572 matches found
Flash Player Data Compromise
The vulnerability exists in the Adobe Flash Player due to the possibility of accessing information related to memory addresses. Exploiting this vulnerability allows an attacker to bypass the ASLR Address Space Layout Randomization protection mechanism...
Security researchers find HIV Dating APP vulnerability, the reverse is the vendor with the AIDS threat-vulnerability warning-the black bar safety net
! Around the world websites and applications to encourage researchers noted that their system vulnerabilities, but one designed for HIV-positive users of online Dating app developer with HIV a threat to security researchers not to notify them of the program any security vulnerabilities. HIV...
Adobe ColdFusion Multiple Vulnerabilities (APSB14-23) (credentialed check)
The version of Adobe ColdFusion running on the remote Windows host is affected by the following vulnerabilities : - An unspecified cross-site request forgery vulnerability exists because ColdFusion does not properly sanitize user-supplied input. CVE-2014-0570 - An unspecified cross-site scripting...
MGASA-2014-0384 Updated curl packages fix security vulnerabilities
Updated curl packages fix security vulnerabilities: In cURL before 7.38.0, libcurl can be fooled to both sending cookies to wrong sites and into allowing arbitrary sites to set cookies for others. For this problem to trigger, the client application must use the numerical IP address in the URL to...
PT-2014-1371
Name of the Vulnerable Software and Affected Versions Adobe Flash Player versions prior to 13.0.0.244 Adobe Flash Player versions 14.x and 15.x prior to 15.0.0.152 Adobe Flash Player version prior to 11.2.202.406 on Linux Adobe AIR versions prior to 15.0.0.249 on Windows and OS X Adobe AIR versio...
CVE-2008-4510: Undefined Security Weakness
Microsoft Windows Vista Home and Ultimate Edition SP1 and earlier allows local users to cause a denial of service page fault and system crash via multiple attempts to access a virtual address in a PAGENOACCESS memory page...
CVE-2006-6307
srvloc.sys in Novell Client for Windows before 4.91 SP3 allows remote attackers to cause an unspecified denial of service via a crafted packet to port 427 that triggers an access of pageable or invalid addresses using a higher interrupt request level IRQL than necessary...
CVE-2002-2181
SonicWall Content Filtering allows local users to access prohibited web sites via requests to the web site's IP address instead of the domain name...
CVE-2002-1877
NETGEAR FM114P allows remote attackers to bypass access restrictions for web sites via a URL that uses the IP address instead of the hostname...
Доступ к исходным текстам PHP в plesk (source disclosure)
Используя числовой адрес вместо виртуального имени сервера можно получить доступ к исзодным текстам...
DoS против squid
При PUT-запросе с URL ftp-директории происходит обращение по нулевому адресу...
PT-1997-1156 · Undefined · Undefined
Name of the Vulnerable Software and Affected Versions: No specific software or versions mentioned. Description: The issue is related to a guessable password for accessing a WWW URL. Recommendations: At the moment, there is no information about a newer version that contains a fix for this...