18185 matches found
faname10-xss.txt
netVigilance Security Advisory 43 Fa Name version 1.0 Multiple XSS Attack Vulnerabilities Description: Fa Name http://webscripts.softpedia.com/script/Content-Management/Fa-Name-41229.html is useful portal CMS for .name websites. You can have a simple portal but useful one for you domain names and...
Mac OS X 10.5.x < 10.5.4 Multiple Vulnerabilities
The remote host is running a version of Mac OS X 10.5.x that is prior to 10.5.4. Mac OS X 10.5.4 contains security fixes for multiple components. C Tenable Network Security, Inc. if !definedfunc"bnrandom" exit0; if NASLLEVEL 3004 exit0; include"compat.inc"; if description scriptid33281;...
Sql injection
Sun Java System Access Manager 6.3 through 7.1 and Sun Java System Identity Server 6.1 and 6.2 do not properly process XSLT stylesheets in XSLT transforms in XML signatures, which allows context-dependent attackers to execute arbitrary code via a crafted stylesheet, a related issue to...
Race condition
Race condition in the ptrace and utrace support in the Linux kernel 2.6.9 through 2.6.25, as used in Red Hat Enterprise Linux RHEL 4, allows local users to cause a denial of service oops via a long series of PTRACEATTACH ptrace calls to another user's process that trigger a conflict between...
CVE-2008-2365
CVE-2008-2365 describes a race condition in Linux kernel ptrace/utrace support (kernel 2.6.9–2.6.25) used by RHEL4. A local user can cause a denial of service (oops) by issuing a long sequence of PTRACE_ATTACH calls that trigger a conflict between utrace_detach and report_quiescent due to a late ...
USN-617-2: Samba regression
USN-617-1 fixed vulnerabilities in Samba. The upstream patch introduced a regression where under certain circumstances accessing large files might cause the client to report an invalid packet length error. This update fixes the problem. We apologize for the inconvenience. Original advisory detail...
Sql injection
SQL injection vulnerability in profile.php in AlstraSoft AskMe Pro 2.1 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter. NOTE: The queid parameter to forumanswer.php is already covered by CVE-2007-4085...
SOL8917 - Linux kernel vulnerability CVE-2007-1217
A flaw in the ISDN CAPI subsystem allows a remote user to cause a denial of service or potential remote access. Exploitation would require the attacker to be able to send arbitrary frames over the ISDN network to the vulnerable system. Information about this advisory is available at the following...
SOL8922 - Linux kernel vulnerability CVE-2007-3739
A flaw in the stack expansion when using the hugetlb kernel on a PowerPC system allows a local user to cause a denial of service. Information about this advisory is available at the following location: Note: This link takes you to a resource outside of AskF5, and it is possible that the informati...
CVE-2007-1899
creationtimestamp| type| source ---|---|--- 2008-06-30 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/5975...
SOL8918 - Linux kernel vulnerability CVE-2007-3851
A flaw in the DRM driver for Intel graphics cards allows a local user to access any part of the main memory. To access the DRM functionality a user must have access to the X server, which is granted through the graphical login. This also only affects systems with an Intel 965 or later graphic...
MyBloggie 2.1.6 - Multiple SQL Injections
MyBloggie 2.1.6 - Multiple SQL Injections netVigilance Security Advisory 40 myBloggie version 2.1.6 Multiple SQL Injection Vulnerability Description: myBloggie http://mywebland.com/mybloggie/ is considered one of the most simple, user-friendliest yet packed with features Weblog system available t...
MyBloggie 2.1.6 - Multiple SQL Injections
netVigilance Security Advisory 40 myBloggie version 2.1.6 Multiple SQL Injection Vulnerability Description: myBloggie http://mywebland.com/mybloggie/ is considered one of the most simple, user-friendliest yet packed with features Weblog system available to date. Built using PHP & mySQL, web most...
SOL8923 - Linux kernel vulnerability CVE-2007-2875
A flaw in the cpuset support allows a local user to obtain sensitive information from kernel memory. Information about this advisory is available at the following location:...
CVE-2007-3653
creationtimestamp| type| source ---|---|--- 2008-06-30 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/32005 2008-06-30 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/32004...
Debian Security Advisory DSA 1597-1 (mt-daapd)
The remote host is missing an update to mt-daapd announced via advisory DSA 1597-1. OpenVAS Vulnerability Test $Id: deb15971.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1597-1 mt-daapd Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...
Remote file inclusion
PHP remote file inclusion vulnerability in sendreminders.php in WebCalendar 1.0.4 allows remote attackers to execute arbitrary PHP code via a URL in the includedir parameter and a 0 value for the noSet parameter, a different vector than CVE-2007-1483...
CVE-2008-2836
PHP remote file inclusion vulnerability in sendreminders.php in WebCalendar 1.0.4 allows remote attackers to execute arbitrary PHP code via a URL in the includedir parameter and a 0 value for the noSet parameter, a different vector than CVE-2007-1483...
IBM JDK: Integer overflow in IBM JDK's ICC profile parser
REJECTED CVE This CVE has been rejected. This candidate is a duplicate of CVE-2007-2788. Note: All CVE users should reference CVE-2007-2788 instead of this candidate...