| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2009-1353 | 5.0 | Buffer overflow in the http_parse_hex function in libz/misc.c in Zervit Webserver 0.02 allows remote attackers to cause a denial of service (daemon crash) via a long URI, related to http.c. | 2018-10-10 19:36:00 | 2009-04-21 16:24:00 |
| CVE-2009-1350 | 10.0 | Unspecified vulnerability in xtagent.exe in Novell NetIdentity Client before 1.2.4 allows remote attackers to execute arbitrary code by establishing an IPC$ connection to the XTIERRPCPIPE named pipe, and sending RPC messages that trigger a dereferenc | 2018-10-10 19:36:00 | 2009-04-21 16:24:00 |
| CVE-2009-1349 | 4.3 | Cross-site scripting (XSS) vulnerability in C2Net Stronghold 2.3 allows remote attackers to inject arbitrary web script or HTML via the URI. | 2018-10-10 19:36:00 | 2009-04-21 15:30:00 |
| CVE-2009-1203 | 6.0 | WebVPN on the Cisco Adaptive Security Appliances (ASA) device with software 8.0(4), 8.1.2, and 8.2.1 does not properly distinguish its own login screen from the login screens it produces for third-party (1) FTP and (2) CIFS servers, which makes it ea | 2018-10-10 19:35:00 | 2009-06-25 17:30:00 |
| CVE-2009-1202 | 4.3 | WebVPN on the Cisco Adaptive Security Appliances (ASA) device with software 8.0(4), 8.1.2, and 8.2.1 allows remote attackers to bypass certain protection mechanisms involving URL rewriting and HTML rewriting, and conduct cross-site scripting (XSS) at | 2018-10-10 19:35:00 | 2009-06-25 17:30:00 |
| CVE-2009-1201 | 4.3 | Eval injection vulnerability in the csco_wrap_js function in /+CSCOL+/cte.js in WebVPN on the Cisco Adaptive Security Appliances (ASA) device with software 8.0(4), 8.1.2, and 8.2.1 allows remote attackers to bypass a DOM wrapper and conduct cross-sit | 2018-10-10 19:35:00 | 2009-06-25 17:30:00 |
| CVE-2009-1252 | 6.8 | Stack-based buffer overflow in the crypto_recv function in ntp_crypto.c in ntpd in NTP before 4.2.4p7 and 4.2.5 before 4.2.5p74, when OpenSSL and autokey are enabled, allows remote attackers to execute arbitrary code via a crafted packet containing a | 2018-10-10 19:35:00 | 2009-05-19 19:30:00 |
| CVE-2009-1255 | 5.0 | The process_stat function in (1) Memcached before 1.2.8 and (2) MemcacheDB 1.2.0 discloses (a) the contents of /proc/self/maps in response to a stats maps command and (b) memory-allocation statistics in response to a stats malloc command, which allow | 2018-10-10 19:35:00 | 2009-04-30 20:30:00 |
| CVE-2009-1312 | 4.3 | Mozilla Firefox before 3.0.9 and SeaMonkey 1.1.17 do not block javascript: URIs in Refresh headers in HTTP responses, which allows remote attackers to conduct cross-site scripting (XSS) attacks via vectors related to (1) injecting a Refresh header or | 2018-10-10 19:35:00 | 2009-04-22 18:30:00 |
| CVE-2009-1266 | 10.0 | Unspecified vulnerability in Wireshark before 1.0.7 has unknown impact and attack vectors. | 2018-10-10 19:35:00 | 2009-04-21 15:30:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39518
Zapisa po stranici: