CVE-2007-0240

The CVE-2007-0240 entry describes a cross-site scripting (XSS) vulnerability in Zope 2.10.2 and earlier, exploitable via unspecified vectors in HTTP GET requests, allowing an attacker to inject arbitrary web script/HTML that runs in the victim’s browser. The OpenVAS/Debian/SUSE/Nessus advisories ...

CVE-2007-0240

Cross-site scripting XSS vulnerability in Zope 2.10.2 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors in a HTTP GET request...

Kronolith: Local file inclusion

Background Kronolith is a web-based calendar which relies on the Horde Framework for integration with other applications. Description Kronolith contains a mistake in lib/FBView.php where a raw, unfiltered string is used instead of a sanitized string to view local files. Impact An authenticated...

Cisco Secure Access Control Server vulnerable to a stack-based buffer overflow via a specially crafted "HTTP GET" request

Overview A vulnerability in the web administrative server supplied with Cisco Secure ACS products could allow a remote attacker to execute arbitrary code on an affected system. Description Cisco Secure ACS is a Remote Access Dial-In User Service RADIUS and Terminal Access Controller Access Contro...

EUVD-2006-6838

AIDeX Mini-WebServer 1.1 early release 3 allows remote attackers to cause a denial of service daemon crash via a flood of HTTP GET requests, possibly related to display of HTTP log data by the GUI. NOTE: some of these details are obtained from third party information...

CVE-2006-6855

AIDeX Mini-WebServer 1.1 early release 3 is affected by a remote denial-of-service vulnerability: a flood of HTTP GET requests can crash the daemon, possibly tied to the GUI’s HTTP log data display. Root cause details are not provided, and no patch/mitigation is specified in the available documen...

CVE-2006-6855

AIDeX Mini-WebServer 1.1 early release 3 allows remote attackers to cause a denial of service daemon crash via a flood of HTTP GET requests, possibly related to display of HTTP log data by the GUI. NOTE: some of these details are obtained from third party information...

kronolith -- arbitrary local file inclusion vulnerability

iDefense Labs reports: Remote exploitation of a design error in Horde's Kronolith could allow an authenticated web mail user to execute arbitrary PHP code under the security context of the running web server. The vulnerability specifically exists due to a design error in the way it includes certa...

ELOG Web Logbook Remote Denial of Service Vulnerability

ELOG Web Logbook Remote Denial of Service Vulnerability OS2A ID: OS2A1008 Status: 10/31/2006 Issue Discovered 11/08/2006 Reported to the Vendor 11/08/2006 Fixed by Vendor 11/10/2006 Advisory Released Class: Denial of Service Severity: Medium Overview: --------- The Electronic Logbook ELOG is part...

Solaris 7 (i386) : 110538-01

The remote host is missing Sun Security Patch number 110538-01 AnswerBook 1.4.3x86: HTTP GET overflow allows code execution. Date this patch was last updated by Sun : Wed Nov 23 04:36:40 MST 2005 You should install this patch for your system to be up-to-date. %NASLMINLEVEL 999999 @DEPRECATED@ Thi...

Solaris 2.6 (i386) : 110537-01

The remote host is missing Sun Security Patch number 110537-01 AnswerBook 1.4.2x86: HTTP GET overflow allows code execution. Date this patch was last updated by Sun : Wed Nov 23 04:35:55 MST 2005 You should install this patch for your system to be up-to-date. %NASLMINLEVEL 999999 @DEPRECATED@ Thi...

Solaris 7 (sparc) : 110532-01

The remote host is missing Sun Security Patch number 110532-01 AnswerBook 1.4.3: HTTP GET overflow allows code execution. Date this patch was last updated by Sun : Wed Nov 23 04:35:09 MST 2005 You should install this patch for your system to be up-to-date. %NASLMINLEVEL 999999 @DEPRECATED@ This...

Solaris 2.5.1 (sparc) : 110532-01

The remote host is missing Sun Security Patch number 110532-01 AnswerBook 1.4.3: HTTP GET overflow allows code execution. Date this patch was last updated by Sun : Wed Nov 23 04:35:09 MST 2005 You should install this patch for your system to be up-to-date. %NASLMINLEVEL 999999 @DEPRECATED@ This...

Solaris 8 (i386) : 110538-01

The remote host is missing Sun Security Patch number 110538-01 AnswerBook 1.4.3x86: HTTP GET overflow allows code execution. Date this patch was last updated by Sun : Wed Nov 23 04:36:40 MST 2005 You should install this patch for your system to be up-to-date. %NASLMINLEVEL 999999 @DEPRECATED@ Thi...

Solaris 8 (i386) : 110537-01

The remote host is missing Sun Security Patch number 110537-01 AnswerBook 1.4.2x86: HTTP GET overflow allows code execution. Date this patch was last updated by Sun : Wed Nov 23 04:35:55 MST 2005 You should install this patch for your system to be up-to-date. %NASLMINLEVEL 999999 @DEPRECATED@ Thi...

Solaris 2.6 (sparc) : 110531-01

The remote host is missing Sun Security Patch number 110531-01 AnswerBook 1.4.2: HTTP GET overflow allows code execution. Date this patch was last updated by Sun : Wed Nov 23 04:24:08 MST 2005 You should install this patch for your system to be up-to-date. %NASLMINLEVEL 999999 @DEPRECATED@ This...

Solaris 7 (i386) : 110537-01

The remote host is missing Sun Security Patch number 110537-01 AnswerBook 1.4.2x86: HTTP GET overflow allows code execution. Date this patch was last updated by Sun : Wed Nov 23 04:35:55 MST 2005 You should install this patch for your system to be up-to-date. %NASLMINLEVEL 999999 @DEPRECATED@ Thi...

Solaris 7 (sparc) : 110531-01

The remote host is missing Sun Security Patch number 110531-01 AnswerBook 1.4.2: HTTP GET overflow allows code execution. Date this patch was last updated by Sun : Wed Nov 23 04:24:08 MST 2005 You should install this patch for your system to be up-to-date. %NASLMINLEVEL 999999 @DEPRECATED@ This...

Solaris 2.6 (i386) : 110538-01

The remote host is missing Sun Security Patch number 110538-01 AnswerBook 1.4.3x86: HTTP GET overflow allows code execution. Date this patch was last updated by Sun : Wed Nov 23 04:36:40 MST 2005 You should install this patch for your system to be up-to-date. %NASLMINLEVEL 999999 @DEPRECATED@ Thi...

Solaris 8 (sparc) : 110532-01

The remote host is missing Sun Security Patch number 110532-01 AnswerBook 1.4.3: HTTP GET overflow allows code execution. Date this patch was last updated by Sun : Wed Nov 23 04:35:09 MST 2005 You should install this patch for your system to be up-to-date. %NASLMINLEVEL 999999 @DEPRECATED@ This...