Fedora Update for jetty FEDORA-2012-0730

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Fedora Update for jetty FEDORA-2012-0752

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Fedora 15 : jetty-6.1.26-7.fc15 (2012-0752)

Back-port of upstream jetty patches for CVE-2011-4461, hash DOS. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing addition...

CVE-2011-4461

CVE-2011-4461 affects Jetty (e.g., Jetty 8.1.0.RC2 and earlier). The vulnerability arises from hash table collisions in Jetty’s handling of form parameters, enabling a remote attacker to cause CPU exhaustion/DoS by sending crafted parameters. IBM and related advisories consistently describe the D...

CVE-2011-4461

Jetty 8.1.0.RC2 and earlier computes hash values for form parameters without restricting the ability to trigger hash collisions predictably, which allows remote attackers to cause a denial of service CPU consumption by sending many crafted parameters...

CVE-2010-4461

Technical details (affected product, vulnerability vector, impact, or fix) are not provided in the connected documents. Monitor for updates as more information may be available in external sources.

CVE-2009-4461

FlatPress 0.909 is affected by multiple cross-site scripting (XSS) vulnerabilities via PATH_INFO to contact.php, login.php, and search.php. The underlying issue is XSS in the handling of PATH_INFO, as shown in historical OpenVAS tests (e.g., “FlatPress

CVE-2009-4461

creationtimestamp| type| source ---|---|--- 2009-12-26 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/10688...

CVE-2008-4461

CVE-2008-4461 affects Vastal I-Tech Dating Zone (likely version 0.9.9). The vulnerability is an SQL injection in the advanced_search_results.php script allowing an attacker to manipulate the fage parameter to execute arbitrary SQL commands. This enables remote exploitation with potential impact o...

CVE-2008-4461

creationtimestamp| type| source ---|---|--- 2008-09-06 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6388...

CVE-2007-4461

NuFW 2.2.3, and certain other versions after 2.0, allows remote attackers to bypass time-based packet filtering rules via certain "out of period" choices of packet transmission time...

CVE-2007-4461

Removed by vendor...

CVE-2007-4461

CVE-2007-4461 affects NuFW 2.2.3 and certain later versions after 2.0. The issue allows remote attackers to bypass time-based packet filtering rules by selecting packet transmission times that are “out of period.” The official description across multiple sources states that this bypass can underm...

CVE-2006-4461

Summary: Paessler IPCheck Server Monitor before 5.3.3.639/640 does not properly implement a “list of acceptable host IP addresses in the probe settings.” The provided documents do not specify the exact impact or exploitation vectors. Affected component is the probe settings IP allowlists; root ca...

CVE-2006-4461

Paessler IPCheck Server Monitor before 5.3.3.639/640 does not properly implement a "list of acceptable host IP addresses in the probe settings," which has unknown impact and attack vectors...

CVE-2005-4461

The CVE-2005-4461 entry concerns Beehive Forum (version 0.6.2 and earlier) with a SQL injection in index.php triggered by the user_sess parameter. The underlying issue allows an attacker to remotely execute arbitrary SQL commands, affecting the database via the vulnerable script. The available re...