Apache 2.2.6 mod_negotiation - HTML Injection / HTTP Response Splitting

source: https://www.securityfocus.com/bid/27409/info Apache 'modnegotiation' is prone to an HTML-injection and an HTTP response-splitting vulnerability because the application fails to properly sanitize user-supplied input before using it in dynamically generated content. Attacker-supplied HTML o...

openSUSE 10 Security Update : opera (opera-1697)

The webbrowser Opera has been upgraded to version 9.0 to add lots of new features, and to fix the following security problem : CVE-2006-3198: An integer overflow vulnerability exists in the Opera Web Browser due to the improper handling of JPEG files. If excessively large height and width values...

openSUSE 10 Security Update : opera (opera-1699)

The webbrowser Opera has been upgraded to version 9.0 to add lots of new features, and to fix the following security problem : CVE-2006-3198: An integer overflow vulnerability exists in the Opera Web Browser due to the improper handling of JPEG files. If excessively large height and width values...

CVE-2004-2728

CVE-2004-2728 describes a buffer overflow in the FTP server component of Hummingbird Connectivity 7.1 and 9.0 triggered by a long argument to the XCWD command. The vulnerability allows remote, authenticated users to cause an application crash and a denial of service. No specific remediation or pa...

Code injection

The SSL client implementation in BEA WebLogic Server 7.0 SP7, 8.1 SP2 through SP6, 9.0, 9.1, 9.2 Gold through MP2, and 10.0 sometimes selects the null cipher when others are available, which might allow remote attackers to intercept communications...

Slackware 10.0 / 10.1 / 10.2 / 11.0 / 12.0 / 9.0 / 9.1 : tcpdump (SSA:2007-230-01)

New tcpdump packages are available for Slackware 9.0, 9.1, 10.0, 10.1, 10.2, 11.0, and 12.0 to fix a security issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Slackware Security Advisory 2007-230-01. The text...

CVE-2007-3715

Sun Java System Application Server and Web Server 7.0 through 9.0 before 20070710 do not properly process XSLT stylesheets in XSLT transforms in XML signatures, which allows context-dependent attackers to execute an arbitrary Java method via a crafted stylesheet, a related issue to CVE-2007-3716...

ESRI ArcSDE 9.0 - 9.2sp1 Remote Buffer Overflow Exploit

No description provided by source. / Dreatica-FXP crew ---------------------------------------- Target : ESRI ArcSDE 9.0 - 9.2sp1 Site : http://www.esri.com Found by : iDefense, http://labs.idefense.com/intelligence/vulnerabilities/ ---------------------------------------- Exploit : ESRI ArcSDE 9...

ESRI ArcSDE 9.0 9.2sp1 - Remote Buffer Overflow

ESRI ArcSDE 9.0 9.2sp1 - Remote Buffer Overflow / Dreatica-FXP crew ---------------------------------------- Target : ESRI ArcSDE 9.0 - 9.2sp1 Site : http://www.esri.com Found by : iDefense, http://labs.idefense.com/intelligence/vulnerabilities/ ---------------------------------------- Exploit :...

Information disclosure

The Administration Console in BEA WebLogic Server 9.0 may show plaintext Web Service attributes during configuration creation, which allows remote attackers to obtain sensitive credential information...

Sql injection

qcbin/servlet/tdservlet/TDAPIGeneralWebTreatment in HP Mercury Quality Center 9.0 build 9.1.0.4352 allows remote authenticated users to execute arbitrary SQL commands via the RunQuery method...

ACDSee 9.0 Photo Manager - Multiple .BMP Denial of Service Vulnerabilities

ACDSee 9.0 Photo Manager - Multiple .BMP Denial of Service Vulnerabilities // source: https://www.securityfocus.com/bid/23317/info ACDSee 9.0 Photo Manager is prone to multiple denial-of-service vulnerabilities because the application fails to properly handle malformed BMP image files. Successful...

HP Mercury Quality Center 9.0 build 9.1.0.4352 SQL Execution Exploit

No description provided by source. !/usr/bin/perl HP Mercury Quality Center runQuery exploit. Run whatever SQL you want on there db - without SQL injection. Problem is client can do "RunQuery" command os we write program to do this. Client can lots other things it should not also! The backend...

CVE-2006-5820

Summary (CVE-2006-5820): AOL's SuperBuddy ActiveX control (Sb.SuperBuddy.1) exposes the LinkSBIcons() method. The vulnerability arises when an attacker-provided address is dereferenced as a function pointer, enabling remote code execution. Impact is remote, unauthenticated, requiring a user to vi...

CVE-2007-1767

Unspecified vulnerability in 1 Deskbar.dll and 2 Toolbar.dll in AOL 9.0 before February 2007 allows remote attackers to cause a denial of service browser crash via unknown vectors...

CVE-2007-1767

CVE-2007-1767 concerns AOL 9.0 (Deskbar.dll and Toolbar.dll) with an unspecified vulnerability that allows remote attackers to trigger a denial of service (browser crash) via unknown vectors. Affected software is AOL 9.0 prior to February 2007; the specific root cause, affected components, and po...

AOL 9.0 Deskbar.dll/Toolbar.dll DoS Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Overview AOL has recently been made aware of a denial of service condition that exists in early versions of the AOL 9.0 client software. The affected DLLs are listed below: Deskbar.dll Toolbar.dll AOL does not believe that the issue presents a threat ...

[slackware-security] fetchmail

New fetchmail packages are available for Slackware 8.1, 9.0, 9.1, 10.0, 10.1, 10.2, and 11.0 to fix a security issue. More details about this issue may be found in the Common Vulnerabilities and Exposures CVE database: https://vulners.com/cve/CVE-2006-5974 https://vulners.com/cve/CVE-2006-5867 He...

Code injection

BEA WebLogic Server 9.0, 9.1, and 9.2 Gold, when running on Solaris 9, allows remote attackers to cause a denial of service server inaccessibility via manipulated socket connections...

Buffer overflow

Buffer overflow in Winzip32.exe in WinZip 9.0 allows local users to cause a denial of service application crash and possibly execute arbitrary code via a long command line argument. NOTE: this issue may cross privilege boundaries if an application automatically invokes Winzip32.exe for untrusted...