Show filters
24 Total Results
Displaying 1-10 of 24
Sort by:
Attacker Value
Unknown
CVE-2018-6525
Disclosure Date: February 02, 2018 (last updated November 26, 2024)
In nProtect AVS V4.0 before 4.0.0.39, the driver file (TKFsAv.SYS) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x220458.
0
Attacker Value
Unknown
CVE-2018-6524
Disclosure Date: February 02, 2018 (last updated November 26, 2024)
In nProtect AVS V4.0 before 4.0.0.39, the driver file (TKFsAv.SYS) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x220c20.
0
Attacker Value
Unknown
CVE-2018-6523
Disclosure Date: February 02, 2018 (last updated November 26, 2024)
In nProtect AVS V4.0 before 4.0.0.39, the driver file (TKFsAv.SYS) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x22045c.
0
Attacker Value
Unknown
CVE-2018-6522
Disclosure Date: February 02, 2018 (last updated November 26, 2024)
In nProtect AVS V4.0 before 4.0.0.39, the driver file (TKRgFtXp.SYS) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x220408.
0
Attacker Value
Unknown
CVE-2012-5228
Disclosure Date: October 01, 2012 (last updated October 05, 2023)
Cross-site scripting (XSS) vulnerability in admin/index.php in phplist 2.10.9, 2.10.17, and possibly other versions before 2.10.19 allows remote attackers to inject arbitrary web script or HTML via the testtarget parameter. NOTE: some of these details are obtained from third party information.
0
Attacker Value
Unknown
CVE-2011-1682
Disclosure Date: April 13, 2011 (last updated October 04, 2023)
Multiple cross-site request forgery (CSRF) vulnerabilities in phpList 2.10.13 and earlier allow remote attackers to hijack the authentication of administrators for requests that (1) create a list or (2) insert cross-site scripting (XSS) sequences. NOTE: this issue exists because of an incomplete fix for CVE-2011-0748. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
0
Attacker Value
Unknown
CVE-2011-0748
Disclosure Date: April 13, 2011 (last updated October 04, 2023)
Multiple cross-site request forgery (CSRF) vulnerabilities in phpList before 2.10.13 allow remote attackers to hijack the authentication of administrators for requests that (1) add or (2) edit administrator accounts.
0
Attacker Value
Unknown
CVE-2008-6469
Disclosure Date: March 13, 2009 (last updated October 04, 2023)
SQL injection vulnerability in index.php in PlainCart 1.1.2 allows remote attackers to execute arbitrary SQL commands via the p parameter.
0
Attacker Value
Unknown
CVE-2009-0422
Disclosure Date: February 05, 2009 (last updated October 04, 2023)
Dynamic variable evaluation vulnerability in lists/admin.php in phpList 2.10.8 and earlier, when register_globals is disabled, allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the _SERVER[ConfigFile] parameter to admin/index.php.
0
Attacker Value
Unknown
CVE-2008-5887
Disclosure Date: January 12, 2009 (last updated October 04, 2023)
phplist before 2.10.8 allows remote attackers to include files via unknown vectors, related to a "local file include vulnerability."
0
