9651 matches found
Debian calendar privilege escalation
Privileges are not dropped on executing program specified by user...
Possible root compromose with bsdmainutils 6.0.x < 6.0.15 (Debian testing/unstable)
Possible root compromise with calendar bsdmainutils 6.0.x 6.0.15 -------------------------------------------------------------------- Introduction ------------ The calendar utility is a handy little tool that informs you about upcoming events. Each user can define his/her own calendar events. In...
Debian bsdmainutils 6.0.14 - Calendar Information Disclosure
// source: https://www.securityfocus.com/bid/11077/info The calendar utility contained in the bsdmainutils package on Debian GNU/Linux systems is reported susceptible to an information disclosure vulnerability. This is due to a lack of proper file authorization checks by the application. The...
Multiple Cross Site Scripting Vulnerabilities in eGroupWare
--------------------------------------------------------------------------- Multiple Cross Site Scripting Vulnerabilities in eGroupWare --------------------------------------------------------------------------- Author: Joxean Koret Date: 2004 Location: Basque Country...
eGroupWare 1.0 Calendar Module - date Cross-Site Scripting
eGroupWare 1.0 Calendar Module - date Cross-Site Scripting source: https://www.securityfocus.com/bid/11013/info It is reported that eGroupWare is susceptible to multiple cross-site scripting and HTML injection vulnerabilities. The cross-site scripting issues present themselves in the various...
Sun Java Calendar Version Detection
Binary data 4552.prm...
Sun Java Calendar Logging Component Unspecified Remote DoS
Binary data 4553.prm...
phpGroupWare Multiple Module SQL Injection
The remote host seems to be running PhpGroupWare, a multi-user groupware suite written in PHP. It has been reported that this version may be prone to multiple SQL injection vulnerabilities in the 'calendar' and 'infolog' modules. The problems exist due to insufficient sanitization of user-supplie...
CVE-2004-0742
Sun Java System Portal Server 6.2 formerly Sun ONE allows remote authenticated users to obtain Calendar Server privileges and modify Calendar data by changing the display options to a non-default view...
CVE-2004-0742
The CVE-2004-0742 entry affects Sun Java System Portal Server 6.2 (formerly Sun ONE). The vulnerability allows remote authenticated users to gain Calendar Server privileges and modify Calendar data by changing display options to a non-default view. The primary affected component is the Calendar/D...
CVE-2004-0742
Sun Java System Portal Server 6.2 formerly Sun ONE allows remote authenticated users to obtain Calendar Server privileges and modify Calendar data by changing the display options to a non-default view...
Sun Java System Portal Server fails to properly handle changes to display options
Overview There is a vulnerability in the Sun Java System Portal Server, which could allow a remote, authenticated user to gain access to the administrative credentials of the Calendar server. Description The Sun Java System Portal Server is a content management system that provides centralized...
Solaris 2.6 (x86) : 105567-13
CDE 1.2x86: calendar manager patch. Date this patch was last updated by Sun : Apr/01/02 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if !...
Solaris 2.5.1 (sparc) : 104976-08
OpenWindows 3.5.1: Calendar Manager patch. Date this patch was last updated by Sun : Mar/08/02 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if !...
Solaris 7 (x86) : 107023-11
CDE 1.3x86: Calendar Manager patch. Date this patch was last updated by Sun : Sep/21/04 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if !...
Topic Calendar 1.0.1 - 'Calendar_Scheduler.php' Cross-Site Scripting
source: https://www.securityfocus.com/bid/12893/info Topic Calendar is reportedly affected by a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code execute...
Topic Calendar 1.0.1 - Calendar_Scheduler.php Cross-Site Scripting
Topic Calendar 1.0.1 - CalendarScheduler.php Cross-Site Scripting source: https://www.securityfocus.com/bid/12893/info Topic Calendar is reportedly affected by a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An...
BosDev BosDates 3.x - SQL Injection
source: https://www.securityfocus.com/bid/9639/info An SQL injection vulnerability has been reported to affect BosDates calendar system. The issue arises due to insufficient sanitization of user supplied data. As a result of this issue an attacker could modify the logic and structure of database...
ZH2004-05SA (security advisory): Sql Injection Vulnerability in BosDates
ZH2004-05SA security advisory: Sql Injection Vulnerability in BosDates Published: 11 february 2004 Released: 11 february 2004 Name: BosDates Affected Systems: current and prior versions Issue: Sql Injection Vulnerability Author: G00db0y from Zone-h Security Labs - [email protected] Vendor:...