105 matches found
CVE-2008-0387
Firebird CVE-2008-0387: A vulnerability in External Data Representation (XDR) processing allows memory corruption via crafted XDR requests, potentially enabling remote code execution. Affected: Firebird releases up to 2.1.x before RC1, including 1.0.3 and 1.5.x before 1.5.6, 2.0.x before 2.0.4. S...
CORE-2007-1219: Firebird Remote Memory Corruption
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Core Security Technologies - CoreLabs Advisory http://www.coresecurity.com/corelabs Firebird Remote Memory Corruption Advisory Information Title: Firebird Remote Memory Corruption Advisory ID: CORE-2007-1219 Advisory URL:...
Core Security Technologies Advisory 2007.1219
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Core Security Technologies - CoreLabs Advisory http://www.coresecurity.com/corelabs Firebird Remote Memory Corruption Advisory Information Title: Firebird Remote Memory Corruption Advisory ID: CORE-2007-1219 Advisory URL:...
Firebird Remote Memory Corruption
Advisory Information Title: Firebird Remote Memory Corruption Advisory ID: CORE-2007-1219 Advisory URL: https://www.coresecurity.com/core-labs/advisories/firebird-remote-memory-corruption Date published: 2008-01-28 Date of last update: 2008-01-24 Vendors contacted: Firebird SQL Release mode:...
joomla150beta-sql.txt
Hi, These bugs were published in full-disclosure about 2 weeks ago CVE : CVE-2007-0373, CVE-2007-0374 and CVE-2007-0375, CVE-2007-0387 . In Mambo 4.6.1 and Joomla 1.0.11 and 1.5 Beta , the 'id' parameter can cause sql injection when cancelling content editting . Other versions maybe affected too...
CVE-2007-0387
The CVE-2007-0387 issue affects the Joomla! Weblinks (com_weblinks) component, specifically in models/category.php where the catid parameter is used in SQL queries. This is a SQL injection vulnerability that could allow remote attackers to inject arbitrary SQL commands. The vulnerability is assoc...
CVE-2006-0387
CVE-2006-0387 is a stack-based buffer overflow in Apple Safari/WebKit on Mac OS X 10.4.5 and earlier and 10.3.9 and earlier. The vulnerability allows remote attackers to run arbitrary code via crafted JavaScript on a web page (unspecified vectors), and is distinct from CVE-2005-4504. Affected sys...
Mac OS X Multiple Vulnerabilities (Security Update 2006-001)
The remote host is running Apple Mac OS X, but lacks Security Update 2006-001. This security update contains fixes for the following applications : apachemodphp automount Bom Directory Services iChat IPSec LaunchServices LibSystem loginwindow Mail rsync Safari Syndication C Tenable Network...
[SECURITY] [DSA 704-1] New remstats packages fix several vulnerabilities
-------------------------------------------------------------------------- Debian Security Advisory DSA 704-1 [email protected] http://www.debian.org/security/ Martin Schulze April 4th, 2005 http://www.debian.org/security/faq -...
[SECURITY] [DSA 704-1] New remstats packages fix several vulnerabilities
-------------------------------------------------------------------------- Debian Security Advisory DSA 704-1 [email protected] http://www.debian.org/security/ Martin Schulze April 4th, 2005 http://www.debian.org/security/faq -...
[Full-disclosure] [SECURITY] [DSA 704-1] New remstats packages fix several vulnerabilities
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- Debian Security Advisory DSA 704-1 [email protected] http://www.debian.org/security/ Martin Schulze April 4th, 2005 http://www.debian.org/security/faq -...
CVE-2002-0387
Buffer overflow in gxnsapi6.dll NSAPI plugin of the Connector Module for Sun ONE Application Server before 6.5 allows remote attackers to execute arbitrary code via a long HTTP request URL...
CVE-2002-0387
CVE-2002-0387 refers to a buffer overflow in the gxnsapi6.dll NSAPI plugin of the Sun ONE Application Server’s Connector Module. The overflow occurs when handling a long HTTP request URL, enabling a remote attacker to potentially execute arbitrary code on affected hosts. The issue affects Sun ONE...
CVE-2004-0387
Stack-based buffer overflow in the RT3 plugin, as used in RealPlayer 8, RealOne Player, RealOne Player 10 beta, and RealOne Player Enterprise, allows remote attackers to execute arbitrary code via a malformed .R3T file...
CVE-2004-0387
The CVE-2004-0387 issue is a stack-based buffer overflow in the RT3 plugin used by RealPlayer 8, RealOne Player, RealOne Player 10 beta, and RealOne Player Enterprise, allowing remote code execution via malformed .R3T files. Affected components: RT3 plugin within RealPlayer/RealOne Player family....
CVE-2004-0387
Stack-based buffer overflow in the RT3 plugin, as used in RealPlayer 8, RealOne Player, RealOne Player 10 beta, and RealOne Player Enterprise, allows remote attackers to execute arbitrary code via a malformed .R3T file...
CVE-2002-0387
Buffer overflow in gxnsapi6.dll NSAPI plugin of the Connector Module for Sun ONE Application Server before 6.5 allows remote attackers to execute arbitrary code via a long HTTP request URL...
CVE-2001-0387
CVE-2001-0387 is a format-string vulnerability in HylaFAX’s hfaxd that allows local users to gain privileges via the -q command-line argument in versions prior to 4.1.b2_2. The issue is documented across multiple sources (NVD, CVE list, Debian/DSA and Mandrake advisory). Exploitation would enable...
CVE-2000-0387
The makelev program in the golddig game from the FreeBSD ports collection allows local users to overwrite arbitrary files...
CVE-1999-0387
CVE-1999-0387 affects Windows 95/98 where a legacy credential caching mechanism can be exploited to read plaintext network passwords. The Red Hat and CVE records reflect the same description: a local/system-level weakness in the credential cache that may expose confidential credentials. Documents...