46 matches found
CVE-2022-22303
An exposure of sensitive system information to an unauthorized control sphere vulnerability CWE-497 in FortiManager versions prior to 7.0.2, 6.4.7 and 6.2.9 may allow a low privileged authenticated user to gain access to the FortiGate users credentials via the config conflict file...
CVE-2022-22303
An exposure of sensitive system information to an unauthorized control sphere vulnerability CWE-497 in FortiManager versions prior to 7.0.2, 6.4.7 and 6.2.9 may allow a low privileged authenticated user to gain access to the FortiGate users credentials via the config conflict file...
CVE-2020-26100
chsh in cPanel before 88.0.3 allows a Jailshell escape SEC-497...
CVE-2020-26100
CVE-2020-26100 affects cPanel prior to 88.0.3, where the chsh component enables a Jailshell escape (SEC-497). The description across sources confirms the issue and version boundary, but detailed exploit steps or exploitability are not provided in the supplied documents. A patch is indicated by up...
filehippo.com XSS vulnerability
Vulnerable URL: http://filehippo.com/web/web-apps/%22%3E%3Csvg%20onload=prompt%22OPENBUGBOUNTY%22%3E Details: Description| Value ---|--- Patched:| Yes, at 28.07.2017 Latest check for patch:| 28.07.2017 19:18 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 497 VI...
CVE-2015-4198
Cross-site scripting XSS vulnerability in the web framework on Cisco Web Security Appliance WSA devices with software 8.5.0-497 allows remote attackers to inject arbitrary web script or HTML via an unspecified HTTP header, aka Bug ID CSCuu24409...
Cross site scripting
Cross-site scripting XSS vulnerability in the web framework on Cisco Web Security Appliance WSA devices with software 8.5.0-497 allows remote attackers to inject arbitrary web script or HTML via an unspecified HTTP header, aka Bug ID CSCuu24409...
Core Security Technologies Advisory 2009.0625
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Core Security Technologies - CoreLabs Advisory http://www.coresecurity.com/corelabs/ Internet Explorer Dynamic OBJECT tag and URLMON sniffing vulnerabilities 1. Advisory Information Title: Internet Explorer Dynamic OBJECT tag and URLMON sniffing...
Ubuntu: Security Advisory (USN-497-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Null pointer dereference
retroclient.exe in EMC Dantz Retrospect Backup Client 7.5.116 allows remote attackers to cause a denial of service daemon crash via malformed packets to TCP port 497, which trigger a NULL pointer dereference...
Memory corruption
retroclient.exe in EMC Dantz Retrospect Backup Client 7.5.116 allows remote attackers to cause a denial of service daemon crash via a series of long packets containing 0x00 characters to TCP port 497 that trigger memory corruption, probably involving an English product version on a Chinese OS...
CVE-2008-3290
retroclient.exe in EMC Dantz Retrospect Backup Client 7.5.116 allows remote attackers to cause a denial of service daemon crash via a series of long packets containing 0x00 characters to TCP port 497 that trigger memory corruption, probably involving an English product version on a Chinese OS...
CVE-2008-3290
retroclient.exe in EMC Dantz Retrospect Backup Client 7.5.116 allows remote attackers to cause a denial of service daemon crash via a series of long packets containing 0x00 characters to TCP port 497 that trigger memory corruption, probably involving an English product version on a Chinese OS...
CVE-2008-3287
retroclient.exe in EMC Dantz Retrospect Backup Client 7.5.116 allows remote attackers to cause a denial of service daemon crash via malformed packets to TCP port 497, which trigger a NULL pointer dereference...
EMC Retrospect客户端空指针引用漏洞
BUGTRAQ ID: 30313 EMC Retrospect是Windows平台下的备份和恢复软件。 Retrospect处理畸形格式的请求数据时存在漏洞，如果向Retrospect客户端的TCP 497端口发送了畸形报文的话，就会触发空指针引用，导致读访问破坏，客户端会终止，无法继续备份服务。 EMC Retrospect for Windows Client 7.5.116 EMC --- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.emcinsignia.com/updates...
EMC Retrospect客户端retroclient.exe远程内存破坏漏洞
BUGTRAQ ID: 30306 EMC Retrospect是Windows平台下的备份和恢复软件。 Retrospect的retroclient.exe进程默认监听于TCP 497端口。如果向该端口连续发送长度为2064字节内容为0x00的报文的话，在30秒到5分钟后状态框会显示：Client networking not available, or service not running。继续发送报文会导致retroclient.exe进程终止，完全损失备份服务。 EMC Retrospect for Windows Client 7.5.116 EMC ---...
FGA-2008-16: EMC Dantz Retrospect 7 backup Client 7.5.116 Remote Memory corruption Vulnerability
FGA-2008-16: EMC Dantz Retrospect 7 backup Client 7.5.116 Remote Memory corruption Vulnerability http://www.fortiguardcenter.com/advisory/FGA-2008-16.html July 20, 2008 -- Affected Vendors: EMC -- Affected Products: EMC Dantz Retrospect 7 backup Client 7.5.116 -- Vulnerability Details: The...
Debian: Security Advisory (DSA-497)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Debian Security Advisory DSA 497-1 (mc)
The remote host is missing an update to mc announced via advisory DSA 497-1. OpenVAS Vulnerability Test $Id: deb4971.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 497-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...