GnuTLS Server Name extension Denial of Service

Overview A vulnerability exists in GnuTLS that may allow a remote attacker to cause a denial of service. Description GnuTLS contains a vulnerability in gnults-serv that may result in a denial of service when handling a specially crafted Client Hello message. According to CERT-FI Vulnerability...

Unfixed XSS vulnerability at docbweb.acp.pt

Security researcher BackDoor, has submitted on 21/05/2008 a cross-site-scripting XSS vulnerability affecting docbweb.acp.pt, which at the time of submission ranked 426623 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 08/01/2009. It is current...

libvorbis多个缓冲区溢出漏洞

BUGTRAQ ID: 29206 CVECAN ID: CVE-2008-1419,CVE-2008-1420,CVE-2008-1423 libvorbis是开源的音频音乐编码解码函数库。 libvorbis在处理畸形格式的OGG文件时存在漏洞，远程攻击者可能利用此漏洞控制用户系统。 如果特制的OGG文件包含有codebook维度为0的话，打开该文件就会导致使用libvorbis库的应用程序崩溃、出现死循环或堆溢出。...

CVE-2008-2268

Open redirect vulnerability in interface/redirect.htm.php in Mjguest 6.7 GT Rev.01 allows user-assisted remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the goto parameter in a redirect action to mjguest.php. NOTE: this is user-assisted because...

CVE-2008-2187

CVE-2008-2187 is an XSS vulnerability affecting Mjguest 6.7 GT Rev.01, where a remote attacker can inject arbitrary script via the level parameter in a redirect action (potentially involving interface/redirect.htm.php). The linked records (NVD, CVE listings) confirm the vulnerable component (mjgu...

Unfixed XSS vulnerability at www.living-foods.com

Security researcher Mystick, has submitted on 05/12/2008 a cross-site-scripting XSS vulnerability affecting www.living-foods.com, which at the time of submission ranked 97125 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 30/01/2009. It is...

Solaris 10 (sparc) : 128328-01

SunOS 5.10: usbms patch. Date this patch was last updated by Sun : Apr/18/08 %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if ! definedfunc"bnrandom"...

Solaris 10 (x86) : 128329-01

SunOS 5.10x86: usbms patch. Date this patch was last updated by Sun : Apr/18/08 %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if ! definedfunc"bnrandom"...

Wonderware SuiteLink null pointer dereference

Overview A vulnerability in the way Wonderware SuiteLink handles malformed TCP packets could result in a denial of service. Description Wonderware SuiteLink is a protocol based on TCP/IP that runs as a service listening for connections on port 5413/tcp on Microsoft Windows operating systems. A...

Unfixed XSS vulnerability at www.hoy.es

Security researcher Kami, has submitted on 05/01/2008 a cross-site-scripting XSS vulnerability affecting www.hoy.es, which at the time of submission ranked 33272 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 07/01/2008. It is currently unfixe...

CVE-2008-2072

creationtimestamp| type| source ---|---|--- 2008-05-01 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/5529...

Fixed XSS vulnerability at etnablog.altervista.org

Security researcher g4br1, has submitted on 05/01/2008 a cross-site-scripting XSS vulnerability affecting etnablog.altervista.org, which at the time of submission ranked 515 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 07/01/2008. It is...

Slackware 12.0 / current : kdelibs (SSA:2008-116-01)

New kdelibs packages are available for Slackware 12.0 and -current to fix a security issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Slackware Security Advisory 2008-116-01. The text itself is copyright C...

Fedora 7 : otrs-2.1.5-4.fc7 (2008-3100)

Security update: Add upstream patch for CVE-2008-1515 / OSA-2008-01 Vulnerability in OTRS SOAP interface allowing remote access without valid SOAP user - http://otrs.org/advisory/OSA-2008-01-en/ Note that Tenable Network Security has extracted the preceding description block directly from the...

Squid Web代理缓存arrayShrink()函数远程拒绝服务漏洞

BUGTRAQ ID: 28693 CVECAN ID: CVE-2008-1612 Squid是一个高效的Web缓存及代理程序，最初是为Unix平台开发的，现在也被移植到Linux和大多数的Unix类系统中，最新的Squid可以运行在Windows平台下。 Squid的arrayShrink函数操控系统内存中所储存的缓存对象的HTTP头的方式存在漏洞，攻击者可以利用这个漏洞导致squid子进程退出，这会中断已有连接，导致代理服务不可以。 Squid父进程会启动一个新的子进程，因此这种攻击仅会导致临时的拒绝服务。这个漏洞是由于没有正确地修复CVE-2007-6239中所述漏洞而导致的。...

Unfixed XSS vulnerability at default.avatartech.com

Security researcher tweetycoaster, has submitted on 04/01/2008 a cross-site-scripting XSS vulnerability affecting default.avatartech.com, which at the time of submission ranked 4345666 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 07/01/2008...

Unfixed XSS vulnerability at modelselect.tk

Security researcher Uber0n, has submitted on 04/01/2008 a cross-site-scripting XSS vulnerability affecting modelselect.tk, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 04/01/2008. It is currently...

CVE-2008-6522

creationtimestamp| type| source ---|---|--- 2008-04-01 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/31584...

Unfixed XSS vulnerability at www.datingchatten.com

Security researcher Uber0n, has submitted on 04/01/2008 a cross-site-scripting XSS vulnerability affecting www.datingchatten.com, which at the time of submission ranked 4501052 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 07/01/2008. It is...

Solaris 8/9/10 - 'fifofs I_PEEK' Local Kernel Memory Leak

/ $Id: raptorpeek.c,v 1.1 2007/10/18 08:09:02 raptor Exp $ raptorpeek.c - Solaris fifofs IPEEK kernel memory leak Copyright c 2007 Marco Ivaldi Lame integer signedness error in FIFO filesystems named pipes on Sun Solaris 8 through 10 allows local users to read the contents of unspecified memory...