76 matches found
Debian DSA-2631-1 : squid3 - denial of service
Squid3, a fully featured Web proxy cache, is prone to a denial of service attack due to memory consumption caused by memory leaks in cachemgr.cgi : - CVE-2012-5643 squid's cachemgr.cgi was vulnerable to excessive resource use. A remote attacker could exploit this flaw to perform a denial of servi...
CVE-2012-2631
CVE-2012-2631 describes a cross-site scripting (XSS) vulnerability in WEBLOGIC @WEB ShoppingCart before 1.5.2.0 and @WEB ShoppingCart T 1.5.0.1 and earlier. The vulnerability allows an attacker to inject arbitrary web script or HTML via unspecified vectors, potentially enabling code execution in ...
CVE-2011-2631
The CVE-2011-2631 entry concerns Opera's CSS column-count handling in Opera prior to 11.11, which can cause a denial of service (infinite repaint loop leading to an app hang) when processing a crafted page. Connected sources confirm Opera as the affected product and indicate the root cause is imp...
Opera < 11.11 Multiple Vulnerabilities
Binary data 5925.prm...
Opera < 11.11 Multiple Vulnerabilities
The version of Opera installed on the remote Windows host is earlier than 11.11. Such versions are potentially affected by: - A memory corruption vulnerability exists. The application does not properly handle specific framesets when unloading a page. An attacker could craft a web page that will...
CVE-2010-2631
LibTIFF vulnerability CVE-2010-2631 affects LibTIFF 3.9.0 where first-stage TIFF tag handling and second-stage processing can lead to an application crash (DoS) via a crafted TIFF file. Connected sources also enumerate related LibTIFF issues (e.g., CVE-2010-2481, CVE-2010-2483, CVE-2010-2595, CVE...
Alt-N MDaemon WorldClient Service Memory Corruption (CVE-2008-2631)
A memory corruption vulnerability exists in Alt-N Technologies MDaemon WorldClient. The vulnerability is due to a NULL pointer dereference in processing a malicious HTTP POST request. A remote unauthenticated attacker can exploit this vulnerability by sending a specially crafted request to the...
CVE-2010-2631
creationtimestamp| type| source ---|---|--- 2010-06-14 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/34279...
CVE-2009-2631
CVE-2009-2631 describes a design-level flaw in multiple clientless SSL VPN products (e.g., Stonesoft StoneGate, Cisco ASA, SonicWALL E-Class SSL VPN, Citrix Access Gateway, Juniper Secure Access, Nortel CallPilot, SafeNet SecureWire) where, if configured to access resources from a different domai...
Gentoo Security Advisory GLSA 200407-22 (dev-db/phpmyadmin)
The remote host is missing updates announced in advisory GLSA 200407-22. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...
CVE-2008-2631
The CVE-2008-2631 issue affects Alt-N Technologies MDaemon WorldClient/WordClient interface. A memory corruption vulnerability arises from a NULL pointer dereference when processing a malicious HTTP POST request, allowing a remote unauthenticated attacker to crash the WorldClient service and caus...
SuSE 10 Security Update : clamav (ZYPP Patch Number 2631)
This update to ClamAV version 0.90 fixes various bugs : - A filedescriptor leak in the handling of CAB files can lead to a denial of service attack against the clamd scanner daemon caused by remote attackers. CVE-2007-0897 - A directory traversal in handling of MIME E-Mail headers could be used b...
CVE-2007-2631
Cross-site request forgery CSRF vulnerability in SquirrelMail 1.4.8-4.fc6 and earlier allows remote attackers to perform unspecified actions as arbitrary users via unspecified vectors. NOTE: this issue might overlap CVE-2007-2589 or CVE-2002-1648...
CVE-2007-2631
Technical details about CVE-2007-2631 are not publicly provided in the supplied documents. Available references discuss related CVEs (1262, 2589) and SquirrelMail mitigations, but no explicit details for CVE-2007-2631.
CVE-2004-2631
CVE-2004-2631 affects phpMyAdmin 2.5.1–2.5.7, where LeftFrameLight being FALSE enables eval injection in left.php, allowing remote attackers to execute arbitrary PHP code via a crafted table name. The issue is rated CVSS v2 base 7.5 (Network, Low attack complexity, no authentication). Connected a...
