KLA10172 Vulnerability in Garmin Communicator Plugin

An improper restriction was found in Garmin Communicator Plug-In. By exploiting this vulnerability malicious users can obtain sensitive information or reconfigure GPS device. This vulnerability can be exploited remotely via unspecified vectors. Original advisories - Related products...

Secunia Research: Garmin Communicator Plug-In Domain Locking Security Bypass

====================================================================== Secunia Research 07/05/2009 - Garmin Communicator Plug-In Domain Locking Security Bypass - ====================================================================== Table of Contents Affected...

FreeBSD Ports: squid

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

RHEL 5 : xen (RHSA-2008:0194)

The remote Redhat Enterprise Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2008:0194 advisory. - xen xenmon.py / xenbaked insecure temporary file accesss CVE-2007-3919 - QEMU Buffer overflow via crafted net socket listen option...

[SECURITY] [DSA 1502-1] New wordpress packages fix multiple vulnerabilities

------------------------------------------------------------------------ Debian Security Advisory DSA-1502-1 [email protected] http://www.debian.org/security/ Noah Meyerhans February 22, 2008 http://www.debian.org/security/faq -...

CVE-2008-0194

Directory traversal vulnerability in wp-db-backup.php in WordPress 2.0.3 and earlier allows remote attackers to read arbitrary files, delete arbitrary files, and cause a denial of service via a .. dot dot in the backup parameter in a wp-db-backup.php action to wp-admin/edit.php. NOTE: this might ...

CVE-2008-0194

CVE-2008-0194 is a directory traversal vulnerability in WordPress: wp-db-backup.php (backup action to wp-admin/edit.php) allowing remote attackers to read arbitrary files, delete files, and cause a denial of service via a “..” in the backup parameter. Affected: WordPress 2.0.3 and earlier. The co...

CVE-2007-0194

The CVE-2007-0194 entry concerns MKPortal M1.1 RC1. An attacker can remote‑access admin.php and trigger MK_PATH=1 to cause an error message that reveals internal path information, exposing sensitive data (confidentiality impact). The vulnerability is rooted in an information disclosure flaw in MK...

CVE-2006-0194

Cross-site scripting XSS vulnerability in default.asp in FogBugz 4.029, and other versions before 4.0.33, allows remote attackers to inject arbitrary web script or HTML via the dest parameter in the pgLogon page...

CVE-2005-0194

Squid 2.5, when processing the configuration file, parses empty Access Control Lists ACLs, including proxyauth ACLs without defined auth schemes, in a way that effectively removes arguments, which could allow remote attackers to bypass intended ACLs if the administrator ignores the parser warning...

CVE-2005-0194

CVE-2005-0194 concerns Squid 2.5 where, during configuration parsing, empty Access Control Lists (ACLs) including proxy_auth ACLs without defined auth schemes are processed in a way that can remove arguments, potentially allowing remote attackers to bypass intended ACLs if parser warnings are ign...

CVE-2004-0194

CVE-2004-0194 affects Adobe Acrobat Reader 5.1. It is a stack-based buffer overflow in the OutputDebugString function triggered by a PDF containing XFDF data, enabling remote code execution. The vulnerability has a CVSS base score of 7.5 (Network, Low attack complexity, no authentication required...

CVE-2003-0194

tcpdump does not properly drop privileges to the pcap user when starting up...

CVE-2003-0194

tcpdump (affected up to versions prior to the Red Hat patches) had a bug where privileges were not dropped to user 'pcap' at startup due to a compilation error, causing it to run as root unless the -U flag was used. Red Hat advisories RHSA-2003:151 and related NASL/redhat entries describe updated...

CVE-2003-0194

tcpdump does not properly drop privileges to the pcap user when starting up...

CVE-2003-0194

tcpdump does not properly drop privileges to the pcap user when starting up...

CVE-2001-0194

CVE-2001-0194: A buffer overflow in the httpGets function of CUPS 1.1.5 allows remote attackers to execute arbitrary commands via a long input line. The vulnerability affects CUPS 1.1.5 and is rated high severity (CVSS vector: Network, No authentication, all confidentiality/integrity/availability...

CVE-2001-0194

Buffer overflow in httpGets function in CUPS 1.1.5 allows remote attackers to execute arbitrary commands via a long input line...

CVE-2001-0194

Buffer overflow in httpGets function in CUPS 1.1.5 allows remote attackers to execute arbitrary commands via a long input line...

CVE-2000-0194

The CVE-2000-0194 issue affects Corel Linux, specifically the buildxconf component. Local users can modify or create arbitrary files by supplying -x or -f parameters, indicating an insecure handling of these options. The underlying details (root cause, affected versions, and remediation) are not ...