116 matches found
Gentoo Security Advisory GLSA 200711-01 (gftp)
The remote host is missing updates announced in advisory GLSA 200711-01. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2008-3658
Buffer overflow in the imageloadfont function in ext/gd/gd.c in PHP 4.4.x before 4.4.9 and PHP 5.2 before 5.2.6-r6 allows context-dependent attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted font file...
CVE-2007-0977
CVE-2007-0977 involves IBM Lotus Domino R5/R6 WebMail. When the option “Generate HTML for all fields” is enabled (default in these versions), HTTPPassword hashes and related data from names.nsf can be read via ReadViewEntries/OpenDocument on the defaultview, exposing passwords and client/version ...
Lotus Domino <= R6 Webmail Remote Password Hash Dumper Exploit
No description provided by source. !/bin/bash $Id: raptordominohash,v 1.3 2007/02/13 17:27:28 raptor Exp $ raptordominohash - Lotus Domino R5/R6 HTTPPassword dump Copyright c 2007 Marco Ivaldi [email protected] Lotus Domino R5 and R6 WebMail, with "Generate HTML for all fields" enabled, ...
Lotus Domino <= R6 Webmail Remote Password Hash Dumper Exploit
Exploit for unknown platform in category remote exploits ============================================================== Lotus Domino Lotus Domino R5 and R6 WebMail, with "Generate HTML for all fields" enabled, stores sensitive data from names.nsf in hidden form fields, which allows remote attacke...
Lotus Domino <= R6 Webmail Remote Password Hash Dumper Exploit
No description provided by source. !/bin/bash $Id: raptordominohash,v 1.3 2007/02/13 17:27:28 raptor Exp $ raptordominohash - Lotus Domino R5/R6 HTTPPassword dump Copyright c 2007 Marco Ivaldi [email protected] Lotus Domino R5 and R6 WebMail, with "Generate HTML for all fields" enabled, stor...
Lotus Domino R6 Webmail - Remote Password Hash Dumper
!/bin/bash $Id: raptordominohash,v 1.3 2007/02/13 17:27:28 raptor Exp $ raptordominohash - Lotus Domino R5/R6 HTTPPassword dump Copyright c 2007 Marco Ivaldi Lotus Domino R5 and R6 WebMail, with "Generate HTML for all fields" enabled, stores sensitive data from names.nsf in hidden form fields,...
PT-2007-2118 · Gentoo · Thttpd +1
Name of the Vulnerable Software and Affected Versions: thttpd versions prior to 2.25b-r6 Description: The issue allows remote attackers to read arbitrary files because thttpd is started from the system root directory / by the Gentoo baselayout 1.12.6 package. Recommendations: For versions prior t...
CVE-2004-2310
Cross-site scripting XSS vulnerability in webadmin.nsf in Lotus Domino R6 6.5.1 allows remote attackers to inject arbitrary web script or HTML via a Domino command in the Quick Console...
CVE-2004-2311
CVE-2004-2311: Directory traversal in webadmin.nsf (Lotus Domino R6 6.5.1) allows local users to create folders or check for files via a .. in the new folder dialog. Affected: Lotus Domino Web Admin (webadmin.nsf). Root cause: directory traversal through dot-dot in UI. Exploitation status and pat...
CVE-2004-2310
The CVE-2004-2310 entry concerns Lotus Domino R6 6.5.1, specifically the webadmin.nsf component, which is vulnerable to Cross-site Scripting (XSS). The vulnerability arises from accepting a Domino command via the Quick Console, enabling remote attackers to inject arbitrary web script/HTML. Accord...
CVE-2004-2311
Directory traversal vulnerability in webadmin.nsf in Lotus Domino R6 6.5.1 allows local users to create folders or determine the existence of files via a .. dot dot in the new folder dialog...
CVE-2004-2369
Technical details (affected product/component/root cause/impact/fix) are not publicly available in the provided documents for CVE-2004-2369. Monitor official advisories for updates; current data only confirms a directory traversal vulnerability in webadmin.nsf.
CVE-2004-1621
IBM Lotus Notes and IBM Domino (Notes/Domino versions prior to R6) are affected by a cross-site scripting (XSS) vulnerability involving square brackets at the beginning and end of fields computed for display, computed when composed, or computed text element fields. The vendor has disputed that No...
CVE-2004-1621
NOTE: this issue has been disputed by the vendor. Cross-site scripting XSS vulnerability in IBM Lotus Notes R6 and Domino R6, and possibly earlier versions, allows remote attackers to execute arbitrary web script or HTML via square brackets at the beginning and end of 1 computed for display, 2...
PT-2004-2528 · Ibm · Ibm Domino +1
Name of the Vulnerable Software and Affected Versions: IBM Lotus Notes versions prior to R6 IBM Domino versions prior to R6 Description: A cross-site scripting XSS issue allows remote attackers to execute arbitrary web script or HTML via square brackets at the beginning and end of computed for...