CVE-2005-0949

Multiple cross-site scripting XSS vulnerabilities in content.asp in Iatek PortalApp allow remote attackers to inject arbitrary web script or HTML via the 1 contenttype or 2 keywords parameter...

CVE-2005-0949

Multiple cross-site scripting XSS vulnerabilities in content.asp in Iatek PortalApp allow remote attackers to inject arbitrary web script or HTML via the 1 contenttype or 2 keywords parameter...

CVE-2005-0949: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in content.asp in Iatek PortalApp allow remote attackers to inject arbitrary web script or HTML via the 1 contenttype or 2 keywords parameter...

CVE-2004-1633

processbug.cgi in Bugzilla 2.9 through 2.18rc2 and 2.19 from CVS does not check edit permissions on the keywords field, which allows remote authenticated users to modify the keywords in a bug via the keywordaction parameter...

CVE-2004-1406: Undefined Security Weakness

SQL injection vulnerability in ikonboard.cgi in Ikonboard 3.1.0 through 3.1.3 allows remote attackers to inject arbitrary SQL commands via the 1 st or 2 keywords parameter...

CVE-2003-1043

SQL injection vulnerability in Bugzilla 2.16.3 and earlier, and 2.17.1 through 2.17.4, allows remote authenticated users with editkeywords privileges to execute arbitrary SQL via the id parameter to editkeywords.cgi...

CVE-1999-1204

Check Point Firewall-1 does not properly handle certain restricted keywords e.g., Mail, auth, time in user-defined objects, which could produce a rule with a default "ANY" address and result in access to more systems than intended by the administrator...

CVE-1999-1204: Undefined Security Weakness

Check Point Firewall-1 does not properly handle certain restricted keywords e.g., Mail, auth, time in user-defined objects, which could produce a rule with a default "ANY" address and result in access to more systems than intended by the administrator...

CVE-2000-0622: Undefined Security Weakness

Buffer overflow in Webfind CGI program in O'Reilly WebSite Professional web server 2.x allows remote attackers to execute arbitrary commands via a URL containing a long "keywords" parameter...

CVE-2000-0847

The CVE-2000-0847 entry describes a buffer overflow in the University of Washington c-client library (used by Pine and other programs). The vulnerability arises from processing a long X-Keywords header, enabling remote attackers to execute arbitrary commands. Documents explicitly identify the aff...

CVE-2000-0847: Undefined Security Weakness

Buffer overflow in University of Washington c-client library used by pine and other programs allows remote attackers to execute arbitrary commands via a long X-Keywords header...

CVE-2000-0847

Buffer overflow in University of Washington c-client library used by pine and other programs allows remote attackers to execute arbitrary commands via a long X-Keywords header...

Ошибка в почтовой библиотеке UW

Некорректная работа с заголовком X-Keywords: позволяет повредить ящик пользователя во всех продуктах работающих с ящиком в формате IMAP imapd, pine. Кроме того, длинная переменная X-Keeyword: может вызвать переполнение буфера...

UW c-client library vulnerability

It seems, that c-client libraries by University of Washington have some bugs, that makes some programs that depend upon those libraries go crazy. AFAIK affected programs include at least Pine read "pain", ipop3d and IMAPD. And those programs and libraries are commonly used in Unixes. I don't know...

CVE-1999-1204

Check Point Firewall-1 does not properly handle certain restricted keywords e.g., Mail, auth, time in user-defined objects, which could produce a rule with a default "ANY" address and result in access to more systems than intended by the administrator...