6376 matches found
CVE-2006-3722
Unspecified vulnerability in PeopleSoft Enterprise Portal for Oracle PeopleSoft Enterprise Portal 8.4 Bundle 16, 8.8 Bundle 10, and 8.9 Bundle 3 has unknown impact and attack vectors, aka Oracle Vuln PSE01...
GLSA-200606-16 : DokuWiki: PHP code injection
The remote host is affected by the vulnerability described in GLSA-200606-16 DokuWiki: PHP code injection Stefan Esser discovered that the DokuWiki spell checker fails to properly sanitize PHP's 'complex curly syntax'. Impact : A unauthenticated remote attacker may execute arbitrary PHP commands ...
PuTTy.exe 0.53 - Validation Remote Buffer Overflow (Metasploit)
This file is part of the Metasploit Framework and may be redistributed according to the licenses defined in the Authors field below. In the case of an unknown or missing license, this file defaults to the same license as the core Framework dual GPLv2 and Artistic. The latest version of the...
GLSA-200604-16 : xine-lib: Buffer overflow vulnerability
The remote host is affected by the vulnerability described in GLSA-200604-16 xine-lib: Buffer overflow vulnerability Federico L. Bossi Bonin discovered that when handling MPEG streams xine-lib fails to make a proper boundary check of the input data supplied by the user before copying it to an...
SUSE-SA:2006:021: MozillaFirefox,mozilla
The remote host is missing the patch for the advisory SUSE-SA:2006:021 MozillaFirefox,mozilla. A number of security issues have been fixed in the Mozilla browser suite and the Mozilla Firefox browser. These problems could be used by remote attackers to gain privileges, gain access to confidential...
ShoutBOOK <= 1.1 XSS
==================== Discovered by: Qex Date: 16 April 2006 ==================== Write a message: Name: XSS Location: optional Website: optional Comments: XSS...
phpXplorer XSS vuln.
phpXplorer XSS vuln. Vuln. discovered by : r0t Date: 16 dec. 2005 orginal advisory:http://pridels.blogspot.com/2005/12/phpxplorer-xss-vuln.html vendor:http://www.phpxplorer.org/ affected version:0.9.12 and prior Product Description: phpXplorer is a free open source file management system / explor...
arc insecure temporary file creation
arc insecure temporary file creation Vendor: http://arc.sourceforge.net/ Advisory: http://www.zataz.net/adviso/arc-09052005.txt Vendor informed: yes Exploit available: yes Impact : low Exploitation : low The vulnerability is caused due to temporary file being created insecurely. The temporary fil...
Fedora Core 3 : mysql-3.23.58-16.FC3.1 (2005-304)
Sat Apr 2 2005 Tom Lane 3.23.58-16.FC3.1 - Repair uninitialized variable in security2 patch. - Enable testing on 64-bit arches; continue to exclude s390x which still has issues. - Sat Mar 19 2005 Tom Lane 3.23.58-15.FC3.1 - Backpatch repair for CVE-2005-0709, CVE-2005-0710, CVE-2005-0711...
GLSA-200507-16 : dhcpcd: Denial of Service vulnerability
The remote host is affected by the vulnerability described in GLSA-200507-16 dhcpcd: Denial of Service vulnerability infamous42md discovered that dhcpcd can be tricked to read past the end of the supplied DHCP buffer. As a result, this might lead to a crash of the daemon. Impact : With a maliciou...
CVE-2002-2060
CVE-2002-2060 affects Links 2.0 pre4. The vulnerability is a buffer overflow in the PNG gamma table handling (large 16-bit PNG images), allowing remote network-triggered crashes and potential arbitrary code execution in affected client browsers. Connected sources confirm the same description acro...
GLSA-200505-16 : ImageMagick, GraphicsMagick: Denial of Service vulnerability
The remote host is affected by the vulnerability described in GLSA-200505-16 ImageMagick, GraphicsMagick: Denial of Service vulnerability Tavis Ormandy of the Gentoo Linux Security Audit Team discovered a Denial of Service vulnerability in the XWD decoder of ImageMagick and GraphicsMagick when...
Solaris 9 (x86) : 114348-16
SunOS 5.9x86: /usr/sbin/in.routed patch. Date this patch was last updated by Sun : Oct/26/07 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if...
Solaris 9 (sparc) : 112911-16
SunOS 5.9: ifconfig Patch. Date this patch was last updated by Sun : May/27/05 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if ! definedfunc"bnrandom"...
Mac OS X iChat Link Handling Arbitrary Command Execution (Security Update 2004-09-16)
The remote host is missing Security Update 2004-09-16. This security update is for iChat. There is a bug in older versions of iChat where an attacker may execute commands on the local system by sending malformed links which will execute local commands to an iChat user on the remote host. C Tenabl...
Solaris 9 (sparc) : 113273-16
SunOS 5.9: /usr/lib/ssh/sshd patch. Date this patch was last updated by Sun : Oct/19/07 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if !...
Solaris 2.6 (x86) : 105530-16
SunOS 5.6x86: /kernel/drv/tcp patch. Date this patch was last updated by Sun : Jun/05/03 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if !...
Linux Kernel i2c Integer Overflow Vulnerability
Product: Linux Kernel i2c driver Versions: 2.4.x Bug: Integer Overflow Impact: Kernel Panic Code execution with kernel privs Risk: High/Medium Date: June 16, 2004 Author: shaun2k2 http://www.nettwerked.co.uk Introduction The Linux Kernel is the core of the Linux Operating System, and provides the...
CVE-2002-0576
CVE-2002-0576 affects ColdFusion 5.0 and earlier on Windows. A remote attacker can reveal the absolute pathname of .cfm/.dbm files by sending an HTTP request containing an MS-DOS device name (e.g., NUL), which leaks the path in an error message. The associated NVD metric indicates partial confide...
