|
277741
|
- |
|
ssh
|
tectia_client tectia_connector tectia_manager tectia_server
|
SSH Tectia Client/Server/Connector 5.1.0 and earlier, Manager 2.2.0 and earlier, and other products, when using an RSA key with exponent 3, removes PKCS-1 padding before generating a hash, which allo…
|
NVD-CWE-Other
|
CVE-2006-5484
|
2019-08-28 23:49 |
2006-10-25 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
277742
|
- |
|
ssh
|
tectia_client tectia_connector tectia_manager tectia_server
|
Update to a fixed version
|
NVD-CWE-Other
|
CVE-2006-5484
|
2019-08-28 23:49 |
2006-10-25 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
277743
|
- |
|
oracle
|
peopletools
|
The grid option in PeopleSoft 8.42 stores temporary .xls files in guessable directories under the web document root, which allows remote attackers to steal search results by directly accessing the fi…
|
NVD-CWE-Other
|
CVE-2003-0841
|
2019-08-20 00:38 |
2003-11-17 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
277744
|
- |
|
alcatel-lucent
|
omnipcx_office
|
cgi-data/FastJSData.cgi in OmniPCX Office with Internet Access services OXO210 before 210/091.001, OXO600 before 610/014.001, and other versions, allows remote attackers to execute arbitrary commands…
|
CWE-20
Improper Input Validation
|
CVE-2008-1331
|
2019-08-14 20:29 |
2008-04-3 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
277745
|
- |
|
vmware
|
ace esx_server esxi fusion player server workstation esx
|
Multiple buffer overflows in VIX API 1.1.x before 1.1.4 build 93057 on VMware Workstation 5.x and 6.x, VMware Player 1.x and 2.x, VMware ACE 2.x, VMware Server 1.x, VMware Fusion 1.x, VMware ESXi 3.5…
|
NVD-CWE-noinfo CWE-119
Incorrect Access of Indexable Resource ('Range Error')
|
CVE-2008-2100
|
2019-08-14 20:29 |
2008-06-6 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
277746
|
- |
|
linux
|
linux_kernel
|
The embedded Linux kernel in certain Sun-Brocade SilkWorm switches before 20070516 does not properly handle a situation in which a non-root user creates a kernel process, which allows attackers to ca…
|
CWE-20
Improper Input Validation
|
CVE-2007-2764
|
2019-08-14 20:29 |
2007-05-19 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
277747
|
- |
|
linux
|
linux_kernel
|
The vendor has addressed this issue through the release of the following product updates:
Sun SG-XSWBRO200E 8P SilkWorm 200E switch 0
Sun patch 124898-03
http://sunsolve.sun.com/search/documen…
|
CWE-20
Improper Input Validation
|
CVE-2007-2764
|
2019-08-14 20:29 |
2007-05-19 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
277748
|
- |
|
cisco
|
wireless_lan_controller_software
|
Cisco Aironet 1000 Series and 1500 Series Lightweight Access Points before 3.2.185.0, and 4.0.x before 4.0.206.0, have a hard-coded password, which allows attackers with physical access to perform ar…
|
NVD-CWE-Other
|
CVE-2007-2040
|
2019-08-14 20:28 |
2007-04-17 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
277749
|
- |
|
rubyonrails
|
rails
|
The session fixation protection mechanism in cgi_process.rb in Rails 1.2.4, as used in Ruby on Rails, removes the :cookie_only attribute from the DEFAULT_SESSION_OPTIONS constant, which effectively c…
|
CWE-362
Race Condition
|
CVE-2007-6077
|
2019-08-9 00:42 |
2007-11-22 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
277750
|
- |
|
rubyonrails
|
rails
|
Cross-site scripting (XSS) vulnerability in Ruby on Rails 2.x before 2.2.3, and 2.3.x before 2.3.4, allows remote attackers to inject arbitrary web script or HTML by placing malformed Unicode strings…
|
CWE-79
Cross-site Scripting
|
CVE-2009-3009
|
2019-08-8 23:43 |
2009-09-9 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|