191 matches found
CVE-2010-4367
creationtimestamp| type| source ---|---|--- 2010-11-30 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/35035...
CVE-2009-4367
The CVE concerns the Sitecore Staging Module (Sitecore Staging Module 5.4.0 rev.080625 and earlier) where the Staging Webservice (sitecore modules/staging/service/api.asmx) can be lasered by crafted SOAP requests to bypass authentication. The root cause is an authentication bypass that accepts ar...
CVE-2009-4367
creationtimestamp| type| source ---|---|--- 2009-12-17 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/10513...
Security Center < 3.4.2.1 Directory Traversal Arbitrary File Access
The version of Tenable Security Center installed on the remote host appears to be earlier than 3.4.2.1. Such versions contain two vulnerabilities that allow a user who was logged into the Security Center to obtain system files. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...
Gentoo Security Advisory GLSA 200708-17 (opera)
The remote host is missing updates announced in advisory GLSA 200708-17. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...
openSUSE 10 Security Update : opera (opera-4172)
This update of opera fixes a security vulnerabilities that allowed the execution of arbitrary code by using JavaScript. CVE-2007-4367 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update opera-4172...
GLSA-200708-17 : Opera: Multiple vulnerabilities
The remote host is affected by the vulnerability described in GLSA-200708-17 Opera: Multiple vulnerabilities An error known as 'a virtual function call on an invalid pointer' has been discovered in the JavaScript engine CVE-2007-4367. Furthermore, iDefense Labs reported that an already-freed...
CVE-2007-4367
CVE-2007-4367 affects Opera prior to 9.23 due to a flaw in the JavaScript engine that can trigger a “virtual function call on an invalid pointer.” This allows remote arbitrary code execution. Documents reference Opera updates/patches (Opera 9.23+), e.g., SUSE/Gentoo advisories and OpenVAS/Nessus ...
CVE-2006-4367
The CVE-2006-4367 issue affects phpBB 2.0.21 with the All Topics Hack 1.5.0 and earlier, where alltopics.php is vulnerable to SQL injection via the start parameter. The underlying cause is an insecure handling of the start input, enabling an attacker to manipulate SQL execution remotely. Public r...
CVE-2005-4367
The CVE-2005-4367 entry describes an XSS in DRZES HMS 3.2 (and later CONTROLzx, renamed from DRZES, 3.3.4) via register_domain.php, likely through unspecified search parameters (potentially the Domain Availability field). Affected function is register_domain.php; root cause is improper handling/e...
