179 matches found
PT-2012-1010
Name of the Vulnerable Software and Affected Versions Cisco IOS versions 12.2 through 12.4 Cisco IOS versions 15.0 through 15.2 Cisco IOS XE versions 2.1.x through 2.6.x Cisco IOS XE versions 3.1.xS through 3.4.xS before 3.4.2S Cisco IOS XE versions 3.5.xS before 3.5.1S Cisco IOS XE versions...
CVE-2011-4500
CVE-2011-4500 affects the Cisco Linksys WRT54GX with firmware 2.00.05. When UPnP IGD is enabled, the SOAP server is configured to listen on the WAN port, enabling remote administration of the firewall via SOAP requests. This is the concrete vulnerability as described in multiple sources (NVD, Red...
SonicWall NSA 4500 protection bypass
ARP spoofing protection doesn't work if used in conjunction...
CVE-2010-4500
CVE-2010-4500 affects the MCGIGUY FreeTicket 1.0.0 application. When magic_quotes_gpc is disabled, remote attackers can trigger SQL injection via the sendmess action by supplying arbitrary values for the fields: name, email, subject, and message. The vulnerability arises from unsanitized inputs b...
CVE-2010-0567: Undefined Security Weakness
Unspecified vulnerability in Cisco ASA 5500 Series Adaptive Security Appliance 7.0 before 7.08.10, 7.2 before 7.24.45, 8.0 before 8.05.1, 8.1 before 8.12.37, and 8.2 before 8.21.15; and Cisco PIX 500 Series Security Appliance; allows remote attackers to cause a denial of service active IPsec tunn...
CVE-2009-4500
The CVE-2009-4500 issue affects Zabbix Server prior to 1.6.6, in the process_trap function (trapper/trapper.c). A crafted request that omits the expected colon separator can trigger a NULL pointer dereference, enabling remote attackers to cause a denial of service (crash). This vulnerability is d...
CVE-2008-4500
Serv-U 7.0.0.1 through 7.3, including 7.2.0.1, allows remote authenticated users to cause a denial of service CPU consumption via a crafted stou command, probably related to MS-DOS device names, as demonstrated using "con:1"...
CVE-2008-4500
CVE-2008-4500 affects Serv-U 7.0.0.1 through 7.3 (including 7.2.0.1). A remote authenticated user can cause a denial of service by issuing a crafted STOU command (notably with devices named like “con:1”), leading to CPU consumption. The issue is tied to handling of MS‑DOS device names in STOU. Ex...
CVE-2008-4500
creationtimestamp| type| source ---|---|--- 2008-10-03 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6660...
CVE-2007-4500
CVE-2007-4500 affects TunnelRunner in SSHKeychain prior to 0.8.2 beta. Description consistently notes an unspecified vulnerability that allows local users to gain privileges via unspecified vectors. The available sources do not provide concrete exploit details, affected components beyond TunnelRu...
CVE-2006-4500
Cross-site scripting XSS vulnerability in index.php in ezPortal/ztml CMS 1.0 allows remote attackers to inject arbitrary web script or HTML via the 1 about, 2 again, 3 lastname, 4 email, 5 password, 6 album, 7 id, 8 table, 9 desc, 10 doc, 11 mname, 12 max, 13 htpl, 14 pheader, and possibly other...
CVE-2006-4500
The CVE-2006-4500 entry concerns a Cross-site Scripting (XSS) flaw in ezPortal/ztml CMS 1.0. The vulnerability arises in index.php, where multiple parameters (including about, lastname, email, password, album, id, table, desc, doc, mname, max, htpl, pheader, and possibly others) can be used to in...
CVE-2006-0186
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2005-4500. Reason: This candidate is a duplicate of CVE-2005-4500. Notes: All CVE users should reference CVE-2005-4500 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...
CVE-2005-4500
SQL injection vulnerability in MusicBox 2.3 allows remote attackers to execute arbitrary SQL commands via the 1 show and 2 type parameter. NOTE: the provenance of this information is unknown, although it was later rediscovered...
CVE-2005-4500
MusicBox 2.3 is affected by CVE-2005-4500 due to an SQL injection in the show and type parameters, enabling remote attackers to execute arbitrary SQL commands. The connected sources confirm the vulnerability and its parameters, but do not provide remediation details in these documents.
CVE-2002-1796: Improper Verification of Cryptographic Signature
ChaiVM EZloader for HP color LaserJet 4500 and 4550 and HP LaserJet 4100 and 8150 does not properly verify JAR signatures for new services, which allows local users to load unauthorized Chai services...
jetdirect.crash.txt
--SLDf9lqlvOQaIe6s Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: quoted-printable Hi folks! I just played with our network printer a HP LaserJet 4500 and -- boom -- it crashed ;-=20 The HP JetDirect J3111A module with firmware G.05.35 suffers from a buffer overflow in it's...