114 matches found
CVE-2009-4761
CVE-2009-4761 concerns the Mini-stream RM Downloader where a stack-based buffer overflow is triggered by a long string in a .smi file. The vulnerability allows remote attackers to execute arbitrary code, as described in the CVE entry. Public references and related OpenVAS entries corroborate a bu...
Mini Stream RM Downloader '.smi' File Buffer Overflow Vulnerability
The host is installed with Mini-stream RM Downloader and is prone to buffer overflow vulnerability. OpenVAS Vulnerability Test $Id: secpodministreamrmdownloaderbofvuln.nasl 5055 2017-01-20 14:08:39Z teissa $ Mini Stream RM Downloader '.smi' File Buffer Overflow Vulnerability Authors: Madhuri D...
CVE-2009-4761
creationtimestamp| type| source ---|---|--- 2009-05-01 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/8594...
CVE-2008-4761
CVE-2008-4761 describes a Cross-site scripting (XSS) vulnerability in Kayako eSupport 3.20.2, triggered through the jsMakeSrc parameter in includes/htmlArea/plugins/HtmlTidy/html-tidy-logic.php. The issue is believed to reside in the HTMLArea HTMLTidy (HTML Tidy) plugin rather than eSupport itsel...
CVE-2008-4761
Cross-site scripting XSS vulnerability in includes/htmlArea/plugins/HtmlTidy/html-tidy-logic.php in Kayako eSupport 3.20.2 allows remote attackers to inject arbitrary web script or HTML via the jsMakeSrc parameter. NOTE: the provenance of this information is unknown; the details are obtained sole...
CVE-2008-4761
creationtimestamp| type| source ---|---|--- 2008-10-23 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/32527...
ClamAV Milter Blackhole-Mode Remote Code Execution
This module exploits a flaw in the Clam AntiVirus suite 'clamav-milter' Sendmail mail filter. Versions prior to v0.92.2 are vulnerable. When implemented with black hole mode enabled, it is possible to execute commands remotely due to an insecure popen call. This module requires Metasploit:...
SuSE 10 Security Update : htdig (ZYPP Patch Number 4761)
A flaw in the htsearch Program could be exploited by attackers to conduct cross-site scripting XSS attacks. CVE-2007-6110 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if descriptio...
CVE-2007-4761
CVE-2007-4761 describes an unrestricted file upload vulnerability in upload.php for Barbo91 1.1, enabling remote attackers to upload and execute arbitrary code via unspecified vectors. The description notes unknown provenance and that details are from third-party information; no concrete exploit ...
CVE-2006-4761
Affected software: SharpReader (Luke Hutteman) RSS/Atom feed reader. Vulnerability: Multiple cross-site scripting (XSS) vulnerabilities allow remote attackers to inject arbitrary script/HTML via a web feed. Cause/scope: Exploitation demonstrated in test suites for RSS/Atom feeds; vulnerability re...
CVE-2005-4761
BEA WebLogic Server and WebLogic Express 8.1 SP4 and earlier, 7.0 SP5 and earlier, and 6.1 SP7 and earlier log the Java command line at server startup, which might include sensitive information passwords or keyphrases in the server log file when the -D option is used...
CVE-2005-4761
BEA WebLogic Server and WebLogic Express versions 8.1 SP4 and earlier, 7.0 SP5 and earlier, and 6.1 SP7 and earlier log the Java command line at server startup, which may include passwords or keyphrases in the server log when the -D option is used. Affected products/versions are described in mult...
