269431
|
- |
|
fr.simon_rundell
|
pd_resources
|
SQL injection vulnerability in the Diocese of Portsmouth Resources Database (pd_resources) extension 0.1.1 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecif…
|
CWE-89
SQL Injection
|
CVE-2009-4396
|
2013-01-4 14:00 |
2009-12-23 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
269432
|
- |
|
vocera
|
wireless_handset
|
Vocera Communications wireless handsets, when using Protected Extensible Authentication Protocol (PEAP), do not validate server certificates, which allows remote wireless access points to steal hashe…
|
CWE-20
Improper Input Validation
|
CVE-2008-1114
|
2013-01-3 14:00 |
2008-03-4 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
269433
|
- |
|
oracle
|
secure_backup
|
Unspecified vulnerability in the Oracle Secure Backup component in Oracle Secure Backup 10.1.0.1 allows remote attackers to affect confidentiality via unknown vectors.
|
NVD-CWE-noinfo
|
CVE-2008-3981
|
2013-01-3 14:00 |
2009-01-14 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
269434
|
- |
|
nec
|
mobile_handset
|
Unspecified vulnerability in the NEC mobile handset allows remote attackers to cause a denial of service (reboot) via crafted packets. NOTE: as of 20071016, the only disclosure is a vague pre-advisor…
|
CWE-20
Improper Input Validation
|
CVE-2007-5557
|
2013-01-3 14:00 |
2007-10-19 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
269435
|
- |
|
mybb
|
mybb
|
Multiple unspecified vulnerabilities in MyBulletinBoard (MyBB) before 1.0.2 have unspecified impact and attack vectors, related to (1) admin/moderate.php, (2) admin/themes.php, (3) inc/functions.php,…
|
NVD-CWE-noinfo
|
CVE-2006-0218
|
2013-01-3 14:00 |
2006-01-17 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
269436
|
- |
|
invisionpower
|
invision_power_board
|
The make_password function in ipsclass.php in Invision Power Board (IPB) 2.1.4 uses random data generated from partially predictable seeds to create the authentication code that is sent by e-mail to …
|
CWE-287
Improper Authentication
|
CVE-2006-0633
|
2013-01-3 14:00 |
2006-02-10 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
269437
|
- |
|
zen-cart
|
zen_cart
|
Zen Cart before 1.2.7 does not protect the admin/includes directory, which allows remote attackers to cause unknown impact via unspecified vectors, probably direct requests.
|
CWE-264
Permissions, Privileges, and Access Controls
|
CVE-2006-0697
|
2013-01-3 14:00 |
2006-02-15 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
269438
|
- |
|
e107
|
e107
|
Incomplete blacklist vulnerability in usersettings.php in e107 0.7.20 and earlier allows remote attackers to conduct SQL injection attacks via the loginname parameter.
|
NVD-CWE-Other
|
CVE-2010-2098
|
2012-12-13 13:00 |
2010-05-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
269439
|
- |
|
e107
|
e107
|
Per: http://cwe.mitre.org/data/definitions/184.html
'CWE-184: Incomplete Blacklist'
|
NVD-CWE-Other
|
CVE-2010-2098
|
2012-12-13 13:00 |
2010-05-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
269440
|
- |
|
kerio
|
personal_firewall serverfirewall
|
The FWDRV driver in Kerio Personal Firewall 4.2 and Server Firewall 1.1.1 allows local users to cause a denial of service (crash) by setting the PAGE_NOACCESS or PAGE_GUARD protection on the Page Env…
|
NVD-CWE-Other
|
CVE-2005-3286
|
2012-12-13 11:43 |
2005-10-23 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|