74 matches found
CVE-2012-0287
Cross-site scripting XSS vulnerability in wp-comments-post.php in WordPress 3.3.x before 3.3.1, when Internet Explorer is used, allows remote attackers to inject arbitrary web script or HTML via the query string in a POST operation that is not properly handled by the "Duplicate comment detected"...
CVE-2011-3181
Multiple cross-site scripting XSS vulnerabilities in the Tracking feature in phpMyAdmin 3.3.x before 3.3.10.4 and 3.4.x before 3.4.4 allow remote attackers to inject arbitrary web script or HTML via a 1 table name, 2 column name, or 3 index name...
phpMyAdmin < 3.3.10.1 / 3.4.1 Multiple Vulnerabilities (PMASA-2011-03 - PMASA-2011-04
The remote host contains a version of phpMyAdmin - 3.3.x less than 3.3.10.1 or 3.4.x less than 3.4.1 - that is affected by multiple vulnerabilities: - The scripts 'tbllinks.php' and 'tbl-tracking' fail to filter input to the 'table' and 'db' parameters. An attacker may be able to exploit this iss...
phpMyAdmin 3.3.x < 3.3.10.1 / 3.4.x < 3.4.1 Multiple Vulnerabilities
Binary data 5930.prm...
CompleteFTP Server v 3.3.x "PORT" command Remote DOS exploit
Exploit for windows platform in category dos / poc ============================================================ CompleteFTP Server v 3.3.x "PORT" command Remote DOS exploit ============================================================...
CompleteFTP Server 3.3.x PORT Denial Of Service
------------------------------------------------------------------------ CompleteFTP Server v 3.3.x "PORT" command Remote DOS exploit ------------------------------------------------------------------------ 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\...
GemStoneS 6.3.1 - stoned Local Buffer Overflow
GemStoneS 6.3.1 - stoned Local Buffer Overflow / wonderfulcaricatureofexploitability.c AKA GemStone/S 6.3.1 "stoned" Local Buffer Overflow Exploit Jeremy Brown [email protected]//jbrownsec.blogspot.com//krakowlabs.com 09.07.2009 Gemstone/S "stoned" suffers from a local buffer overflow when...
Cross site request forgery (csrf)
The jumpUrl mechanism in class.tslibfe.php in TYPO3 3.3.x through 3.8.x, 4.0 before 4.0.12, 4.1 before 4.1.10, 4.2 before 4.2.6, and 4.3alpha1 leaks a hash secret juHash in an error message, which allows remote attackers to read arbitrary files by including the hash in a request...
CVE-2009-0816
Multiple cross-site scripting XSS vulnerabilities in the backend user interface in TYPO3 3.3.x through 3.8.x, 4.0 before 4.0.12, 4.1 before 4.1.10, 4.2 before 4.2.6, and 4.3alpha1 allow remote attackers to inject arbitrary web script or HTML via unspecified fields...
FreeBSD Ports: xpdf
The remote host is missing an update to the system as announced in the referenced advisory. VID e3e266e9-5473-11d9-a9e7-0001020eed82 OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...
CVE-2000-0976
CVE-2000-0976 is a buffer overflow in XFree86 xlib (X11 library) in the 3.3.x line that can allow local users to execute arbitrary commands through a long DISPLAY environment variable or a -display parameter. The issue affects systems using the vulnerable X11/Xlib stack; SGI’s Security Advisory f...
CVE-2000-0976
Buffer overflow in xlib in XFree 3.3.x possibly allows local users to execute arbitrary commands via a long DISPLAY environment variable or a -display command line parameter...
CVE-2000-0285
The CVE-2000-0285 entry describes a buffer overflow in XFree86 3.3.x that allows a local user to execute arbitrary commands via a long -xkbmap parameter. Affected software is XFree86 3.3.x; the vulnerability stems from improper handling of the -xkbmap argument, enabling local privilege compromise...
zeus.null.txt
This morning Zeus Technology Limited was informed of a serious security bug in the Zeus Webserver by 'The Relay Group' http://relaygroup.com. This document describes the scope of the problem and its solution. Versions affected ----------------- Zeus 3.1.x / 3.3.x Severity -------- High- this bug...