packet, causing NCP to read more data than intended and allowing remote code execution. Affected software is Novell eDirectory prior to 8.8.1 FTF1; the vendor’s remed...
CVE-2005-4177
The CVE-2005-4177 entry concerns an XSS vulnerability in Magic Book Personal and Professional 2.0, specifically in the book.cfm component where the StartRow parameter is not properly sanitized. The vulnerability could allow remote attackers to inject arbitrary web script or HTML, as documented by...
