110 matches found
CVE-2009-3883
CVE-2009-3883 affects Sun Java SE 5.0 before Update 22 and Java SE 6 before Update 17 (OpenJDK) in the Swing PL&F implementation. The issue involves information leaks in mutable variables within Swing, enabling potential remote disclosure with partial confidentiality, integrity, and availability ...
CVE-2008-3883
CVE-2008-3883 affects Caudium 1.4.12. The issue is a local privilege escalation where configvar allows local users to overwrite arbitrary files via a symlink attack on a temporary file named /tmp/roken#####.pike. The root cause is a symlink/temporary-file handling weakness that enables overwritin...
CVE-2007-3883
The Data Dynamics ActiveBar ActiveX control actbar3.ocx 3.2 and earlier allows remote attackers to create or overwrite files via a full pathname in 1 the second argument to the Save method, or the first argument to the 2 SaveLayoutChanges or 3 SaveMenuUsageData method...
CVE-2007-3883
CVE-2007-3883 affects the Data Dynamics ActiveBar ActiveX control (actbar3.ocx) version 3.2 and earlier. The vulnerability allows remote attackers to create or overwrite files by providing a full pathname as an argument to the Save method, or to the first argument of SaveLayoutChanges or SaveMenu...
CVE-2006-3883
CVE-2006-3883 affects Gonafish LinksCaffe 3.0 with multiple XSS vulnerabilities exposed through specific parameters: tablewidth in counter.php; newdays in links.php; and tableborder, menucolor, textcolor, bodycolor in menu.inc.php. The connected documents confirm the vulnerability pattern but do ...
php security update
CentOS Errata and Security Advisory CESA-2006:0276 Updated PHP packages that fix multiple security issues are now available for Red Hat Enterprise Linux 3 and 4. This update has been rated as having moderate security impact by the Red Hat Security Response Team. PHP is an HTML-embedded scripting...
Moderate: Red Hat Security Advisory: php security update
Updated PHP packages that fix multiple security issues are now available for Red Hat Enterprise Linux 3 and 4. This update has been rated as having moderate security impact by the Red Hat Security Response Team. PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Web...
SUSE-SA:2005:069: php4,php5
The remote host is missing the patch for the advisory SUSE-SA:2005:069 php4,php5. Updated PHP packages fix the following security issues: - Stefan Esser found out that a bug in parsestr could lead to activation of registerglobals CVE-2005-3389 and additionally that file uploads could overwrite...
CVE-2005-3883
PHP before 5.1.0 contains a CRLF header-injection flaw in mb_send_mail that can be exploited remotely via the To address to inject arbitrary email headers. Multiple OpenVAS/Nessus results corroborate CVE-2005-3883 as part of broader PHP