77 matches found
CVE-2010-4631
Multiple cross-site scripting XSS vulnerabilities in ASPilot Pilot Cart 7.3 allow remote attackers to inject arbitrary web script or HTML via the 1 countrycode parameter to contact.asp, USERNAME parameter to 2 gateway.asp and 3 cart.asp, and the specific parameter to 4 quote.asp and 5 buyitnow...
CVE-2010-4631
ASPilot Pilot Cart 7.3 is affected by multiple XSS vulnerabilities. The issues enable injection of arbitrary web script/HTML via the following inputs: (1) countrycode in contact.asp, (2) USERNAME in gateway.asp, (3) USERNAME in cart.asp, and the specific parameter in quote.asp and buyitnow. The c...
CVE-2010-4631
creationtimestamp| type| source ---|---|--- 2010-11-07 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/15448...
Debian: Security Advisory (DSA-2000-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
[SECURITY] [DSA 2000-1] New ffmpeg packages fix several vulnerabilities
------------------------------------------------------------------------ Debian Security Advisory DSA-2000-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff February 18, 2010 http://www.debian.org/security/faq -...
CVE-2009-4631
Off-by-one error in the VP3 decoder vp3.c in FFmpeg 0.5 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a crafted VP3 file that triggers an out-of-bounds read and possibly memory corruption...
CVE-2009-4631
CVE-2009-4631 describes an off-by-one error in the VP3 decoder (vp3.c) of FFmpeg 0.5 leading to an out-of-bounds read and potential memory corruption, enabling a remote attacker to cause a denial of service and possibly execute arbitrary code via a crafted VP3 file. The vulnerability is documente...
CVE-2008-4631
Stack-based buffer overflow in the Message::AddToString function in message/Message.cpp in MUSCLE before 4.40 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted message. NOTE: some of these details are obtained from third party information...
CVE-2008-4631
CVE-2008-4631 refers to a stack-based buffer overflow in the MUSCLE project, specifically in the function Message::AddToString within message/Message.cpp , affecting versions prior to 4.40. The vulnerability allows remote attackers to crash the application (Denial of Service) and potentially exec...
Gentoo Security Advisory GLSA 200710-05 (qgit)
The remote host is missing updates announced in advisory GLSA 200710-05. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2007-4631
The DataLoader::doStart function in dataloader.cpp in QGit 1.5.6 and other versions up to 2pre1 allows local users to overwrite arbitrary files and execute arbitrary code via a symlink attack on temporary files with predictable filenames...
CVE-2006-4631
The CVE refers to SoftBB 0.1 (and possibly earlier) with a vulnerability in admin/save_opt.php: Direct static code injection allows remote authenticated users to upload and execute arbitrary PHP code via the cache_forum parameter, which saves the code to info_options.php and makes it accessible v...
CVE-2005-4631
CVE-2005-4631 : SQL injection in index.php in Zina 0.12.07 and earlier via the p parameter. Root cause: unsafely handled user input enabling arbitrary SQL execution. Impact per CVSS: partial confidentiality, integrity, and availability. No exploitation details or remediation are provided in the s...
CVE-2024-4631
CVE-2024-4631 is rejected and not used; please refer to CVE-2024-3557 instead.
