5623 matches found
CVE-2005-4071
CVE-2005-4071 affects CFMagic Magic Forum Personal 2.5 and earlier. The vulnerabilities are SQL injection in the web interface: (1) ForumID in view_forum.cfm and (2) ForumID, (3) Thread, and (4) ThreadID in view_thread.cfm, allowing remote attackers to execute arbitrary SQL commands. The NVD entr...
CVE-2005-4072
Cross-site scripting XSS vulnerability in CFMagic Magic Forum Personal 2.5 and earlier allows remote attackers to inject arbitrary web script or HTML via the Words parameter in searchforums.cfm, as used in the "Search For:" field...
CVE-2005-4072
The CVE describes a cross-site scripting (XSS) vulnerability in CFMagic Magic Forum Personal 2.5 and earlier, where an attacker can inject arbitrary script via the Words parameter in search_forums.cfm used in the “Search For:” field. The available records confirm the affected software and the inp...
Magic List Pro - view_archive.cfm?ListID SQL Injection
Magic List Pro - viewarchive.cfm?ListID SQL Injection source: https://www.securityfocus.com/bid/15774/info CFMagic Products are prone to multiple input validation vulnerabilities. These are due to a lack of proper sanitization of user-supplied input. These vulnerabilities allow an attacker to...
Magic Forum Personal SQL&XSS vuln.
Magic Forum Personal SQL&XSS vuln. Vuln. dicovered by : r0t Date: 6 dec. 2005 orginal advisory:http://pridels.blogspot.com/2005/12/magic-forum-personal-sqlxss-vuln.html vendor:www.cfmagic.com/products/magicforumper.cfm affected version:2.5 and prior Product Description: Magic Forum Personal is ou...
CVE-2002-2161
Kerio Personal Firewall (KPF) 2.1.4 and earlier is affected by a denial-of-service vulnerability where remote attackers can trigger a SYN packet flood, causing the firewall to hang and consume CPU. The description available specifies the impact but does not provide deeper root-cause details, affe...
CVE-2002-2161
Kerio Personal Firewall KPF 2.1.4 and earlier allows remote attackers to cause a denial of service hang and CPU consumption via a SYN packet flood...
Kerio Personal Firewall Admin Service
The remote host appears to be running the Kerio Personal Firewall Admin service on this port. It is recommended that this port is not reachable from the outside. Also, make sure that the use of this software is done in accordance with your corporate security policy. SPDX-FileCopyrightText: 2005...
Personal Web Sharing overflow
It was possible to kill the Personal Web Sharing service by sending it a too long request. A cracker may exploit this vulnerability to make your web server crash continually. OpenVAS Vulnerability Test $Id: PWSDoS.nasl 8023 2017-12-07 08:36:26Z teissa $ Description: Personal Web Sharing overflow...
Kerio Personal Firewall Buffer Overflow
Kerio Personal Firewall is vulnerable to a buffer overflow on the administration port. SPDX-FileCopyrightText: 2003 Michel Arboi Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
Personal Web Sharing Overflow DoS Vulnerability
It was possible to kill the Personal Web Sharing service by sending it a too long request. SPDX-FileCopyrightText: 2002 Michel Arboi Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
CVE-2005-3286
The FWDRV driver in Kerio Personal Firewall 4.2 and Server Firewall 1.1.1 allows local users to cause a denial of service crash by setting the PAGENOACCESS or PAGEGUARD protection on the Page Environment Block PEB, which triggers an exception, aka the "PEB lockout vulnerability."...
CVE-2005-3286
The FWDRV driver in Kerio Personal Firewall 4.2 and Server Firewall 1.1.1 allows local users to cause a denial of service crash by setting the PAGENOACCESS or PAGEGUARD protection on the Page Environment Block PEB, which triggers an exception, aka the "PEB lockout vulnerability."...
CVE-2005-3286
The CVE-2005-3286 entry affects Kerio Personal Firewall 4.2 and Kerio Server Firewall 1.1.1, where the FWDRV driver allows local attackers to trigger a denial of service (crash) by manipulating the Page Environment Block (PEB) protection to PAGE_NOACCESS or PAGE_GUARD, causing an exception (the s...
[SA17019] Hitachi Cosminexus Request Body Disclosure of Personal Information
TITLE: Hitachi Cosminexus Request Body Disclosure of Personal Information SECUNIA ADVISORY ID: SA17019 VERIFY ADVISORY: http://secunia.com/advisories/17019/ CRITICAL: Moderately critical IMPACT: Exposure of sensitive information WHERE: From remote SOFTWARE: Cosminexus 6.x...
ZoneAlarm Personal Firewall < 6.0.667.000 Multiple Vulnerabilities
Binary data 3227.prm...
Unauthorized Linksys wireless access points access
Clients without WPA Personal/TKIP authentication can access device with authentication enabled...
CVE-2005-2589
Unknown vulnerability in Linksys WRT54GS wireless router with firmware 4.50.6, with WPA Personal/TKIP authentication enabled, allows remote clients to bypass authentication by connecting without using encryption...
CVE-2004-2329
Kerio Personal Firewall KPF 2.1.5 allows local users to execute arbitrary code with SYSTEM privileges via the Load button in the Firewall Configuration Files option, which does not drop privileges before opening the file loading dialog box...
CVE-2004-2329
Kerio Personal Firewall 2.1.5 is vulnerable to local privilege escalation: when loading firewall configuration files, the Load button opens a file dialog without dropping privileges, allowing a local user to execute arbitrary code with SYSTEM privileges. Affected component: firewall configuration...