SeaMonkey 2.0.x < 2.0.11 Multiple Vulnerabilities

Binary data 5731.prm...

Mozilla SeaMonkey 2.0.x < 2.0.10 Buffer Overflow Vulnerability

Binary data 801269.prm...

Mozilla SeaMonkey 2.0.x < 2.0.9 Multiple Vulnerabilities

Binary data 801286.prm...

Cross site request forgery (csrf)

plugins/acl/acl-backend-vfile.c in Dovecot 1.2.x before 1.2.15 and 2.0.x before 2.0.5 interprets an ACL entry as a directive to add to the permissions granted by another ACL entry, instead of a directive to replace the permissions granted by another ACL entry, in certain circumstances involving...

Mozilla Products Multiple Vulnerabilitie july-10 (Windows)

The host is installed with Mozilla Firefox/Seamonkey that are prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbmozillaprdtsmultvulnwin01jul10.nasl 6444 2017-06-27 11:24:02Z santu $ Mozilla Products Multiple Vulnerabilitie july-10 Windows Authors: Antu Sanadi Copyright: Copyrig...

XOOPS 2.0.x Content 0.5 SQL Injection

+Xoops 2.0.x Module Content +Donwload of Module:http://prdownloads.sourceforge.net/xoops/XOOPS2modcontent-0.5.zip?download +Author: s4r4d0 +mail:[email protected] +TEAM: Fatal Error +Bug: Sql injection has been found in index.php...

Java Runtime Environment HsbParser.getSoundBank Stack Buffer Overflow

Added: 11/06/2009 CVE: CVE-2009-3867 BID: 36881 OSVDB: 59711 Background The Java Runtime Environment JRE is part of the Java Development Kit JDK, a set of programming tools for developing Java applications. The Java Runtime Environment provides the minimum requirements for executing a Java...

VMware Serve Directory Traversal Vulnerability - Nov09 (Linux)

The host is installed with VMWare products and is prone to multiple vulnerability. OpenVAS Vulnerability Test $Id: gbvmwareservdirtravvulnnov09lin.nasl 6518 2017-07-04 13:49:06Z cfischer $ VMware Server Directory Traversal Vulnerability - Nov09 Linux Authors: Sharath S Copyright: Copyright c 2009...

Apache mod_proxy_ftp FTP命令注入漏洞

Apache modproxyftp是一款用于处理FTP代理请求的Apache模块。 Apache modproxyftp存在输入验证错误，远程攻击者可以通过在发送给apache服务器的请求中构建特殊的"Authorization"头，可传递FTP命令给FTP服务器。 在通常的情况下，apache modproxyftp不允许发送任意FTP命令给FTP服务器，Apache只发送一些有线的命令给FTP服务器，如USER, PASS, PWD等，modproxyftp存在漏洞允许用户编码任何FTP命令作为"Authorization"头数据，并由apache传递给FTP服务器执行。 Apac...

Design/Logic Flaw

SPIP 1.9 before 1.9.2i and 2.0.x through 2.0.8 does not use proper access control for 1 ecrire/exec/install.php and 2 ecrire/index.php, which allows remote attackers to conduct unauthorized activities related to installation and backups, as exploited in the wild in August 2009...

CVE-2009-1414

CVE-2009-1414 pertains to Google Chrome 2.0.x, where modifications to the global object can persist across a page transition. The connected sources describe this as enabling universal XSS attacks via unspecified vectors, with the base CVSS v2 score listed as 4.3 (Medium) and an attacker that does...

CVE-2008-2786

Buffer overflow in Firefox 3.0 and 2.0.x has unknown impact and attack vectors. NOTE: due to lack of details as of 20080619, it is not clear whether this is the same issue as CVE-2008-2785. A CVE identifier has been assigned for tracking purposes...

CVE-2008-1363

VMware Workstation 6.0.x before 6.0.3 and 5.5.x before 5.5.6, VMware Player 2.0.x before 2.0.3 and 1.0.x before 1.0.6, VMware ACE 2.0.x before 2.0.1 and 1.0.x before 1.0.5, and VMware Server 1.0.x before 1.0.5 on Windows allow local users to gain privileges via an unspecified manipulation of a...

Sami FTP Server 2.0.x - Multiple Commands Remote Denial of Service Vulnerabilities

Sami FTP Server 2.0.x - Multiple Commands Remote Denial of Service Vulnerabilities source: https://www.securityfocus.com/bid/27817/info Sami FTP Server is prone to multiple remote denial-of-service vulnerabilities because the application fails to handle exceptional conditions. An attacker can...

CVE-2008-0005

modproxyftp in Apache 2.2.x before 2.2.7-dev, 2.0.x before 2.0.62-dev, and 1.3.x before 1.3.40-dev does not define a charset, which allows remote attackers to conduct cross-site scripting XSS attacks using UTF-7 encoding...

Null pointer dereference

Balabit syslog-ng 2.0.x before 2.0.6 and 2.1.x before 2.1.8 allows remote attackers to cause a denial of service crash via a message with a timestamp that does not contain a trailing space, which triggers a NULL pointer dereference...

CVE-2007-2858

SQL injection vulnerability in the IP-Search functionality in the IP-Tracking Mod for phpBB 2.0.x allows remote authenticated administrators to execute arbitrary SQL commands via the Search Query field...

Sql injection

SQL injection vulnerability in the IP-Search functionality in the IP-Tracking Mod for phpBB 2.0.x allows remote authenticated administrators to execute arbitrary SQL commands via the Search Query field...

CVE-2007-2858

CVE-2007-2858 describes an SQL injection in the IP-Search function of the IP-Tracking Mod for phpBB 2.0.x. The vulnerability allows remote authenticated administrators to execute arbitrary SQL commands through the Search Query field. The provided documents confirm the affected software/module and...

CVE-2007-2858

SQL injection vulnerability in the IP-Search functionality in the IP-Tracking Mod for phpBB 2.0.x allows remote authenticated administrators to execute arbitrary SQL commands via the Search Query field...