150 matches found
CVE-2009-4516
Cross-site scripting XSS vulnerability in the FAQ Ask module 5.x and 6.x before 6.x-2.0, a module for Drupal, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
Fixed XSS vulnerability at search.surfcanyon.com
Security researcher Yacin, has submitted on 01/06/2009 a cross-site-scripting XSS vulnerability affecting search.surfcanyon.com, which at the time of submission ranked 4516 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 31/03/2012. It is...
CVE-2008-4516
CVE-2008-4516 concerns SQL injection in Galerie 3.2 via galerie.php, where the pic parameter can be manipulated to execute arbitrary SQL commands remotely. Affected product: Galerie 3.2. Impact from NVD: partial confidentiality, integrity, and availability with a CVSS v2 base score of 7.5 (HIGH)....
CVE-2008-4516
creationtimestamp| type| source ---|---|--- 2008-10-05 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6675...
iDefense Security Advisory 02.20.08: Symantec Veritas Storage Foundation Scheduler Service DoS Vulnerability
iDefense Security Advisory 02.20.08 http://labs.idefense.com/intelligence/vulnerabilities/ Feb 20, 2008 I. BACKGROUND The Veritas Storage Foundation is based on the Veritas File System and Veritas Volume Manager products. It allows virtualization of storage over a variety of platforms. It contain...
Symantec Veritas Storage Foundation Scheduler服务远程拒绝服务漏洞
BUGTRAQ ID: 27440 CVECAN ID: CVE-2007-4516 Veritas Storage Foundation是用于管理Veritas产品存储的解决方案。 Veritas Storage Foundation的Veritas Scheduler服务处理畸形用户请求时存在漏洞,远程攻击者可能利用此漏洞导致服务不可用。 如果Veritas Scheduler服务(VxSchedService.exe)接收到了畸形报文,就会触发无效的内存访问,导致该服务崩溃。攻击者无需认证便可以利用这个漏洞,但必须要在服务的4888端口创建TCP会话。 Symantec Verit...
CVE-2007-4516
Affected product: Symantec Veritas Storage Foundation 5.0 for Windows with the Scheduler Service (VxSchedService.exe). The vulnerability allows remote, unauthenticated attackers to crash or hang the daemon by sending malformed packets over TCP port 4888, leading to a DoS. The issue is tied to rem...
CVE-2006-4516
CVE-2006-4516 affects FreeBSD 6.0-RELEASE. The kernel’s PT_LWPINFO ptrace handling has a signedness flaw: a large negative data value can bypass the signed check and be passed to copyout, causing memory corruption and kernel panic. Impact is a local denial-of-service condition. Described in iDefe...
iDefense Security Advisory 10.10.06: FreeBSD ptrace PT_LWPINFO Denial of Service Vulnerability
FreeBSD ptrace PTLWPINFO Denial of Service Vulnerability iDefense Security Advisory 10.10.06 http://www.idefense.com/intelligence/vulnerabilities/ Oct 10, 2006 I. BACKGROUND FreeBSD is a modern operating system for x86, amd64, Alpha, IA-64, PC-98 and SPARC architectures. It's based on the UNIX...
CVE-2018-4516
...