239 matches found
Fedora Core 11 FEDORA-2009-6972 (poppler)
The remote host is missing an update to poppler announced via advisory FEDORA-2009-6972. OpenVAS Vulnerability Test $Id: fcore20096972.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-6972 poppler Authors: Thomas Reinke Copyright: Copyright c 2009...
Unfixed XSS vulnerability at www.findapizza.co.uk
Security researcher rexmundi, has submitted on 19/08/2008 a cross-site-scripting XSS vulnerability affecting www.findapizza.co.uk, which at the time of submission ranked 11582381 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 31/08/2008. It is...
Fedora 7 : exiv2-0.15-5.fc7 (2007-4591)
Mon Dec 17 2007 Rex Dieter 0.15-5 - CVE-2007-6353 425922 - Tue Sep 18 2007 Rex Dieter 0.15-4 - -libs: -Requires: %name - Tue Aug 21 2007 Rex Dieter 0.15-3 - -libs subpkg to be multilib-friendlier f8+ - Sat Aug 11 2007 Rex Dieter 0.15-2 - License: GPLv2+ - Thu Jul 12 2007 Rex Dieter 0.15-1 -...
Remote file inclusion
PHP remote file inclusion vulnerability in Redaxo 3.0 up to 3.2 allows remote attackers to execute arbitrary PHP code via a URL in the REXINCLUDEPATH parameter to imageresize/pages/index.inc.php...
Remote file inclusion
PHP remote file inclusion vulnerability in Redaxo 2.7.4 allows remote attackers to execute arbitrary PHP code via a URL in the 1 REXINCLUDEPATH parameter in a addons/importexport/pages/index.inc.php and b pages/community.inc.php...
CVE-2006-2843
PHP remote file inclusion vulnerability in Redaxo 2.7.4 allows remote attackers to execute arbitrary PHP code via a URL in the 1 REXINCLUDEPATH parameter in a addons/importexport/pages/index.inc.php and b pages/community.inc.php...
CVE-2006-2845
PHP remote file inclusion vulnerability in Redaxo 3.0 up to 3.2 allows remote attackers to execute arbitrary PHP code via a URL in the REXINCLUDEPATH parameter to imageresize/pages/index.inc.php...
CVE-2006-2845
CVE-2006-2845 describes a PHP remote file inclusion vulnerability in the Redaxo CMS, affecting versions 3.0 through 3.2. The flaw allows remote attackers to execute arbitrary PHP code by supplying a URL in the REX[INCLUDE_PATH] parameter to image_resize/pages/index.inc.php. The root cause is the ...
CVE-2001-1520
The provided connected records confirm that CVE-2001-1520 affects the Xircom REX 6000 PDA, where local users can obtain the 10‑digit PIN by starting a serial monitor, connecting via Rextools, and capturing the cleartext PIN. The root cause centers on exposing the PIN through local serial access; ...
CVE-2001-1520
Xircom REX 6000 allows local users to obtain the 10 digit PIN by starting a serial monitor, connecting to the personal digital assistant PDA via Rextools, and capturing the cleartext PIN...
CVE-2001-1005
CVE-2001-1005 affects Starfish Truesync Desktop 2.0b used on the REX 5000 PDA. The underlying issue is weak encryption used to store the user password in a registry key, enabling an attacker with registry access to decrypt the password and gain privileges. NVD lists CVSSv2 base score 7.5 (HIGH) w...
CVE-2001-1006
Starfish Truesync Desktop 2.0b on the REX 5000 PDA stores sensitive files unencrypted and relies solely on password protection, enabling read access via another application. The CVE-2001-1006 entry notes lack of encryption with partial confidentiality impact, network‑level access, and no integrit...
CVE-2001-1007
CVE-2001-1007 affects Starfish Truesync Desktop 2.0b as used on the REX 5000 PDA. The vulnerability arises from a small keyspace for device keys and the absence of a delay on incorrect keys, enabling faster brute-force guessing of the key. The NVD entry lists a MEDIUM base score (5.0/10) with net...
CVE-2001-1006
Starfish Truesync Desktop 2.0b as used on the REX 5000 PDA does not encrypt sensitive files and relies solely on its password feature to restrict access, which allows an attacker to read the files using a different application...
CVE-2001-1007
Starfish Truesync Desktop 2.0b as used on the REX 5000 PDA uses a small keyspace for device keys and does not impose a delay when an incorrect key is entered, which allows attackers to more quickly guess the key via a brute force attack...
CVE-2001-1520
Xircom REX 6000 allows local users to obtain the 10 digit PIN by starting a serial monitor, connecting to the personal digital assistant PDA via Rextools, and capturing the cleartext PIN...
CVE-2001-1006
Starfish Truesync Desktop 2.0b as used on the REX 5000 PDA does not encrypt sensitive files and relies solely on its password feature to restrict access, which allows an attacker to read the files using a different application...
CVE-2001-1007
Starfish Truesync Desktop 2.0b as used on the REX 5000 PDA uses a small keyspace for device keys and does not impose a delay when an incorrect key is entered, which allows attackers to more quickly guess the key via a brute force attack...
