622 matches found
JVN#18405927 Multiple Cybozu products vulnerable to cross-site request forgery
Multiple Cybozu products contain a cross-site request forgery vulnerability. Impact If a user views a malicious web page while logged onto the Cybozu web interface, the user's schedules and other configuration settings may be altered. Solution Update the Software Apply the latest updates provided...
Debian Security Advisory DSA 1516-1 (dovecot)
The remote host is missing an update to dovecot announced via advisory DSA 1516-1. OpenVAS Vulnerability Test $Id: deb15161.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1516-1 dovecot Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...
CVE-2008-0306
sdbstarter in SAP MaxDB 7.6.0.37, and possibly other versions, allows local users to execute arbitrary commands by using unspecified environment variables to modify configuration settings...
Design/Logic Flaw
sdbstarter in SAP MaxDB 7.6.0.37, and possibly other versions, allows local users to execute arbitrary commands by using unspecified environment variables to modify configuration settings...
CVE-2008-0306: Undefined Security Weakness
sdbstarter in SAP MaxDB 7.6.0.37, and possibly other versions, allows local users to execute arbitrary commands by using unspecified environment variables to modify configuration settings...
Cross site request forgery (csrf)
Cross-site request forgery CSRF vulnerability in the management interface in multiple Yamaha RT series routers allows remote attackers to change password settings and probably other configuration settings as administrators via unspecified vectors...
CVE-2008-0524
Cross-site request forgery CSRF vulnerability in the management interface in multiple Yamaha RT series routers allows remote attackers to change password settings and probably other configuration settings as administrators via unspecified vectors...
Cross site request forgery (csrf)
Cross-site request forgery CSRF vulnerability in deanspermalinksmigration.php in the Dean's Permalinks Migration 1.0 plugin for WordPress allows remote attackers to modify the oldstructure aka deanpmconfigoldstructure configuration setting as administrators via the oldstruct parameter in a...
CVE-2008-0524
Cross-site request forgery CSRF vulnerability in the management interface in multiple Yamaha RT series routers allows remote attackers to change password settings and probably other configuration settings as administrators via unspecified vectors...
CVE-2008-0524
CVE-2008-0524 is a CSRF flaw in the web management interface of multiple Yamaha RT series routers. The vulnerability allows an attacker to change password and potentially other configuration settings by convincing an administrator, via unspecified vectors, to visit a malicious site while authenti...
CVE-2008-0524: Cross-Site Request Forgery (CSRF)
Cross-site request forgery CSRF vulnerability in the management interface in multiple Yamaha RT series routers allows remote attackers to change password settings and probably other configuration settings as administrators via unspecified vectors...
JVN#88575577 Multiple Yamaha routers vulnerable to cross-site request forgery
Multiple Yamaha routers provide a web-based interface for users to configure the settings of the routers. The web interface is vulnerable to cross-site request forgery. Impact If the administrator views a malicious website while logged onto the web interface, the password and other configuration...
Microsoft Internet Explorer Script Error Handling Memory Corruption Vulnerability
Description Microsoft Internet Explorer is prone to a remote code-execution vulnerability. An attacker may exploit this issue by enticing victims into viewing maliciously crafted HTML content. Successfully exploiting this issue allows arbitrary machine code to execute in the context of the affect...
BaoFeng Storm MPS.DLL ActiveX Control Multiple Remote Buffer Overflow Vulnerabilities
Description BaoFeng Storm ActiveX control is prone to multiple buffer-overflow vulnerabilities because it fails to perform adequate boundary checks on user-supplied data. Successfully exploiting these issues allows remote attackers to execute arbitrary code in the context of the application using...
Design/Logic Flaw
Cisco Unified Communications Manager CUCM, formerly CallManager and Unified Presence Server CUPS allow remote attackers to obtain sensitive information via unspecified vectors that reveal the SNMP community strings and configuration settings, aka 1 CSCsj20668 and 2 CSCsj25962...
CVE-2007-3776
Cisco Unified Communications Manager CUCM, formerly CallManager and Unified Presence Server CUPS allow remote attackers to obtain sensitive information via unspecified vectors that reveal the SNMP community strings and configuration settings, aka 1 CSCsj20668 and 2 CSCsj25962...
CVE-2007-3776
Cisco Unified Communications Manager CUCM, formerly CallManager and Unified Presence Server CUPS allow remote attackers to obtain sensitive information via unspecified vectors that reveal the SNMP community strings and configuration settings, aka 1 CSCsj20668 and 2 CSCsj25962...
CVE-2007-3776: Undefined Security Weakness
Cisco Unified Communications Manager CUCM, formerly CallManager and Unified Presence Server CUPS allow remote attackers to obtain sensitive information via unspecified vectors that reveal the SNMP community strings and configuration settings, aka 1 CSCsj20668 and 2 CSCsj25962...