xdm -- remote denial of service

nvd.nist.gov reports X.Org xdm 1.1.10, 1.1.11, and possibly other versions, when performing authentication using certain implementations of the crypt API function that can return NULL, allows remote attackers to cause a denial of service NULL pointer dereference and crash by attempting to log int...

Fedora 19 : seamonkey-2.17-1.fc19 (2013-4871)

Update to 2.17 Fix CVE-2013-0788-0797, CVE-2013-0800 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...

Mozilla SeaMonkey Multiple Vulnerabilities -01 Apr13 (Mac OS X)

This host is installed with Mozilla SeaMonkey and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbmozillaseamonkeymultvuln01apr13macosx.nasl 6065 2017-05-04 09:03:08Z teissa $ Mozilla SeaMonkey Multiple Vulnerabilities -01 Apr13 Mac OS X Authors: Thanga Prakash S Copyright...

Bigware Shop 2.1x - main_bigware_54.php SQL Injection

Bigware Shop 2.1x - mainbigware54.php SQL Injection source: https://www.securityfocus.com/bid/53810/info Bigware Shop is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. A successful exploit will allow an attacke...

JVN#85934986: Logitec LAN-W300N/R series fails to restrict access permissions

The LAN-W300N/R series are wireless LAN routers. Logitec LAN-W300N/R series contain an issue where access permissions are not restricted. Impact An attacker that can access the product may log in with administrative privileges. As a result, settings may be changed or altered by the attacker who...

WordPress Plugin Tune Library 2.17 - SQL Injection

WordPress Plugin Tune Library 2.17 - SQL Injection Exploit Title: WordPress Tune Library plugin prefix . "tracks where artist != '' and artist like '" .$artistletter . "%' order by artist";...

WordPress Plugin Tune Library 2.17 - SQL Injection

Exploit Title: WordPress Tune Library plugin prefix . "tracks where artist != '' and artist like '" .$artistletter . "%' order by artist";...

WordPress Tune Library plugin <= 2.17 SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: WordPress Tune Library plugin prefix . "tracks where artist != '' and artist like '" .$artistletter . "%' order by artist"; 0day.today 2018-03-09...

CVE-2009-0485

Cross-site request forgery CSRF vulnerability in Bugzilla 2.17 to 2.22.7, 3.0 before 3.0.7, 3.2 before 3.2.1, and 3.3 before 3.3.2 allows remote attackers to delete unused flag types via a link or IMG tag to editflagtypes.cgi...

CVE-2009-0485

Cross-site request forgery CSRF vulnerability in Bugzilla 2.17 to 2.22.7, 3.0 before 3.0.7, 3.2 before 3.2.1, and 3.3 before 3.3.2 allows remote attackers to delete unused flag types via a link or IMG tag to editflagtypes.cgi...

CVE-2006-0913

CVE-2006-0913 describes an SQL injection in the Bugzilla component for the web front end. The vulnerability affects Bugzilla versions 2.17 through 2.18.4 and 2.20, where remote authenticated users with administrative privileges can exploit the flaw via the whinedays parameter exposed from editpar...

CVE-2006-0204

Multiple cross-site scripting XSS vulnerabilities in Wordcircle 2.17 allow remote attackers to inject arbitrary web script or HTML via 1 the "Course name" field in index.php when the frm parameter has the value "mine" and 2 possibly certain other fields in unspecified scripts...

Sql injection

Multiple SQL injection vulnerabilities in Wordcircle 2.17 allow remote attackers to 1 execute arbitrary SQL commands and bypass authentication via the password field in the login action to index.php involving vlogin.php and suser.php and 2 have other unknown impact via certain other fields in...

CVE-2006-0205

CVE-2006-0205 covers multiple SQL injection vulnerabilities in Wordcircle 2.17. The documented vectors include: (1) bypassing authentication and executing arbitrary SQL via the password field in the login action to index.php (involving v_login.php and s_user.php); and (2) additional, unspecified ...

CVE-2006-0204

CVE-2006-0204 affects Wordcircle 2.17. The vulnerability is described as multiple cross-site scripting (XSS) flaws that allow remote attackers to inject arbitrary web script or HTML via the “Course name” field in index.php when the frm parameter has the value “mine,” and possibly additional field...

CVE-2006-0205

Multiple SQL injection vulnerabilities in Wordcircle 2.17 allow remote attackers to 1 execute arbitrary SQL commands and bypass authentication via the password field in the login action to index.php involving vlogin.php and suser.php and 2 have other unknown impact via certain other fields in...

CVE-2006-0204

Multiple cross-site scripting XSS vulnerabilities in Wordcircle 2.17 allow remote attackers to inject arbitrary web script or HTML via 1 the "Course name" field in index.php when the frm parameter has the value "mine" and 2 possibly certain other fields in unspecified scripts...

CVE-2005-2174

Bugzilla 2.17.x, 2.18 before 2.18.2, 2.19.x, and 2.20 before 2.20rc1 inserts a bug into the database before it is marked private, which introduces a race condition and allows attackers to access information about the bug via buglist.cgi before MySQL replication is complete...