59 matches found
CVE-2009-5028
Stack-based buffer overflow in Namazu before 2.0.20 allows remote attackers to cause a denial of service daemon crash or possibly execute arbitrary code via a crafted request containing an empty uri field...
CVE-2009-5028
CVE-2009-5028 affects Namazu, a full-text search engine. It is a stack-based buffer overflow in Namazu prior to 2.0.20, exploitable by a crafted request with an empty uri field, potentially causing a daemon crash or arbitrary code execution. Public sources (SUSE/Gentoo GLSA) indicate remediation ...
CVE-2010-5028
SQL injection vulnerability in the JExtensions JE Job comjejob component 1.0 for Joomla! allows remote attackers to execute arbitrary SQL commands via the catid parameter in an item action to index.php...
CVE-2010-5028
CVE-2010-5028 describes an SQL injection in Joomla! component JE Job (com_jejob) v1.0. The vulnerability occurs in the catid parameter of an item action to index.php, leading to arbitrary SQL execution and potential unauthorized access to sensitive data. Affected software is the Joomla! JE Job ex...
CVE-2010-5028
SQL injection vulnerability in the JExtensions JE Job comjejob component 1.0 for Joomla! allows remote attackers to execute arbitrary SQL commands via the catid parameter in an item action to index.php...
CVE-2010-5028
creationtimestamp| type| source ---|---|--- 2010-05-14 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/12601 2010-05-28 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/12782...
Gentoo Security Advisory GLSA 200907-15 (nagios-core)
The remote host is missing updates announced in advisory GLSA 200907-15. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...
openSUSE Security Update : nagios (nagios-531)
A CSRF bug in nagios' cmd.cgi CVE-2008-5028 has been fixed as well as an authentication bypass CVE-2008-5027. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update nagios-531. The text description o...
Ubuntu USN-698-3 (nagios2)
The remote host is missing an update to nagios2 announced via advisory USN-698-3. OpenVAS Vulnerability Test $Id: ubuntu6983.nasl 7969 2017-12-01 09:23:16Z santu $ $Id: ubuntu6983.nasl 7969 2017-12-01 09:23:16Z santu $ Description: Auto-generated from advisory USN-698-3 nagios2 Authors: Thomas...
Ubuntu 8.04 LTS : nagios2 vulnerabilities (USN-698-3)
It was discovered that Nagios was vulnerable to a Cross-site request forgery CSRF vulnerability. If an authenticated nagios user were tricked into clicking a link on a specially crafted web page, an attacker could trigger commands to be processed by Nagios and execute arbitrary programs. This...
Ubuntu USN-698-2 (nagios3)
The remote host is missing an update to nagios3 announced via advisory USN-698-2. OpenVAS Vulnerability Test $Id: ubuntu6982.nasl 7969 2017-12-01 09:23:16Z santu $ Description: Auto-generated from advisory USN-698-2 nagios3 Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...
Ubuntu: Security Advisory (USN-698-2)
The remote host is missing an update for the SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
USN-698-3: Nagios vulnerabilities
It was discovered that Nagios was vulnerable to a Cross-site request forgery CSRF vulnerability. If an authenticated nagios user were tricked into clicking a link on a specially crafted web page, an attacker could trigger commands to be processed by Nagios and execute arbitrary programs. This...
[Backports-security-announce] Security Update for nagios3
Jan Wagner uploaded a new package for nagios3 which fixed the following security problem: CVE-2008-5028, SA32610 and Debian Bug 504894 Andreas Ericsson has discovered a vulnerability in Nagios, which can be exploited by malicious people to conduct cross-site request forgery attacks. The applicati...
[Backports-security-announce] Security Update for nagios3
Jan Wagner uploaded a new package for nagios3 which fixed the following security problem: CVE-2008-5028, SA32610 and Debian Bug 504894 Andreas Ericsson has discovered a vulnerability in Nagios, which can be exploited by malicious people to conduct cross-site request forgery attacks. The applicati...
CVE-2008-5028
Cross-site request forgery CSRF vulnerability in cmd.cgi in 1 Nagios 3.0.5 and 2 op5 Monitor before 4.0.1 allows remote attackers to send commands to the Nagios process, and trigger execution of arbitrary programs by this process, via unspecified HTTP requests...
CVE-2008-5028
Cross-site request forgery CSRF vulnerability in cmd.cgi in 1 Nagios 3.0.5 and 2 op5 Monitor before 4.0.1 allows remote attackers to send commands to the Nagios process, and trigger execution of arbitrary programs by this process, via unspecified HTTP requests...
CVE-2007-5028
CVE-2007-5028 affects Dibbler 0.6.0 on Linux. The issue is weak world-writable permissions for unspecified files in /var/lib/dibbler, with unknown impact and local attack vectors. Public documents from NVD, Red Hat, Ubuntu, Debian, OSV, and others corroborate the weak-permission description; no c...
CVE-2006-5028
CVE-2006-5028 : A directory traversal flaw exists in SWsoft Plesk 7.5 Reload and Plesk 7.6 for Windows, in filemanager/filemanager.php, where a crafted file parameter using ../ in a chdir action lets remote attackers list arbitrary directories. This is documented in the NVD entries, with the impa...