6696 matches found
[Full-disclosure] [SECURITY] [DSA 1421-1] New wesnoth packages fix arbitrary file disclosure
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- Debian Security Advisory DSA 1421-1 [email protected] http://www.debian.org/security/ Martin Schulze December 6th, 2007 http://www.debian.org/security/faq -...
CONTENTCustomizer 3.1 - 'Dialog.php' Unauthorized Access
source: https://www.securityfocus.com/bid/26437/info CONTENTCustomizer is prone to an unauthorized access vulnerability because the application fails to sufficiently sanitize user-supplied input. An attacker could exploit this issue to delete arbitrary files, rename files, or reset the content of...
[SECURITY] [DSA 1399-1] New pcre3 packages fix arbitrary code execution
------------------------------------------------------------------------ Debian Security Advisory DSA-1399-1 [email protected] http://www.debian.org/security/ Florian Weimer November 5th, 2007 http://www.debian.org/security/faq -...
CONTENTCustomizer 3.1 - Dialog.php Information Disclosure
CONTENTCustomizer 3.1 - Dialog.php Information Disclosure source: https://www.securityfocus.com/bid/26291/info CONTENTCustomizer is prone to an information-disclosure vulnerability. An attacker can exploit this issue to access sensitive information that may lead to further attacks...
CVE-2007-3919
1 xenbaked and 2 xenmon.py in Xen 3.1 and earlier allow local users to truncate arbitrary files via a symlink attack on /tmp/xenq-shm...
CVE-2007-3919
1 xenbaked and 2 xenmon.py in Xen 3.1 and earlier allow local users to truncate arbitrary files via a symlink attack on /tmp/xenq-shm...
Code injection
1 xenbaked and 2 xenmon.py in Xen 3.1 and earlier allow local users to truncate arbitrary files via a symlink attack on /tmp/xenq-shm...
CVE-2007-3919
1 xenbaked and 2 xenmon.py in Xen 3.1 and earlier allow local users to truncate arbitrary files via a symlink attack on /tmp/xenq-shm...
CVE-2007-5620
CVE-2007-5620 affects ZZ:FlashChat 3.1 and earlier, with a directory traversal in admin/inc/help.php that allows remote attackers to include and execute arbitrary local files via .. in the file parameter. This vulnerability is supported by NVD and CVE records; affected version details are 3.1 and...
Solaris 9 (x86) : 125951-20
Oracle Java Web Console 3.1x86. Date this patch was last updated by Sun : May/14/10 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if description...
[SECURITY] [DSA 1385-1] New xfs packages fix arbitrary code execution
-------------------------------------------------------------------------- Debian Security Advisory DSA 1385-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff October 9th, 2007 http://www.debian.org/security/faq -...
[SECURITY] [DSA 1383-1] New gforge packages fix cross-site scripting
-------------------------------------------------------------------------- Debian Security Advisory DSA 1383-1 [email protected] http://www.debian.org/security/ Thijs Kinkhorst October 4th, 2007 http://www.debian.org/security/faq -...
DSA-1383-1 gforge - cross-site scripting
Bulletin has no description...
Savant 3.1 Web Server Overflow
This module exploits a stack buffer overflow in Savant 3.1 Web Server. The service supports a maximum of 10 threads for a default install. Each exploit attempt generally causes a thread to die whether successful or not. Therefore, in a default configuration, you only have 10 chances. Due to the...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in VisionProject 3.1 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 projectIssueId parameter in EditProjectIssue.do, the 2 projectId parameter in ProjectSelected.do, the 3 folderId parameter in...
[SECURITY] [DSA 1349-1] New libextractor packages fix arbitrary code execution
-------------------------------------------------------------------------- Debian Security Advisory DSA 1349-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff August 5th, 2007 http://www.debian.org/security/faq -...
gss31-sql.txt
GameSiteScript Profile$id SQL-Injection Exploit Vulnerability Discovered By: Xenduer77 ---July 7th, 2007 $id Is passed straight to the query without being filtered. SQL-INJECTION: For Version 3.1: -------...
Debian DSA-1331-1 : php4 - several vulnerabilities
Several remote vulnerabilities have been discovered in PHP, a server-side, HTML-embedded scripting language, which may lead to the execution of arbitrary code. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2006-0207 Stefan Esser discovered HTTP respons...
07 GameSiteScript <= 3.1 (profile id) Remote SQL Injection Vulnerability
No description provided by source. GameSiteScript Profile$id SQL-Injection Exploit Vulnerability Discovered By: Xenduer77 ---July 7th, 2007 $id Is passed straight to the query without being filtered. SQL-INJECTION: For Version 3.1: -------...