18177 matches found
Cross site scripting
Cross-site scripting XSS vulnerability in search.asp in W1L3D4 Philboard 1.14 and 1.2 allows remote attackers to inject arbitrary web script or HTML via the searchterms parameter. NOTE: this might overlap CVE-2007-4024...
Sql injection
SQL injection vulnerability in forum.asp in W1L3D4 Philboard 1.14 and 1.2 allows remote attackers to execute arbitrary SQL commands via the forumid parameter. NOTE: this might overlap CVE-2008-2334, CVE-2008-1939, CVE-2007-2641, or CVE-2007-0920...
CVE-2008-5192
SQL injection vulnerability in forum.asp in W1L3D4 Philboard 1.14 and 1.2 allows remote attackers to execute arbitrary SQL commands via the forumid parameter. NOTE: this might overlap CVE-2008-2334, CVE-2008-1939, CVE-2007-2641, or CVE-2007-0920...
CVE-2008-5192
CVE-2008-5192 concerns a SQL injection vulnerability in forum.asp of W1L3D4 Philboard versions 1.14 and 1.2, exploitable via the forumid parameter. The root cause is an unsafely handled input for forumid that allows arbitrary SQL execution by an attacker. Connected records corroborate the vulnera...
[security bulletin] HPSBMA02388 SSRT080059 rev.1 - HP OpenView Network Node Manager (OV NNM), Remote Cross Site Scripting (XSS)
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c01607570 Version: 1 HPSBMA02388 SSRT080059 rev.1 - HP OpenView Network Node Manager OV NNM, Remote Cross Site Scripting XSS NOTICE: The information in this Security Bulletin should be acted upon ...
Adobe AIR APSB08-23 / APSB08-22 / APSB08-20 / APSB08-18 Multiple Vulnerabilities
Binary data 4760.prm...
CVE-2007-0072
Heap-based buffer overflow in an unspecified procedure in Trend Micro ServerProtect 5.7 and 5.58 allows remote attackers to execute arbitrary code via unknown vectors, possibly related to a read operation over RPC...
CVE-2007-0074
Trend Micro ServerProtect versions 5.7 and 5.58 contain a heap-based buffer overflow in an unspecified procedure, allowing remote code execution via unknown vectors (possibly related to a folder read operation over RPC). Affected product is Trend Micro ServerProtect; root cause is a heap overflow...
CVE-2007-0072
Trend Micro ServerProtect 5.7 and 5.58 are affected by a heap-based buffer overflow in an unspecified RPC-related procedure that may allow remote code execution. The vulnerability affects the RPC handling path and could enable arbitrary commands to run with the ServerProtect account or an adminis...
CVE-2007-0073
CVE-2007-0073 describes a heap-based buffer overflow in Trend Micro ServerProtect 5.7 and 5.58 . The vulnerability lies in an unspecified procedure, allowing remote attackers to execute arbitrary code, with potential vectors tied to a file read operation over RPC. The issue is characterized as a ...
Sun Solaris DHCP请求处理拒绝服务及代码执行漏洞
BUGTRAQ ID: 32213 CVECAN ID: CVE-2007-5365 Solaris是一款由Sun开发和维护的商业性质UNIX操作系统。 Solaris的DHCP服务器（in.dhcpd1M）处理DHCP请求中的安全漏洞可能允许远程非特权用户杀死DHCP服务进程（拒绝服务）或以root用户权限执行任意指令。 Sun Solaris 9.0x86 Sun Solaris 9.0 Sun Solaris 8.0x86 Sun Solaris 8.0 Sun Solaris 10.0x86 Sun Solaris 10.0 Sun OpenSolaris snv01 -...
Adobe Acrobat and Reader JavaScript buffer overflow
Added: 11/13/2008 CVE: CVE-2007-5659 BID: 27641 OSVDB: 41495 Background Adobe Acrobat is software for creating PDF documents. Adobe Reader is free software for viewing PDF documents. Problem Buffer overflow vulnerabilities in several JavaScript functions allow command execution when a user loads ...
Adobe Acrobat and Reader JavaScript buffer overflow
Added: 11/13/2008 CVE: CVE-2007-5659 BID: 27641 OSVDB: 41495 Background Adobe Acrobat is software for creating PDF documents. Adobe Reader is free software for viewing PDF documents. Problem Buffer overflow vulnerabilities in several JavaScript functions allow command execution when a user loads ...
Critical: Red Hat Security Advisory: flash-plugin security update
An updated Adobe Flash Player package that fixes several security issues is now available for Red Hat Enterprise Linux 3 and 4 Extras. This update has been rated as having critical security impact by the Red Hat Security Response Team. Updated 18th November 2008 This erratum has been updated to...
openSUSE 10 Security Update : flash-player (flash-player-5747)
This update of flash-player fixes several critical security vulnerabilities. CVE-2007-6243, CVE-2008-3873, CVE-2007-4324, CVE-2008-4401, CVE-2008-4503, CVE-2008-4546 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from...
SuSE 10 Security Update : flash-player (ZYPP Patch Number 5757)
This update of flash-player fixes several critical security vulnerabilities. CVE-2007-6243 / CVE-2008-3873 / CVE-2007-4324 / CVE-2008-4401 / CVE-2008-4503 / CVE-2008-4546 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. if NASLLEVEL 3000...
MS08-069: Vulnerabilities in Microsoft XML Core Services Could Allow Remote Code Execution (955218)
The remote host is running a version of Windows that contains a flaw in the Windows XML Core Services. An attacker may be able to execute arbitrary code on the remote host by constructing a malicious script and enticing a victim to visit a website or view a specially crafted email message. C...
Sun Solaris DHCP请求处理漏洞
CVE ID：CVE-2007-5365 Sun Solaris是一款商业性质的操作系统。 Sun Solaris处理DHCP请求存在问题，远程攻击者可以利用漏洞对系统进行拒绝服务攻击。 -处理DHCP请求时in.dhcpd存在边界错误，可导致缓冲区溢出。 -处理DHCP请求时in.dhcpd存在一个未明错误，可导致DHCP服务器守护程序崩溃或以root权限执行任意代码。 Sun Solaris 10 Sun Solaris 8 Sun Solaris 9 可参考如下补丁： -- SPARC Platform -- Solaris 8:...
USN-669-1: gnome-screensaver vulnerabilities
It was discovered that the notify feature in gnome-screensaver could let a local attacker read the clipboard contents of a locked session by using Ctrl-V. CVE-2007-6389 Alan Matsuoka discovered that gnome-screensaver did not properly handle network outages when using a remote authentication...
