106 matches found
Novell eDirectory多个缓冲区溢出漏洞
BUGTRAQ ID: 31553 CVE ID:CVE-2008-4478 CVE-2008-4479 CVE-2008-4480 CNCVE ID:CNCVE-20084478 CNCVE-20084479 CNCVE-20084480 Novell eDirectory是一款支持轻量目录访问协议LDAP并基于目录的身份管理系统。 Novell eDirectory存在多个缓冲区溢出如下: -WEB控制台运行在TCP...
openSUSE 10 Security Update : tk (tk-4480)
This update fixes a buffer overflow that occurs while processing interlaced/animatedGIF images. CVE-2007-4851 This bug could be used to execute code remotely. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE...
CVE-2007-4480
CVE-2007-4480 affects the Sirius 1.0 WordPress theme. The vulnerability is a Cross-Site Scripting (XSS) in index.php via PATH_INFO (PHP_SELF), allowing remote attackers to inject arbitrary script/HTML. No exploitation details are provided; remediation is to update the theme (patch/version update ...
CVE-2006-4480
CVE-2006-4480 affects Nuked-Klan 1.7 SP4.3. The issue is an incomplete blacklist in the nk_CSS function (nuked.php) that can bypass anti‑XSS protections, allowing remote attackers to inject arbitrary script/HTML via a JavaScript payload in an attribute value not covered by the blacklist (demonstr...
CVE-2005-4480
CVE-2005-4480 : A cross-site scripting (XSS) vulnerability affects Plexcor CMS 4.0 and earlier, allowing remote attackers to inject arbitrary web script or HTML via unspecified search parameters. Documents do not specify the exact vulnerable component/version beyond the CMS family, nor provide co...