150 matches found
CVE-2009-3070
CVE-2009-3070 refers to multiple unspecified vulnerabilities in the Mozilla Firefox browser engine up to version 3.0.14. The Mozilla Firefox entry states that remote attackers could cause a denial of service (memory corruption and application crash) or potentially execute arbitrary code via unkno...
RHEL 4 / 5 : firefox (RHSA-2009:1430)
Updated firefox packages that fix several security issues are now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having critical security impact by the Red Hat Security Response Team. Mozilla Firefox is an open source Web browser. XULRunner provides the XUL Runtime...
Fedora Core 10 FEDORA-2009-3070 (pptp)
The remote host is missing an update to pptp announced via advisory FEDORA-2009-3070. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...
CVE-2008-3070
CVE-2008-3070 affects the MyBB code path in inc/datahandler/user.php for versions before 1.2.13 . The vulnerability is described as an “unspecified vulnerability” with unknown impact and attack vectors related to the $user['language'] variable, probably tied to an SQL injection issue. According t...
CVE-2007-3070
BDigital Web Solutions WebStudio’s index.php is vulnerable to cross-site scripting (XSS) via the pageid parameter. The CVE-2007-3070 entry specifies an attacker can inject arbitrary web script or HTML, affecting the WebStudio web interface (file index.php) and using pageid as the vector. The prov...
CVE-2007-1057
The Net Direct client for Linux before 6.0.5 in Nortel Application Switch 2424, VPN 3050 and 3070, and SSL VPN Module 1000 extracts and executes files with insecure permissions, which allows local users to exploit a race condition to replace a world-writable file in /tmp/NetClient and cause anoth...
CVE-2006-3070
CVE-2006-3070 affects Zeroboard 4.1 pl8 running on Apache with mod_mime. The issue allows remote attackers to bypass upload restrictions for executable extensions by uploading a .htaccess file containing an AddType directive that maps an assumed-safe extension (e.g., txt) to an executable handler...
Mandrake Linux Security Advisory : hylafax (MDKSA-2005:177)
faxcron, recvstats, and xferfaxstats in HylaFax 4.2.1 and earlier allows local users to overwrite arbitrary files via a symlink attack on temporary files. CVE-2005-3069 In addition, HylaFax has some provisional support for Unix domain sockets, which is disabled in the default compile configuratio...
