CVE-2010-1017

The CVE relates to TYPO3’s SAV Filter Months (sav_filter_months) extension, affected until version 1.0.4. The vulnerability is an SQL injection in the extension that allows remote attackers to run arbitrary SQL via unspecified vectors. Root cause: improper input handling leading to SQL command ex...

CVE-2010-1017

SQL injection vulnerability in the SAV Filter Months savfiltermonths extension before 1.0.5 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2010-1016

CVE-2010-1016 affects the SAV Filter Selectors extension for TYPO3, prior to version 1.0.5. The vulnerability is a SQL injection in the extension, allowing remote attackers to execute arbitrary SQL commands via unspecified vectors. Affected component is the sav_filter_selectors module and the und...

CVE-2010-1016

SQL injection vulnerability in the SAV Filter Selectors savfilterselectors extension before 1.0.5 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2010-1015

SQL injection vulnerability in the SAV Filter Alphabetic savfilterabc extension before 1.0.9 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2010-1015: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the SAV Filter Alphabetic savfilterabc extension before 1.0.9 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2010-1016: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the SAV Filter Selectors savfilterselectors extension before 1.0.5 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2010-1017: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the SAV Filter Months savfiltermonths extension before 1.0.5 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2009-1428

The CVE-2009-1428 entry describes two parsing errors in the ccLgView.exe component of the Symantec Log Viewer used by multiple Norton/Symantec products (SAV before 10.1 MR8, SEP before 11.0 MR1, Norton 360 1.0, Norton Internet Security 2005–2008). The vulnerability enables remote XSS via a crafte...

Symantec Alert Management System 2 multiple vulnerabilities

SUMMARY The version of Alert Management System 2 AMS2 used by some versions of Symantec System Center, Symantec Antivirus Server, and Symantec AntiVirus Central Quarantine Server contains four vulnerabilities. AFFECTED PRODUCTS Product | Version | Solution ---|---|--- Symantec AntiVirus Corporate...

Recover Data for Novell Netware '.SAV'文件拒绝服务漏洞

BUGTRAQ ID: 34693 CNCAN ID：CNCAN-2009042403 Novell Data Recovery Software用于从Novell Netware卷中恢复删除，破坏或丢失的数据的工具。 Novell Data Recovery Software不正确处理SAV文件，远程攻击者可以利用漏洞对应用程序进行拒绝服务攻击。 构建恶意的SAV文件，诱使用户使用程序打开，可导致应用程序由于访问冲突而崩溃。 Recover Data Recover Data for Novell Netware 1.0 目前没有解决方案提供：...

CVE-2008-5543

Symantec AntiVirus SAV 10, when Internet Explorer 6 or 7 is used, allows remote attackers to bypass detection of malware in an HTML document by placing an MZ header aka "EXE info" at the beginning, and modifying the filename to have 1 no extension, 2 a .txt extension, or 3 a .jpg extension, as...

CVE-2008-5543

CVE-2008-5543 affects Symantec AntiVirus 10 when Internet Explorer 6/7 is used, enabling attackers to bypass malware-detection in HTML by prepending an MZ header (EXE info) and disguising the filename with no extension, .txt, or .jpg. The vulnerability mirrors a broader family seen in related CVE...

CVE-2008-5543: Improper Input Validation

Symantec AntiVirus SAV 10, when Internet Explorer 6 or 7 is used, allows remote attackers to bypass detection of malware in an HTML document by placing an MZ header aka "EXE info" at the beginning, and modifying the filename to have 1 no extension, 2 a .txt extension, or 3 a .jpg extension, as...

CVE-2007-3095

The vulnerability CVE-2007-3095 affects Symantec Reporting Server versions prior to 1.0.224.0 (including 1.0.197.0) as used with Symantec Client Security 3.1+ and SAV CE 10.1+. The issue is an authentication bypass that allows an attacker to disable authentication and access restricted functional...

Symantec Reporting Server Password Disclosure

SUMMARY The administrator password for Symantec Reporting Server could be disclosed after a failed login attempt. Risk Impact Medium Remote Access | Yes ---|--- Local Access | Yes Authentication Required | Yes Exploit publicly available | No AFFECTED PRODUCTS Affected Products Product | Affected...

CVE-2005-1346: Undefined Security Weakness

Multiple Symantec AntiVirus products, including Norton AntiVirus 2005 11.0.0, Web Security Web Security 3.0.1.72, Mail Security for SMTP 4.0.5.66, AntiVirus Scan Engine 4.3.7.27, SAV/Filter for Domino NT 3.1.1.87, and Mail Security for Exchange 4.5.4.743, when running on Windows, allows remote...