CVE-2004-1488

wget 1.8.x and 1.9.x does not filter or quote control characters when displaying HTTP responses to the terminal, which may allow remote malicious web servers to inject terminal escape sequences and execute arbitrary code...

CVE-2005-1308

CVE-2005-1308 affects SqWebMail. The vulnerability arises from CRLF sequence handling in the redirect parameter, enabling remote injection of arbitrary HTML/script and likely XSS. Impact described across sources includes attacker-controlled script execution in users’ browsers and potential sessio...

CVE-2005-1308

SqWebMail allows remote attackers to inject arbitrary web script or HTML via CRLF sequences in the redirect parameter followed by the desired script or HTML...

CVE-2001-1461: Undefined Security Weakness

Directory traversal vulnerability in WebID in RSA Security SecurID 5.0 as used by ACE/Agent for Windows, Windows NT and Windows 2000 allows attackers to access restricted resources via URL-encoded 1 /.. or 2 .. sequences...

CVE-2005-1308

SqWebMail allows remote attackers to inject arbitrary web script or HTML via CRLF sequences in the redirect parameter followed by the desired script or HTML...

CVE-2005-1308

SqWebMail allows remote attackers to inject arbitrary web script or HTML via CRLF sequences in the redirect parameter followed by the desired script or HTML...

CVE-2003-1005: Undefined Security Weakness

The PKI functionality in Mac OS X 10.2.8 and 10.3.2 allows remote attackers to cause a denial of service service crash via malformed ASN.1 sequences...

CVE-2005-1005: Undefined Security Weakness

ProfitCode PayProCart 3.0 allows remote attackers to bypass authentication and gain administrative privileges to the admin control panel, as demonstrated via a direct request to adminshop/index.php with hex-encoded .. sequences in the ftoedit parameter...

CVE-2005-0927: Undefined Security Weakness

Unknown vulnerability in subs.pl for WebAPP 0.9.9 through 0.9.9.2 has unknown impact and attack vectors, probably involving shell metacharacters or .. sequences...

CVE-2005-0764

Buffer overflow in command.C for rxvt-unicode before 5.3 allows remote attackers to execute arbitrary code via a crafted file containing long escape sequences...

CVE-2005-0764: Undefined Security Weakness

Buffer overflow in command.C for rxvt-unicode before 5.3 allows remote attackers to execute arbitrary code via a crafted file containing long escape sequences...

BOA Web server directory traversal

Directory traversal by using ESC sequences /2E2E/ allows to access any system file...

security flaw

Heap-based buffer overflow in the UTF8ToNewUnicode function for Firefox before 1.0.1 and Mozilla before 1.7.6 might allow remote attackers to cause a denial of service crash or execute arbitrary code via invalid sequences in a UTF8 encoded string that result in a zero length value...

PT-2005-1333 · Biborb · Biborb

Name of the Vulnerable Software and Affected Versions: BibORB versions 1.3.2 and earlier Description: The issue allows remote attackers to delete arbitrary files via a Delete action and .. dot dot sequences in the database name parameter in index.php. Recommendations: For BibORB versions 1.3.2 an...

HP-UX PHSS_29735 : s700_800 11.11 CDE Base Periodic Patch

s700800 11.11 CDE Base Periodic Patch : The remote HP-UX host is affected by multiple vulnerabilities : - Certain dtterm escape sequences have the potential to be misused. HPSBUX00309 SSRT3507 - A potential buffer overflow exists in a function called by the suid root program dtmailpr. HPSBUX00300...

CVE-2005-0451: Undefined Security Weakness

Sami HTTP Server 1.0.5 allows remote attackers to cause a denial of service via an HTTP request containing two CRLF sequences, which triggers a NULL dereference...

HP-UX PHSS_29734 : s700_800 11.00 CDE Runtime Periodic Patch

s700800 11.00 CDE Runtime Periodic Patch : The remote HP-UX host is affected by multiple vulnerabilities : - Certain dtterm escape sequences have the potential to be misused. HPSBUX00309 SSRT3507 - A potential buffer overflow exists in a function called by the suid root program dtmailpr...

HP-UX PHSS_30167 : s700_800 11.04 (VVOS) CDE Runtime Patch

s700800 11.04 VVOS CDE Runtime Patch : The remote HP-UX host is affected by multiple vulnerabilities : - CDE libDtHelp has a potential buffer overflow. HPSBUX00297 SSRT3657 - Certain dtterm escape sequences have the potential to be misused. HPSBUX00309 SSRT3507 - There is a buffer overflow in...

security flaw

Directory traversal vulnerability in the truepath function in private.py for Mailman 2.1.5 and earlier allows remote attackers to read arbitrary files via ".../....///" sequences, which are not properly cleansed by regular expressions that are intended to remove "../" and "./" sequences...

CVE-2004-1488

wget 1.8.x and 1.9.x does not filter or quote control characters when displaying HTTP responses to the terminal, which may allow remote malicious web servers to inject terminal escape sequences and execute arbitrary code...