CWE-642 Archives - CVE Vulnerability

CVE-2008-5738

Sun, 26 Feb 2023 09:11:09 +0000

Nodstrum MySQL Calendar 1.1 and 1.2 allows remote attackers to bypass authentication and gain administrative access by setting the nodstrumCalendarV2 cookie to 1. NOTE: some of these details are obtained from third party information.

The post CVE-2008-5738 appeared first on CVE Vulnerability.

CVE-2008-5642

Sun, 26 Feb 2023 09:11:06 +0000

Directory traversal vulnerability in admin/login.php in CMS Made Simple 1.4.1 allows remote attackers to read arbitrary files via a .. (dot dot) in a cms_language cookie.

The post CVE-2008-5642 appeared first on CVE Vulnerability.

CVE-2008-5125

Sun, 26 Feb 2023 09:10:52 +0000

admin.php in CCleague Pro 1.2 allows remote attackers to bypass authentication by setting the type cookie value to admin.

The post CVE-2008-5125 appeared first on CVE Vulnerability.

CVE-2008-5065

Sun, 26 Feb 2023 09:10:50 +0000

TlGuestBook 1.2 allows remote attackers to bypass authentication and gain administrative access by setting the tlGuestBook_login cookie to admin.

The post CVE-2008-5065 appeared first on CVE Vulnerability.

CVE-2008-4752

Sun, 26 Feb 2023 09:10:42 +0000

TlNews 2.2 allows remote attackers to bypass authentication and gain administrative access by setting the tlNews_login cookie to admin.

The post CVE-2008-4752 appeared first on CVE Vulnerability.

CVE-2008-1319

Sun, 26 Feb 2023 09:08:58 +0000

Untrusted search path and argument injection vulnerability in the VersantD service in Versant Object Database 7.0.1.3 and earlier, as used in Borland CaliberRM and probably other products, allows remote attackers to execute arbitrary commands via a request to TCP port 5019 with a modified VERSANT_ROOT field.

The post CVE-2008-1319 appeared first on CVE Vulnerability.

CVE-2008-0306

Sun, 26 Feb 2023 09:08:29 +0000

sdbstarter in SAP MaxDB 7.6.0.37, and possibly other versions, allows local users to execute arbitrary commands by using unspecified environment variables to modify configuration settings.

The post CVE-2008-0306 appeared first on CVE Vulnerability.

CVE-2007-4432

Sun, 26 Feb 2023 09:07:13 +0000

Untrusted search path vulnerability in the wrapper scripts for the (1) rug, (2) zen-updater, (3) zen-installer, and (4) zen-remover programs on SUSE Linux 10.1 and Enterprise 10 allows local users to gain privileges via modified (a) LD_LIBRARY_PATH and (b) MONO_GAC_PREFIX environment variables.

The post CVE-2007-4432 appeared first on CVE Vulnerability.

CVE-2018-15382

Sun, 26 Feb 2023 06:46:38 +0000

A vulnerability in Cisco HyperFlex Software could allow an unauthenticated, remote attacker to generate valid, signed session tokens. The vulnerability is due to a static signing key that is present in all Cisco HyperFlex systems. An attacker could exploit this vulnerability by accessing the static signing key from one HyperFlex system and using it to generate valid, signed session tokens for another HyperFlex system. A successful exploit could allow the attacker to access the HyperFlex Web UI of a system for which they are not authorized.

The post CVE-2018-15382 appeared first on CVE Vulnerability.