Code injection

3Com Baseline Switch 2848-SFP Plus Model 3C16486 with firmware before 1.0.2.0 allows remote attackers to cause a denial of service unstable operation via long DHCP packets...

CVE-2006-2054

3Com Baseline Switch 2848-SFP Plus Model 3C16486 with firmware before 1.0.2.0 allows remote attackers to cause a denial of service unstable operation via long DHCP packets...

CVE-2006-2054

3Com Baseline Switch 2848-SFP Plus Model 3C16486 with firmware before 1.0.2.0 allows remote attackers to cause a denial of service unstable operation via long DHCP packets...

CVE-2006-2054

3Com Baseline Switch 2848-SFP Plus Model #3C16486 with firmware before 1.0.2.0 is vulnerable to a remote-denial-of-service caused by processing long DHCP packets. This vulnerability affects the device’s network operation, and the available documents do not provide exploit details or explicit reme...

[SA19756] 3Com Baseline Switch 2848-SFP DHCP Potential Denial of Service

TITLE: 3Com Baseline Switch 2848-SFP DHCP Potential Denial of Service SECUNIA ADVISORY ID: SA19756 VERIFY ADVISORY: http://secunia.com/advisories/19756/ CRITICAL: Less critical IMPACT: DoS WHERE: From local network OPERATING SYSTEM: 3Com Baseline Switch 2848-SFP Plus...

CVE-2005-4377

Cross-site scripting XSS vulnerability in Page.asp in Baseline CMS 1.95 and earlier allows remote attackers to inject arbitrary web script or HTML via the 1 PageID and 2 SiteNodeID parameters...

CVE-2005-4378

SQL injection vulnerability in Page.asp in Baseline CMS 1.95 and earlier allows remote attackers to execute arbitrary SQL commands via the SiteNodeID parameter...

CVE-2005-4378

CVE-2005-4378 is a SQL injection vulnerability in Page.asp of Baseline CMS 1.95 and earlier. The flaw allows remote attackers to execute arbitrary SQL commands via the SiteNodeID parameter. The reported CVSS v2 base score is 7.5 (HIGH) with network access, low attack complexity, and no authentica...

CVE-2005-4377

CVE-2005-4377 describes a cross-site scripting (XSS) vulnerability in the Page.asp component of Baseline CMS (version 1.95 and earlier). The vulnerability allows remote attackers to inject arbitrary web script or HTML via the PageID or SiteNodeID parameters. The available records indicate an XSS ...

CVE-2005-4378

SQL injection vulnerability in Page.asp in Baseline CMS 1.95 and earlier allows remote attackers to execute arbitrary SQL commands via the SiteNodeID parameter...

CVE-2005-4377

Cross-site scripting XSS vulnerability in Page.asp in Baseline CMS 1.95 and earlier allows remote attackers to inject arbitrary web script or HTML via the 1 PageID and 2 SiteNodeID parameters...

Baseline CMS 1.95 - Multiple Input Validation Vulnerabilities

Baseline CMS 1.95 - Multiple Input Validation Vulnerabilities source: https://www.securityfocus.com/bid/15961/info Baseline CMS is prone to multiple input-validation vulnerabilities because the application fails to properly sanitize user-supplied input. A successful exploit could allow an attacke...

Baseline CMS vuln.

Baseline CMS vuln. Vuln. discovered by : r0t Date: 17 dec. 2005 orginal advisory:http://pridels.blogspot.com/2005/12/baseline-cms-vuln.html vendor:http://www.nma.ca/ affected version: 1.95 and prior Product Description: Baseline CMS is a powerful, web-based content management system that gives yo...

CVE-2002-1762

Microsoft Baseline Security Analyzer MBSA 1.0 stores security scans in a known location C:\Documents and Settings\username\SecurityScans in plaintext, which could allow remote attackers to obtain sensitive information about the system via malicious active content such as ActiveX controls or Java...

CVE-2002-1762

MBSA 1.0 stores security scans in plaintext at C:\Documents and Settings\username\SecurityScans, potentially exposing sensitive system information to users able to run malicious ActiveX/Java content. The provided sources confirm the exact location and plaintext storage, with no additional exploit...

CVE-2004-2091

The vulnerability entry CVE-2004-2091 concerns Microsoft Baseline Security Analyzer (MBSA) 1.2. Affected context: MBSA 1.2 may not correctly identify systems that have been patched but remain exploitable until a reboot, potentially giving administrators a false sense of security. Impact is descri...

CVE-2004-2091

Microsoft Baseline Security Analyzer MBSA 1.2 does not correctly identify systems that have been patched but remain vulnerable to exploit until the system is rebooted, possibly giving the administrator a false sense of security...

CVE-2004-2091

Microsoft Baseline Security Analyzer MBSA 1.2 does not correctly identify systems that have been patched but remain vulnerable to exploit until the system is rebooted, possibly giving the administrator a false sense of security...

CVE-2002-1762

Microsoft Baseline Security Analyzer MBSA 1.0 stores security scans in a known location C:\Documents and Settings\username\SecurityScans in plaintext, which could allow remote attackers to obtain sensitive information about the system via malicious active content such as ActiveX controls or Java...

WINDOWSSERVER2022HOTPATCH:SERVER:GDR:BR:10.0.20348.2227:UnifiedCumulativeSecurity:

This detectoid will be used for targeting Baseline version 10.0.20348.2227 for GDR...