1565 matches found
CVE-2010-4760
Open Ticket Request System OTRS before 3.0.0-beta6 adds email-notification-ext articles to tickets during processing of event-based notifications, which allows remote authenticated users to obtain potentially sensitive information by reading a ticket...
PT-2011-1709
Name of the Vulnerable Software and Affected Versions Open Ticket Request System OTRS versions prior to 3.0.0-beta6 Description The issue allows remote authenticated users to obtain potentially sensitive information by reading a ticket, due to the addition of email-notification-ext articles to...
CVE-2010-4760: Exposure of Sensitive Information to an Unauthorized Actor
Open Ticket Request System OTRS before 3.0.0-beta6 adds email-notification-ext articles to tickets during processing of event-based notifications, which allows remote authenticated users to obtain potentially sensitive information by reading a ticket...
Integer overflow
Integer overflow in ext/shmop/shmop.c in PHP before 5.3.6 allows context-dependent attackers to cause a denial of service crash and possibly read sensitive memory via a large third argument to the shmopread function...
CVE-2011-1092
Integer overflow in ext/shmop/shmop.c in PHP before 5.3.6 allows context-dependent attackers to cause a denial of service crash and possibly read sensitive memory via a large third argument to the shmopread function...
CVE-2011-1092
CVE-2011-1092 refers to an integer overflow in PHP 5.3.x before 5.3.6 (ext/shmop/shmop.c) that can cause a denial of service and potentially read sensitive memory via a large third argument to shmop_read. Public documents confirm PHP 5.3.x
PT-2011-1235
Name of the Vulnerable Software and Affected Versions PHP versions prior to 5.3.6 Description The issue is related to errors in number handling in the ext/shmop/shmop.c component of the PHP programming language interpreter. Exploitation of this issue may allow a remote attacker to cause a denial ...
CVE-2011-1092: Undefined Security Weakness
Integer overflow in ext/shmop/shmop.c in PHP before 5.3.6 allows context-dependent attackers to cause a denial of service crash and possibly read sensitive memory via a large third argument to the shmopread function...
CVE-2010-4150: Undefined Security Weakness
Double free vulnerability in the imapdoopen function in the IMAP extension ext/imap/phpimap.c in PHP 5.2 before 5.2.15 and 5.3 before 5.3.4 allows attackers to cause a denial of service memory corruption or possibly execute arbitrary code via unspecified vectors...
CVE-2009-5016
Integer overflow in the xmlutf8decode function in ext/xml/xml.c in PHP before 5.2.11 makes it easier for remote attackers to bypass cross-site scripting XSS and SQL injection protection mechanisms via a crafted string that uses overlong UTF-8 encoding, a different vulnerability than CVE-2010-3870...
CVE-2009-5016: Undefined Security Weakness
Integer overflow in the xmlutf8decode function in ext/xml/xml.c in PHP before 5.2.11 makes it easier for remote attackers to bypass cross-site scripting XSS and SQL injection protection mechanisms via a crafted string that uses overlong UTF-8 encoding, a different vulnerability than CVE-2010-3870...
ZDI-10-103: Microsoft Office Excel DBQueryExt Record Unspecified ADO Object Remote Code Execution Vulnerability
ZDI-10-103: Microsoft Office Excel DBQueryExt Record Unspecified ADO Object Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-10-103 June 8, 2010 -- CVE ID: CVE-2010-1253 -- Affected Vendors: Microsoft -- Affected Products: Microsoft Office Excel -- TippingPointT...
CVE-2010-2094: Use of Externally-Controlled Format String
Multiple format string vulnerabilities in the phar extension in PHP 5.3 before 5.3.2 allow context-dependent attackers to obtain sensitive information memory contents and possibly execute arbitrary code via a crafted phar:// URI that is not properly handled by the 1 pharstreamflush, 2...
PHP 5.3.x < 5.3.2 - 'ext/phar/stream.c' / 'ext/phar/dirstream.c' Multiple Format String Vulnerabilities
source: https://www.securityfocus.com/bid/40173/info PHP is prone to multiple format-string vulnerabilities because it fails to properly sanitize user-supplied input before passing it as the format specifier to a formatted-printing function. Attackers can exploit these issues to run arbitrary cod...
Mandriva Update for firefox-ext-plasmanotify MDVA-2010:118 (firefox-ext-plasmanotify)
Check for the Version of firefox-ext-plasmanotify OpenVAS Vulnerability Test Mandriva Update for firefox-ext-plasmanotify MDVA-2010:118 firefox-ext-plasmanotify Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free...
Mandriva Update for firefox-ext-plasmanotify MDVA-2010:118 (firefox-ext-plasmanotify)
Check for the Version of firefox-ext-plasmanotify OpenVAS Vulnerability Test Mandriva Update for firefox-ext-plasmanotify MDVA-2010:118 firefox-ext-plasmanotify Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free...
PHP ext-filter 函数远程缓冲区溢出漏洞
No description provided by source...
Mandriva Security Advisory MDVSA-2009:303 (php)
The remote host is missing an update to php announced via advisory MDVSA-2009:303. OpenVAS Vulnerability Test $Id: mdksa2009303.nasl 6573 2017-07-06 13:10:50Z cfischer $ Description: Auto-generated from advisory MDVSA-2009:303 php Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...
CVE-2009-4018
CVE-2009-4018 affects PHP before 5.2.11 and 5.3.x before 5.3.1, where proc_open in ext/standard/proc_open.c fails to enforce safe_mode_allowed_env_vars and safe_mode_protected_env_vars. This lets context-dependent attackers supply an arbitrary environment via the env parameter, demonstrated by cr...
CVE-2009-4018
The procopen function in ext/standard/procopen.c in PHP before 5.2.11 and 5.3.x before 5.3.1 does not enforce the 1 safemodeallowedenvvars and 2 safemodeprotectedenvvars directives, which allows context-dependent attackers to execute programs with an arbitrary environment via the env parameter, a...