CVE-2007-1617

The CVE-2007-1617 entry describes a SQL injection vulnerability in ScriptMagix Recipes 2.0 and earlier, where the index.php script is vulnerable via the catid parameter. The underlying issue is improper handling of user-supplied input, allowing remote attackers to construct and execute arbitrary ...

[SECURITY] [DSA 1085-1] New lynx-cur packages fix several vulnerabilities

-------------------------------------------------------------------------- Debian Security Advisory DSA 1085-1 [email protected] http://www.debian.org/security/ Martin Schulze June 1st, 2006 http://www.debian.org/security/faq -...

DSA-1085-1 lynx-cur - several vulnerabilities

Bulletin has no description...

[SECURITY] [DSA 1077-1] New lynx-ssl packages fix denial of service

-------------------------------------------------------------------------- Debian Security Advisory DSA 1077-1 [email protected] http://www.debian.org/security/ Martin Schulze May 26th, 2006 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1076-1] New lynx packages fix denial of service

-------------------------------------------------------------------------- Debian Security Advisory DSA 1076-1 [email protected] http://www.debian.org/security/ Martin Schulze May 26th, 2006 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1076-1] New lynx packages fix denial of service

-------------------------------------------------------------------------- Debian Security Advisory DSA 1076-1 [email protected] http://www.debian.org/security/ Martin Schulze May 26th, 2006 http://www.debian.org/security/faq -...

CVE-2006-1617

CVE-2006-1617 relates to multiple XSS vulnerabilities in Advanced Poll 2.02. The affected components are comments.php (id parameter) and page.php (poll_id parameter), allowing remote attackers to inject arbitrary script/HTML. The description notes a possible relation to CVE-2006-1616 (SQL injecti...

CVE-2005-1617

The CVE-2005-1617 entry concerns Willings WebCam and WebCam Lite up to version 2.8, where passwords are stored in memory in plaintext. This is the underlying vulnerability: a local-access risk that could allow a user with access to the host to read the password from memory. The available document...

CVE-2002-1617

The CVE-2002-1617 entry concerns HP Tru64 UNIX 5.x with multiple local buffer overflow vulnerabilities. The affected components are dtaction (long -contextDir), dtprintinfo (long -p), dxterm (long -customization), and dtterm (long DISPLAY env var). The root cause is buffer overflows leading to ar...

CVE-2002-1617

Multiple buffer overflows in HP Tru64 UNIX 5.x allow local users to execute arbitrary code via 1 a long -contextDir argument to dtaction, 2 a long -p argument to dtprintinfo, 3 a long -customization argument to dxterm, or 4 a long DISPLAY environment variable to dtterm...

CVE-2004-1617

CVE-2004-1617 affects Lynx family (lynx, lynx-ssl, lynx-cur) prior to 2.8.6dev.8. Affected component is the HTML parser: processing invalid HTML (notably a TEXTAREA with a large COLS value, or an unterminated large tag name) can cause an infinite loop, i.e., a denial of service. Debians OpenVAS e...

CVE-2004-1617

Lynx, lynx-ssl, and lynx-cur before 2.8.6dev.8 allow remote attackers to cause a denial of service infinite loop via a web page or HTML email that contains invalid HTML including 1 a TEXTAREA tag with a large COLS value and 2 a large tag name in an element that is not terminated, as demonstrated ...

CVE-2004-1617

Lynx, lynx-ssl, and lynx-cur before 2.8.6dev.8 allow remote attackers to cause a denial of service infinite loop via a web page or HTML email that contains invalid HTML including 1 a TEXTAREA tag with a large COLS value and 2 a large tag name in an element that is not terminated, as demonstrated ...