SAP GUI WebViewer3D ActiveX Control Arbitrary File Overwrite (CVE-2007-4475)

The SAP GUI is the GUI client in SAP's 3-tier architecture of database, application server and client. A vulnerability was reported in the SAP GUI. The vulnerability is caused due to a boundary error in the bundled EAI WebViewer3D ActiveX control webviewer3d.dll when processing arguments passed t...

Vulnerability in core server (CVE-2009-4136)

Privilege escalation via changing session state in an index function. This closes a corner case related to vulnerabilities CVE-2009-3230 and CVE-2007-6600 below...

Mandriva Security Advisory MDVSA-2009:126-1 (eggdrop)

The remote host is missing an update to eggdrop announced via advisory MDVSA-2009:126-1. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR...

Adobe Flash Player FLV Processing Buffer Overflow (CVE-2007-3456)

Adobe Flash Player is a multimedia and application player. Flash Player runs the Sockware Flash SWF files, which contains multimedia content including vector and raster graphics, video, audio, and scripts. Flash Player is made available as a plug-in for a wide range of web browser applications...

Mandriva Security Advisory MDVSA-2009:126-1 (eggdrop)

The remote host is missing an update to eggdrop announced via advisory MDVSA-2009:126-1. OpenVAS Vulnerability Test $Id: mdksa20091261.nasl 6573 2017-07-06 13:10:50Z cfischer $ Description: Auto-generated from advisory MDVSA-2009:126-1 eggdrop Authors: Thomas Reinke Copyright: Copyright c 2009...

Mandriva Security Advisory MDVSA-2009:251-1 (postgresql8.2)

The remote host is missing an update to postgresql8.2 announced via advisory MDVSA-2009:251-1. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only O...

CVE-2007-0518

creationtimestamp| type| source ---|---|--- 2009-12-14 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/10437...

Internet Explorer FTP Response Parsing Memory Corruption (MS07-016; CVE-2007-0217)

Microsoft Internet Explorer IE is a web browser application that is included as part of Microsoft Windows operating systems. Microsoft Windows Internet WinINet application programming interface API in Internet Explorer is a component to serve as application interface for Internet protocols, such ...

Stack overflow

Stack-based buffer overflow in Jasc Paint Shop Pro 8.10 aka Corel Paint Shop Pro allows user-assisted remote attackers to execute arbitrary code via a crafted PNG file. NOTE: this might be the same issue as CVE-2007-2366...

Mandriva Security Advisory MDVSA-2009:312 (dhcp)

The remote host is missing an update to dhcp announced via advisory MDVSA-2009:312. OpenVAS Vulnerability Test $Id: mdksa2009312.nasl 6573 2017-07-06 13:10:50Z cfischer $ Description: Auto-generated from advisory MDVSA-2009:312 dhcp Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...

Mandriva Security Advisory MDVSA-2009:322 (mono)

The remote host is missing an update to mono announced via advisory MDVSA-2009:322. OpenVAS Vulnerability Test $Id: mdksa2009322.nasl 6573 2017-07-06 13:10:50Z cfischer $ Description: Auto-generated from advisory MDVSA-2009:322 mono Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...

Mandriva Security Advisory MDVSA-2009:142-1 (jasper)

The remote host is missing an update to jasper announced via advisory MDVSA-2009:142-1. OpenVAS Vulnerability Test $Id: mdksa20091421.nasl 6573 2017-07-06 13:10:50Z cfischer $ Description: Auto-generated from advisory MDVSA-2009:142-1 jasper Authors: Thomas Reinke Copyright: Copyright c 2009 E-So...

Mandriva Security Advisory MDVSA-2009:272-1 (libmikmod)

The remote host is missing an update to libmikmod announced via advisory MDVSA-2009:272-1. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR...

Mandriva Security Advisory MDVSA-2009:311 (ghostscript)

The remote host is missing an update to ghostscript announced via advisory MDVSA-2009:311. OpenVAS Vulnerability Test $Id: mdksa2009311.nasl 6573 2017-07-06 13:10:50Z cfischer $ Description: Auto-generated from advisory MDVSA-2009:311 ghostscript Authors: Thomas Reinke Copyright: Copyright c 2009...

Internet Explorer Object Reference Counting Memory Corruption (MS07-069; CVE-2007-3902)

Microsoft Internet Explorer IE is a web browser application that is capable of rendering both static and dynamic web content. The application is primarily used for tasks related to web browsing, such as displaying HTML encoded pages, downloading files, etc. A memory corruption vulnerability exist...

Buffer overflow

Off-by-one error in src/http.c in CoreHTTP 0.5.3.1 and earlier allows remote attackers to cause a denial of service or possibly execute arbitrary code via an HTTP request with a long first line that triggers a buffer overflow. NOTE: this vulnerability reportedly exists because of an incorrect fix...

CVE-2009-4218

CVE-2009-4218 documents multiple SQL injection flaws in JiRo's Banner System eXperience (JBSX) files/login.asp, enabling remote attackers to inject commands via the admin or password field. This is related to CVE-2007-6091 and involves JiRo's Banner System (JBS) 2.0 (and potentially JiRo's Upload...

Microsoft XML Core Services Memory Corruption (MS07-042; CVE-2007-2223)

Microsoft Windows is shipped with an XML processing framework, named MSXML or Microsoft XML Core services. The framework is used by applications shipped with the operating system as well as third party applications. The most popular application using this framework is Internet Explorer, which can...

ISPworker <= 1.23 Multiple Directory Traversal Vulnerabilities - Active Check

ISPworker is prone to multiple directory traversal vulnerabilities because it fails to sufficiently sanitize user-supplied input. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Low: Red Hat Security Advisory: tomcat security update for Red Hat Network Satellite Server

Updated tomcat packages that fix several security issues are now available for Red Hat Network Satellite Server 5.2 and 5.3. This update has been rated as having low security impact by the Red Hat Security Response Team. Apache Tomcat is a servlet container for the Java Servlet and JavaServer Pag...