14488 matches found
Design/Logic Flaw
Adobe ColdFusion 8 and 8.0.1 does not properly implement the public access level for CFC methods, which allows remote attackers to invoke these methods via Flex 2 remoting, a different vulnerability than CVE-2006-4725...
Stack overflow
Stack-based buffer overflow in the PGMWebHandler::parserequest function in the StarTeam Multicast Service component STMulticastService 6.4 in Borland CaliberRM 2006 allows remote attackers to execute arbitrary code via a large HTTP request...
CVE-2008-1373
Buffer overflow in the gifreadlzw function in CUPS 1.3.6 allows remote attackers to have an unknown impact via a GIF file with a large codesize value, a similar issue to CVE-2006-4484...
Buffer overflow
Buffer overflow in the gifreadlzw function in CUPS 1.3.6 allows remote attackers to have an unknown impact via a GIF file with a large codesize value, a similar issue to CVE-2006-4484...
CVE-2008-1373
Buffer overflow in the gifreadlzw function in CUPS 1.3.6 allows remote attackers to have an unknown impact via a GIF file with a large codesize value, a similar issue to CVE-2006-4484...
Sql injection
SQL injection vulnerability in postview.php in Clever Copy 3.0 allows remote attackers to execute arbitrary SQL commands via the ID parameter, a different vector than CVE-2008-0363 and CVE-2006-0583...
CVE-2006-7127
creationtimestamp| type| source ---|---|--- 2008-03-26 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/5317...
CVE-2006-7128
creationtimestamp| type| source ---|---|--- 2008-03-26 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/5317...
Apache < 1.3.37 mod_rewrite LDAP Protocol URL Handling Overflow
The remote host appears to be running a version of Apache which is older than 1.3.37. This version contains an off-by-one buffer overflow in the modrewrite module. C Tenable Network Security, Inc. include"compat.inc"; ifdescription scriptid31654; scriptversion"1.26"; scriptcvsdate"Date: 2018/11/1...
Design/Logic Flaw
The password reset feature in PunBB 1.2.16 and earlier uses predictable random numbers based on the system time, which allows remote authenticated users to determine the new password via a brute force attack on a seed that is based on the approximate creation time of the targeted account. NOTE:...
eXV2 Module WebChat 1.60 (roomid) Remote SQL Injection Vulnerability
No description provided by source. Powered by eXV2 WebChat 1.60 SQL Injection AUTHOR : S@BUN HOME : http://www.milw0rm.com/author/1334 MAL : [email protected] DORKS 1 : allinurl :"modules/WebChat" EXPLOIT 1 :...
exv2myannonces-sql.txt
Powered by eXV2 MyAnnonces 1.8 SQL Injection AUTHOR : S@BUN HOME : http://www.milw0rm.com/author/1334 MAİL : [email protected] DORK 1 : eXV2 MyAnnonces EXPLOIT :...
eXV2 Module MyAnnonces - 'lid' SQL Injection
Powered by eXV2 MyAnnonces 1.8 SQL Injection AUTHOR : S@BUN HOME : http://www.milw0rm.com/author/1334 MAÄ°L : [email protected] DORK 1 : eXV2 MyAnnonces EXPLOIT :...
Microsoft Office Web组件ActiveX控件远程代码执行漏洞（MS08-017）
BUGTRAQ ID: 28135,28136 CVECAN ID: CVE-2006-4695,CVE-2007-1201 Microsoft Office Web组件是COM控件集合，用于向Web发布电子表格、图表和数据库，并查看所发布的组件。 Microsoft Office Web组件在解析特制的URL时管理内存资源的方式存在漏洞，如果用户受骗访问了恶意网页的话，就可能触发内存破坏，导致执行任意指令。 Microsoft Office Web Components 2000 临时解决方法： 禁止在Internet Explorer中运行Office Web组件库，为CLSID...
Microsoft Office Web Components OWC.Spreadsheet.9 ActiveX Control overflow
Added: 03/12/2008 CVE: CVE-2006-4695 BID: 28135 OSVDB: 42711 Background Microsoft Office Web Components OWC are a group of OLE classes implemented as ActiveX controls. Problem A buffer overflow vulnerability in the OWC.Spreadsheet.9 ActiveX control allows command execution when a user loads a web...
Debian Security Advisory DSA 1503-2 (kernel-source-2.4.27 (2.4.27-10sarge7))
The remote host is missing an update to kernel-source-2.4.27 2.4.27-10sarge7 announced via advisory DSA 1503-2. OpenVAS Vulnerability Test $Id: deb15032.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1503-2 kernel-source-2.4.27 2.4.27-10sarge7 Authors:...
Debian: Security Advisory (DSA-1503-2)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
[SECURITY] [DSA 1503-2] New Linux kernel 2.4.27 packages fix several issues
------------------------------------------------------------------------ Debian Security Advisory DSA-1503-2 [email protected] http://www.debian.org/security/ dann frazier March 6, 2008 http://www.debian.org/security/faq - ------------------------------------------------------------------------...
openSUSE 10 Security Update : perl-Tk (perl-Tk-5035)
Specially crafted GIF files could crash perl-Tk CVE-2006-4484. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update perl-Tk-5035. The text description of this plugin is C SUSE LLC...
SuSE 10 Security Update : perl-Tk (ZYPP Patch Number 5034)
Specially crafted GIF files could crash perl-Tk. CVE-2006-4484 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid31339; scriptversion"1.16";...