CVE-2009-4400

CVE-2009-4400 describes a cross-site scripting (XSS) vulnerability in the TYPO3 extension for Parish Administration Database (ste_parish_admin), affecting version 0.1.3 and earlier. The issue allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. The available ref...

CVE-2009-4400

Cross-site scripting XSS vulnerability in the Parish Administration Database steparishadmin extension 0.1.3 and earlier for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2009-1164

CVE-2009-1164 affects Cisco Wireless LAN Controllers (WLC) across multiple lines of hardware (e.g., 1500/2000/2100/4100/4200/4400, WiSM, ISR module WLCs, Catalyst 3750G). The vulnerability is a Denial of Service caused by a malformed HTTP/HTTPS authentication response in the administrative web in...

Fedora Update for konversation FEDORA-2008-2122

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Fedora Update for konversation FEDORA-2008-2062

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Code injection

Unspecified vulnerability in the Wireless LAN Controller WLC TSEC driver in the Cisco 4400 WLC, Cisco Catalyst 6500 and 7600 Wireless Services Module WiSM, and Cisco Catalyst 3750 Integrated Wireless LAN Controller with software 4.x before 4.2.176.0 and 5.x before 5.1 allows remote attackers to...

CVE-2009-0061

Unspecified vulnerability in the Wireless LAN Controller WLC TSEC driver in the Cisco 4400 WLC, Cisco Catalyst 6500 and 7600 Wireless Services Module WiSM, and Cisco Catalyst 3750 Integrated Wireless LAN Controller with software 4.x before 4.2.176.0 and 5.x before 5.1 allows remote attackers to...

CVE-2008-4400

CVE-2008-4400 affects CA ARCserve Backup (BrightStor ARCserve Backup) r11.1–r12.0. The vulnerability is in asdbapi.dll and stems from insufficient validation of authentication credentials, allowing remote attackers to cause a denial of service by crashing multiple services. Remediation is availab...

CA-ArcServe

CA ArcServe is prone to a remote buffer overflow because it fails to perform adequate boundary-checks on user-supplied data. Successfully exploiting will allow an attacker to execute arbitrary code within the context of the affected application. Failed exploit attempts will result in a...

Fedora 8 : konversation-1.0.1-4.fc8 (2008-2062)

removes /usr/share/apps/konversation/scripts/media which can be used to execute a command via carefully crafted media Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and forma...

CVE-2004-2691

CVE-2004-2691 applies to 3Com SuperStack 3 4400 switches with firmware before 3.31. The vulnerability allows a remote attacker to cause a denial of service by sending a crafted request to the web management interface. Reports vary: some state the device resets, others describe a temporary unrespo...

CVE-2004-2691

Unspecified vulnerability in 3Com SuperStack 3 4400 switches with firmware version before 3.31 allows remote attackers to cause a denial of service device reset via a crafted request to the web management interface. NOTE: the provenance of this information is unknown; details are obtained from...

CVE-2007-4400

CRLF injection vulnerability in the included media script in Konversation allows user-assisted remote attackers to execute arbitrary IRC commands via CRLF sequences in the name of the song in a .mp3 file...

CVE-2007-4012

Cisco 4100 and 4400, Airespace 4000, and Catalyst 6500 and 3750 Wireless LAN Controller WLC software 4.1 before 4.1.180.0 allows remote attackers to cause a denial of service ARP storm via a broadcast ARP packet that "targets the IP address of a known client context", aka CSCsj50374...

CVE-2007-4011

CVE-2007-4011 affects Cisco 4100/4400, Airespace 4000, and Catalyst 6500/3750 WLC software. The vulnerability permits remote DoS (traffic amplification or ARP storm) via crafted unicast ARP requests. Impact arises when the destination MAC is unknown to Layer-2 infrastructure (CSCsj69233) or durin...

CVE-2007-4012

Cisco 4100 and 4400, Airespace 4000, and Catalyst 6500 and 3750 Wireless LAN Controller WLC software 4.1 before 4.1.180.0 allows remote attackers to cause a denial of service ARP storm via a broadcast ARP packet that "targets the IP address of a known client context", aka CSCsj50374...

CVE-2007-4011

Cisco 4100 and 4400, Airespace 4000, and Catalyst 6500 and 3750 Wireless LAN Controller WLC software before 3.2 20070727, 4.0 before 20070727, and 4.1 before 4.1.180.0 allows remote attackers to cause a denial of service traffic amplification or ARP storm via a crafted unicast ARP request that 1...

CVE-2006-4400

CVE-2006-4400 describes a stack-based buffer overflow in the Apple Type Services (ATS) server on Mac OS X 10.4.8 and earlier, triggered when processing crafted font files. The vulnerability could allow a user-assisted attacker to execute arbitrary code with system privileges. Affected products in...

CVE-2006-5382

The CVE-2006-5382 entry affects 3Com Switch SS3 4400 switches, specifically firmware 5.11, 6.00, 6.10 and earlier. Affects remote confidentiality/integrity/availability by allowing remote attackers to read the SNMP Read-Write Community string and perform unauthorized actions via normally restrict...

CVE-2005-4400

CVE-2005-4400 is a documented cross-site scripting (XSS) vulnerability in Liferay Portal Enterprise (versions up to 3.6.1). The flaw affects the downloads/portal_ent component and can be exploited via the parameters _77_struts_action, p_p_mode, and p_p_state to inject arbitrary script/HTML. The i...