1102 matches found
Download-Engine 1.4.2 - spaw Remote File Inclusion
Download-Engine 1.4.2 - spaw Remote File Inclusion ====================================================================================== Download-Engine Remote File Include ====================================================================================== Info:- Scripts: Download-Engine...
Download-Engine <= 1.4.2 (spaw) Remote File Include Vulnerability
No description provided by source. ====================================================================================== Download-Engine Remote File Include ====================================================================================== Info:- Scripts: Download-Engine Download:...
Download-Engine <= 1.4.2 (spaw) Remote File Include Vulnerability
Exploit for unknown platform in category web applications ================================================================= Download-Engine = 1.4.2 spaw Remote File Include Vulnerability =================================================================...
Download-Engine 1.4.2 - 'spaw' Remote File Inclusion
====================================================================================== Download-Engine Remote File Include ====================================================================================== Info:- Scripts: Download-Engine Download:...
CVE-2005-2738
Java 1.4.2 before 1.4.2 Release 2 on Apple Mac OS X does not prevent multiple programs from opening the same port as a Java ServerSocket, which allows local users to operate a Java program that intercepts network data intended for the ServerSocket of a different Java program...
CVE-2005-2529
Unspecified vulnerability in Java 1.4.2 before 1.4.2 Release 2 on Apple Mac OS X allows local users to gain privileges via unspecified attack vectors relating to "the utility used to update Java shared archives."...
CVE-2005-4668
Technical specifics for CVE-2005-4668 (ParosProxy/HSQLDB) are not provided in the supplied connected documents. Monitor for updates.
[SECURITY] [DSA 938-1] New koffice packages fix arbitrary code execution
-------------------------------------------------------------------------- Debian Security Advisory DSA 938-1 [email protected] http://www.debian.org/security/ Martin Schulze January 12th, 2006 http://www.debian.org/security/faq -...
CVE-2005-4668
The embedded HSQLDB in ParosProxy before 3.2.7, when running with JDK 1.4.2 before 1.4.208, allows local users to execute arbitrary comands via crafted SQL commands that interact with HSQLDB through JDBC, a similar vulnerability to CVE-2003-0845...
Fedora Core 3 : koffice-1.4.2-0.FC3.2 (2005-984)
Tue Oct 11 2005 Than Ngo 4:1.4.2-0.FC3.2 - remove security fix which is included in new 1.4.2 upstream - Thu Sep 29 2005 Than Ngo 4:1.4.2-0.FC3.1 - update to 1.4.2 - apply upstream patch to fix CVE-2005-2971 kword buffer overflow 169486 Note that Tenable Network Security has extracted the...
CVE-2001-1482
CVE-2001-1482 describes an SQL injection in phpBB 1.4.2, triggered via the $sortby parameter in bb_memberlist.php. The vulnerable component is the member list generation logic, where input is not sufficiently sanitized, allowing remote attackers to execute arbitrary SQL queries. The provided docu...
CVE-2001-1482
SQL injection vulnerability in bbmemberlist.php for phpBB 1.4.2 allows remote attackers to execute arbitrary SQL queries via the $sortby variable...
CVE-2005-1080
Directory traversal vulnerability in the Java Archive Tool Jar utility in J2SE SDK 1.4.2 and 1.5, and OpenJDK, allows remote attackers to create or overwrite arbitrary files via a .. dot dot in filenames in a .jar file...
CVE-2005-0836
Argument injection vulnerability in Java Web Start for J2SE 1.4.2 up to 1.4.206 allows untrusted applications to gain privileges via the value parameter of a property tag in a JNLP file...
CVE-2005-0836
CVE-2005-0836 describes an argument injection in Sun Java Web Start/J2SE (Java Web Start for J2SE 1.4.2 up to 1.4.2_06) where the value parameter in a JNLP file’s property tag can be exploited to grant privileges to untrusted applications. This can bypass Java security restrictions and may lead t...
CVE-2004-1733
Directory traversal vulnerability in MyDMS 1.4.2 and other versions allows remote registered users to read arbitrary files via .. dot dot sequences in the URL...
CVE-2004-1424
CVE-2004-1424 affects Moodle 1.4.2 and earlier. A cross-site scripting (XSS) flaw exists in view.php where the search parameter can be exploited to inject arbitrary scripts/HTML. This is a remote, unauthenticated vector; impact includes potential partial integrity compromise and user-facing scrip...
[SA13360] Jakarta Lucene "results.jsp" Cross-Site Scripting Vulnerability
TITLE: Jakarta Lucene "results.jsp" Cross-Site Scripting Vulnerability SECUNIA ADVISORY ID: SA13360 VERIFY ADVISORY: http://secunia.com/advisories/13360/ CRITICAL: Less critical IMPACT: Cross Site Scripting WHERE: From remote SOFTWARE: Jakarta Lucene 1.x http://secunia.com/product/4352/...
Important: Red Hat Security Advisory: squirrelmail security update
An updated SquirrelMail package that fixes several security vulnerabilities is now available. SquirrelMail is a webmail package written in PHP. Multiple vulnerabilities have been found which affect the version of SquirrelMail shipped with Red Hat Enterprise Linux 3. An SQL injection flaw was foun...
Mutt-1.4.2 fixes buffer overflow.
Mutt-1.4.2 has just been released; this version fixes a buffer overflow that can be triggered by incoming messages. There are reports about spam that has actually triggered this problem and crashed mutt. It is recommended that users of mutt versions prior to 1.4.2 upgrade to this version, or appl...