128 matches found
dtc-xen competitive conditions issue vulnerability
dtc-xen is a SOAP daemon primarily used for control panel management of Xen VMs. A contention condition issue vulnerability exists in version 0.5.x prior to dtc-xen 0.5.4. The vulnerability stems from mishandling of concurrent access when concurrent code is required to access shared resources...
UBUNTU-CVE-2017-11692
The function "Token& Scanner::peek" in scanner.cpp in yaml-cpp 0.5.3 and earlier allows remote attackers to cause a denial of service assertion failure and application exit via a '!2' string...
Bloq 0.5.4 index.php page[path] Parameter Remote File Inclusion
No description provided by source. source: http://www.securityfocus.com/bid/20512/info Bloq is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues could allow an attacker to compromise the application and the...
Bloq 0.5.4 rss.php page[path] Parameter Remote File Inclusion
No description provided by source. source: http://www.securityfocus.com/bid/20512/info Bloq is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues could allow an attacker to compromise the application and the...
Bloq 0.5.4 rdf.php page[path] Parameter Remote File Inclusion
No description provided by source. source: http://www.securityfocus.com/bid/20512/info Bloq is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues could allow an attacker to compromise the application and the...
Bloq 0.5.4 files/mainfile.php page[path] Parameter Remote File Inclusion
No description provided by source. source: http://www.securityfocus.com/bid/20512/info Bloq is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues could allow an attacker to compromise the application and the...
Bloq 0.5.4 rss2.php page[path] Parameter Remote File Inclusion
No description provided by source. source: http://www.securityfocus.com/bid/20512/info Bloq is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues could allow an attacker to compromise the application and the...
Bloq 0.5.4 admin.php page[path] Parameter Remote File Inclusion
No description provided by source. source: http://www.securityfocus.com/bid/20512/info Bloq is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues could allow an attacker to compromise the application and the...
Mandriva Linux Security Advisory : libssh (MDVSA-2013:009)
A vulnerability has been found and corrected in libssh : The publickeyfromprivatekey function in libssh before 0.5.4, when no algorithm is matched during negotiations, allows remote attackers to cause a denial of service NULL pointer dereference and crash via a Client: Diffie-Hellman Key Exchange...
[SECURITY] Fedora 17 Update: totpcgi-0.5.4-1.fc17
A CGI/FCGI application to centralize google-authenticator deployments...
CVE-2010-3908
CVE-2010-3908 affects FFmpeg (and thus downstream in MPlayer and other products). A malformed WMV file can trigger memory corruption and application crash, potentially allowing remote code execution. This is a problem in FFmpeg up to version 0.5.3/0.5.4 timeframe; multiple advisories reference th...
Cherokee URI Directory Traversal Vulnerability and Information Disclosure Vulnerability
Cherokee is prone to a directory-traversal vulnerability and an information- disclosure vulnerability because the application fails to sufficiently sanitize user-supplied input. Exploiting the issues may allow an attacker to obtain sensitive information that could aid in further attacks. Cherokee...
CVE-2009-4224
Multiple PHP remote file inclusion vulnerabilities in SweetRice 0.5.4, 0.5.3, and earlier allow remote attackers to execute arbitrary PHP code via a URL in the rootdir parameter to 1 plugin/subscriber/inc/post.php and 2 as/lib/newsmodify.php...
PT-2009-6124 · Cherokee · Cherokee Web Server
Name of the Vulnerable Software and Affected Versions: Cherokee Web Server versions 0.5.4 and earlier Description: A directory traversal issue allows remote attackers to read arbitrary files by including a /.. slash backslash dot dot in the URL. Recommendations: For Cherokee Web Server versions...
Re: Cherokee Web Server 0.5.4 Denial Of Service
This attack should only work on the Windows version of Cherokee Web Server, as it references a DOS-style special device, AUX. This attack can also be launched through a browser as follows: http://www.example.com/AUX...
Cherokee Directory Traversal Vulnerability
Cherokee is prone to a directory-traversal vulnerability because it fails to sufficiently sanitize user-supplied input data. Exploiting the issue may allow an attacker to obtain sensitive information that could aid in further attacks. Cherokee 0.5.4 and prior versions are vulnerable. OpenVAS...
Cherokee <=0.5.4 directory traversal
No description provided by source. Cherokee Web Server = 0.5.4 Directory Traversal Exploit Found By: DrIDE Tested On: Windows XPSP3 Download: www.cherokee-project.com/download/windows - Description - Cherokee Web Server = 0.5.4 is a Windows based HTTP server. This is the latest version of the...
CVE-2008-7118
WeBid auction script 0.5.4 stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain SQL query logs via a direct request for logs/cron.log...
Design/Logic Flaw
Untrusted search path vulnerability in dash 0.5.4, when used as a login shell, allows local users to execute arbitrary code via a Trojan horse .profile file in the current working directory...
CVE-2009-0854
Untrusted search path vulnerability in dash 0.5.4, when used as a login shell, allows local users to execute arbitrary code via a Trojan horse .profile file in the current working directory...