318 matches found
Social Engine 4 Cross Site Scripting
===================================================== Social Engine 4 Persistent XSS & Non-Persistent XSS ===================================================== :----------------------------------------------------------------------------------------------------------------------------------------...
IBM Web Experience Factory Multiple XSS Vulnerabilities
IBM Web Experience Factory is prone to multiple cross-site scripting XSS vulnerabilities. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
CVE-2009-1292
CVE-2009-1292 affects IBM Rational ClearCase UCM-CQ on Linux/AIX (7.0.0.x before 7.0.0.5, 7.0.1.x before 7.0.1.4, 7.1.x before 7.1.0.1). The underlying issue is that a username and password are exposed on the command line, allowing local attackers to obtain credentials by listing processes. The a...
Adobe PageMaker key strings buffer overflow
Added: 11/10/2008 CVE: CVE-2007-6432 BID: 31999 OSVDB: 50055 Background Adobe PageMaker is page layout software. Problem A buffer overflow vulnerability in AldFs32.dll allows command execution when a user opens a specially crafted PMD file. Resolution See the solution referenced in APSA08-10...
Adobe PageMaker key strings buffer overflow
Added: 11/10/2008 CVE: CVE-2007-6432 BID: 31999 OSVDB: 50055 Background Adobe PageMaker is page layout software. Problem A buffer overflow vulnerability in AldFs32.dll allows command execution when a user opens a specially crafted PMD file. Resolution See the solution referenced in APSA08-10...
Heap overflow
Heap-based buffer overflow in Adobe PageMaker 7.0.1 and 7.0.2 allows user-assisted remote attackers to execute arbitrary code via a .PMD file with a crafted font structure...
CVE-2006-4763
CVE-2006-4763 affects IBM Lotus Domino Web Access (DWA) 7.0.1, where the LtpaToken is not expired on logout. This can let an attacker intercept the LtpaToken cookie and gain the user’s privileges. Documented impact is that privileges can be obtained by token interception. The provided sources ide...
Lotus Notes HTML Speed Reader URL buffer overflow
Added: 02/17/2006 CVE: CVE-2005-2618 BID: 16576 OSVDB: 23068 Background Lotus Notes is the client for Lotus Domino servers. Problem A buffer overflow in the HTML Speed Reader component of the Lotus Notes e-mail client allows command execution by a specially crafted e-mail message containing a lon...
Lotus Notes HTML Speed Reader URL buffer overflow
Added: 02/17/2006 CVE: CVE-2005-2618 BID: 16576 OSVDB: 23068 Background Lotus Notes is the client for Lotus Domino servers. Problem A buffer overflow in the HTML Speed Reader component of the Lotus Notes e-mail client allows command execution by a specially crafted e-mail message containing a lon...
Lotus Notes < 6.5.5 or 7.0.1 Multiple Vulnerabilities
Binary data 3422.prm...
Critical: Red Hat Security Advisory: Adobe Acrobat Reader security update
Updated acroread packages that fix a security issue are now available. This update has been rated as having critical security impact by the Red Hat Security Response Team. The Adobe Acrobat Reader allows users to view and print documents in portable document format PDF. A buffer overflow bug has...
Quicktime < 7.0.1 Quartz Composer Information Disclosure (Mac OS X)
The remote Mac OS X host is running a version of Quicktime 7 which is older than Quicktime 7.0.1. The remote version of this software is vulnerable to an information disclosure flaw when handling Quartz Composer files which may leak data to an arbitrary web location. To exploit this flaw, an...
[Full-Disclosure] Mdaemon 7.0.1 IMAP overflow.
Let it be known that this bug is after authentication "postauth" and therefore useless. In the current version of Mdaemon from ALTN there exists an easy to exploit, run-of-the-mill stack overflow. By authenticating and sending a large argument to the STATUS command in the IMAP component, a buffer...
CVE-1999-1450
Technical details about CVE-1999-1450 are not publicly available in the provided documents. Monitor for updates.
2022-12 .NET 7.0.1 Security Update for x64 Server (KB5021955)
2022-12 .NET 7.0.1 Security Update for x64 Server KB5021955...
2022-12 .NET 7.0.1 Security Update for x86 Client (KB5021955)
2022-12 .NET 7.0.1 Security Update for x86 Client KB5021955...