CVE-2013-6020

passwordRequestPOST.jsp in Tyler Technologies TaxWeb 3.13.3.1 sends different HTTP status codes for invalid password-recovery requests depending on whether the user account exists, which allows remote attackers to enumerate account names via a series of requests to the 1 Assessor, 2 Recorder, or ...

CVE-2013-6020

The issue (CVE-2013-6020) affects Tyler Technologies TaxWeb 3.13.3.1 and its Password Reset flow (passwordRequestPOST.jsp). The root cause is that invalid password-recovery requests return different HTTP status codes depending on whether the target user exists, enabling remote attackers to enumer...

Symantec Mail Security for SMTP Autonomy KeyView Module Multiple Buffer Overflows

The remote windows host has a version of Symantec Mail Security installed that is shipped with the third-party Autonomy KeyView module, which is affected by multiple buffer overflow vulnerabilities that could allow a remote attacker to execute arbitrary code. C Tenable Network Security, Inc...

SuSE 10 Security Update : flash-player (ZYPP Patch Number 6020)

Specially crafted swf files could cause a buffer overflow in flash-player. Attackers could potentially exploit that to execute code on the victim's machine. CVE-2009-0519 / CVE-2009-0520 / CVE-2009-0114 / CVE-2009-0521 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of...

CVE-2008-6020

SQL injection vulnerability in the Views module 6.x before 6.x-2.2 for Drupal allows remote attackers to execute arbitrary SQL commands via unspecified vectors related to "an exposed filter on CCK text fields."...

CVE-2008-6020

CVE-2008-6020 is a SQL injection vulnerability in the Drupal Views module (6.x) prior to 6.x-2.2. The issue arises from an exposed filter on CCK text fields, allowing remote attackers to execute arbitrary SQL commands. Affected product/component: Drupal Views 6.x; root cause: unsafeguarded input ...

Secunia Research: Symantec Mail Security Folio Flat File Parsing Buffer Overflows

====================================================================== Secunia Research 08/04/2008 - Symantec Mail Security Folio Flat File Parsing Buffer Overflows - ====================================================================== Table of Contents Affected...

Secunia Research: Autonomy Keyview Folio Flat File Parsing Buffer Overflows

====================================================================== Secunia Research 08/04/2008 - Autonomy Keyview Folio Flat File Parsing Buffer Overflows - ====================================================================== Table of Contents Affected...

CVE-2007-6020

CVE-2007-6020 describes multiple stack-based buffer overflows in the Folio Flat File speed reader (foliosr.dll) of Autonomy KeyView 10.3.0.0, used by IBM Lotus Notes and Symantec Mail Security (SMSSMTP/Exchange/Domino) and activePDF DocConverter. Secunia and NVD detail that boundary errors occur ...

CVE-2006-6020

Cross-site scripting XSS vulnerability in announce.php in Blog Torrent Preview 0.92 allows remote attackers to inject arbitrary web script or HTML via the left parameter...

CVE-2006-6020

CVE-2006-6020 is an XSS vulnerability in announce.php of Blog Torrent Preview 0.92, exploitable via the left parameter to inject script/HTML. The NVD entry lists a CVSS v2 base score of 6.8 (MEDIUM) with network attack vector and no authentication, affecting confidentiality, integrity, and availa...