96 matches found
CVE-2009-4567
Viscacha 0.8 Gold is affected by multiple XSS vulnerabilities in editprofile.php (profile2 action). Specifically, the parameters (1) skype, (2) yahoo, (3) aol, (4) msn, and (5) jabber can be abused to inject arbitrary web script/HTML. The issue is exploitable by remote authenticated users, but th...
CVE-2009-4567
creationtimestamp| type| source ---|---|--- 2009-12-08 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/10354...
Gentoo Security Advisory GLSA 200609-19 (Firefox)
The remote host is missing updates announced in advisory GLSA 200609-19. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...
CVE-2007-4567
The ipv6hopjumbo function in net/ipv6/exthdrs.c in the Linux kernel before 2.6.22 does not properly validate the hop-by-hop IPv6 extended header, which allows remote attackers to cause a denial of service NULL pointer dereference and kernel panic via a crafted IPv6 packet...
CVE-2007-4567
The ipv6hopjumbo function in net/ipv6/exthdrs.c in the Linux kernel before 2.6.22 does not properly validate the hop-by-hop IPv6 extended header, which allows remote attackers to cause a denial of service NULL pointer dereference and kernel panic via a crafted IPv6 packet...
CVE-2007-4567
CVE-2007-4567 affects the Linux kernel (ipv6_hop_jumbo in net/ipv6/exthdrs.c). The vulnerability arises from improper validation of the hop-by-hop IPv6 extended header, enabling remote attackers to trigger a denial of service via a crafted IPv6 packet that can cause a NULL pointer dereference and...
Mandrake Linux Security Advisory : mozilla-thunderbird (MDKSA-2006:169)
A number of security vulnerabilities have been discovered and corrected in the latest Mozilla Thunderbird program, version 1.5.0.7. This update provides the latest Thunderbird to correct these issues. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in...
Fedora Core 5 : firefox-1.5.0.7-1.fc5 (2006-976)
Mozilla Firefox is an open source Web browser. Two flaws were found in the way Firefox processed certain regular expressions. A malicious web page could crash the browser or possibly execute arbitrary code as the user running Firefox. CVE-2006-4565, CVE-2006-4566 A number of flaws were found in...
CentOS 4 : thunderbird (CESA-2006:0677)
Updated thunderbird packages that fix several security bugs are now available for Red Hat Enterprise Linux 4. This update has been rated as having critical security impact by the Red Hat Security Response Team. Mozilla Thunderbird is a standalone mail and newsgroup client. Two flaws were found in...
CVE-2006-4567
CVE-2006-4567 affects Firefox < 1.5.0.7 and Thunderbird
RHEL 4 : firefox (RHSA-2006:0675)
The remote Redhat Enterprise Linux 4 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2006:0675 advisory. Mozilla Firefox is an open source Web browser. Two flaws were found in the way Firefox processed certain regular expressions. A malicious we...
RHEL 4 : thunderbird (RHSA-2006:0677)
Updated thunderbird packages that fix several security bugs are now available for Red Hat Enterprise Linux 4. This update has been rated as having critical security impact by the Red Hat Security Response Team. Mozilla Thunderbird is a standalone mail and newsgroup client. Two flaws were found in...
CVE-2005-4567
CVE-2005-4567 describes multiple cross-site scripting (XSS) vulnerabilities in FTGate Technology’s FTGate 4.4 (Build 4.4.000 Oct 26 2005). The issue arises from unsanitized input in web-accessible endpoints: index.fts via the href parameter, and /domains/index.fts, /config/licence.fts, and /confi...
CVE-2018-4567
This CVE entry is rejected/not used and does not represent an active vulnerability.
CVE-2023-4567
CVE-2023-4567 is a confirmed issue in Red Hat Ansible Tower API described as a blind SQL injection vulnerability. The vulnerability arises in the SOCIAL_AUTH_GITHUB_KEY parameter used by the /api/v2/settings/all/ endpoint, which could allow an attacker to craft malicious SQL queries and potential...
CVE-2023-4567
Removed by vendor...