RHEL 4 / 5 : firefox (RHSA-2008:0879)

An updated firefox package that fixes various security issues is now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having critical security impact by the Red Hat Security Response Team. Mozilla Firefox is an open source Web browser. Several flaws were found in the...

VMware Workstation ActiveX Control vielib.dll Command Execution (CVE-2007-4058)

VMware Workstation is a virtualization technology that allows running multiple instances of virtual computers simultaneously with the hosting operating system. A remote attacker could exploit this issue by convincing a user to visit a specially crafted HTML document or open a malicious web page...

VMware Workstation < 5.5.5 and Server < 1.0.4 Multiple Vulnerabilities

The version of VMware Workstation/Server installed on the remote host is affected by multiple vulnerabilities, including a privelege elevation vulnerability that allows a guest to take over a host and a buffer overflow vulnerability in the DHCP daemon. The buffer overlflow in the DHCP server may...

DSquare Exploit Pack: D2SEC_VMVIELIB

Name| d2secvmvielib ---|--- CVE| CVE-2007-4058 Exploit Pack| D2ExploitPack Description| VMware Vielib.DLL ActiveX Arbitrary Code Execution Vulnerability Notes|...

CVE-2007-4058

CVE-2007-4058 is described as an Absolute Path Traversal in the VMware vielib.dll ActiveX (StartProcess) in VMware Workstation/6.0.0, allowing remote execution of arbitrary commands when a user loads attacker-controlled content. Affected component is the vielib.dll ActiveX control; trigger involv...

CVE-2006-4058

Cross-site scripting XSS vulnerability in archive.php in Simplog 0.9.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the keyw parameter when performing a search. NOTE: some details are obtained from third party information...

CVE-2006-4058

CVE-2006-4058 is an XSS vulnerability in archive.php for Simplog 0.9.3 and earlier, allowing remote attackers to inject arbitrary web script or HTML via the keyw parameter during a search. The description explicitly notes this vulnerability affects Simplog versions up to 0.9.3 and earlier. Connec...

Sql injection

Multiple SQL injection vulnerabilities in SaralBlog 1.0 allow remote attackers to execute arbitrary SQL commands via the search parameter to search.php. NOTE: the id/viewprofile.php issue is already covered by CVE-2005-4058...

CVE-2005-4058

CVE-2005-4058 : A SQL injection vulnerability exists in SaralBlog 1.x and earlier that allows remote attackers to execute arbitrary SQL commands via the id parameter to viewprofile.php. The CVE entry notes a base score of 7.5 (HIGH) with network attack vector, low complexity, and no authenticatio...