112 matches found
SSL Certificate Fails to Adhere to Basic Constraints / Key Usage Extensions
An X.509 certificate sent by the remote host contains one or more violations of the restrictions imposed on it by RFC 5280. This means that either a root or intermediate Certificate Authority signed a certificate incorrectly. Certificates that fail to adhere to the restrictions in their extension...
CVE-2010-5280
creationtimestamp| type| source ---|---|--- 2010-10-09 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/15222...
ZIM Server Multiple Vulnerabilities
The host is installed with ZIM Server and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbzimservermultvuln800201.nasl 5370 2017-02-20 15:24:26Z cfi $ ZIM Server Multiple Vulnerabilities Authors: Sujit Ghosal Copyright: Copyright c 2008 Greenbone Networks GmbH,...
CVE-2008-5280
The CVE-2008-5280 vulnerability affects the Local ZIM Server in Zilab Chat and Instant Messaging (ZIM) Server 2.0/2.1. It allows remote attackers to cause a denial of service (NULL pointer dereference) through crafted requests without required parameters. The OpenVAS/NVD records corroborate this ...
CVE-2007-5285
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2007-5280. Reason: This candidate is a duplicate of CVE-2007-5280. Notes: All CVE users should reference CVE-2007-5280 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...
CVE-2007-5280
Multiple cross-site scripting XSS vulnerabilities in messages.jsp in AppFuse before 2.0 Final allow remote attackers to inject arbitrary web script or HTML via unspecified input that is recorded in 1 success or 2 error messages...
Design/Logic Flaw
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2007-5280. Reason: This candidate is a duplicate of CVE-2007-5280. Notes: All CVE users should reference CVE-2007-5280 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...
CVE-2007-5280
CVE-2007-5280 describes multiple XSS vulnerabilities in AppFuse before 2.0 Final, triggered via input recorded in (1) success or (2) error messages within messages.jsp. The affected component is the messages.jsp handling in AppFuse; root cause is improper sanitization/encoding of user input leadi...
CVE-2007-5280
Multiple cross-site scripting XSS vulnerabilities in messages.jsp in AppFuse before 2.0 Final allow remote attackers to inject arbitrary web script or HTML via unspecified input that is recorded in 1 success or 2 error messages...
CVE-2006-5280
CVE-2006-5280 concerns Leicestershire communityPortals 1.0 (build 20051018 and earlier). The vulnerability is a PHP remote file inclusion in includes/import-archive.php that allows an attacker to execute arbitrary PHP code by supplying a URL in the cp_root_path parameter. The accompanying CVSS/me...
CVE-2006-5280
PHP remote file inclusion vulnerability in includes/import-archive.php in Leicestershire communityPortals 1.0 build 20051018 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the cprootpath parameter...