6416 matches found
AZL-6828 CVE-2007-4559 affecting package python3 for versions less than 3.9.19-1
Directory traversal vulnerability in the 1 extract and 2 extractall functions in the tarfile module in Python allows user-assisted remote attackers to overwrite arbitrary files via a .. dot dot sequence in filenames in a TAR archive, a related issue to CVE-2001-1267...
security flaw
The ext2 file system code in Linux kernel 2.6.x allows local users to cause a denial of service crash via an ext2 stream with malformed data structures that triggers an error in the ext2checkpage due to a length that is smaller than the minimum...
xoops-xfsection.txt
XOOPS Module XFsection Remote File Inclusion version: 1.07 source : http://prdownloads.sourceforge.net/xoops/xoops2-modxfsection-107.zip Discovered by SpLo1T from hTTp://hacking.3Xforum.Ro Bug : http://www.site.com/modules/xfsection/modify.php?dirmodule=evilcode.txt? Shoutz t0 :...
AZL-35079 CVE-2007-2768 affecting package openssh for versions less than 9.5p1-2
OpenSSH, when using OPIE One-Time Passwords in Everything for PAM, allows remote attackers to determine the existence of certain user accounts, which displays a different response if the user account exists and is configured to use one-time passwords OTP, a similar issue to CVE-2007-2243...
Konversation IRC Client < 0.15.1 Multiple Remote Vulnerabilities
Binary data 2547.prm...
Owl < 0.74.0 Multiple Vulnerabilities
Binary data 2479.prm...
PHP Live! < 2.8.2 Remote Configuration File Include
Binary data 2447.prm...
Moodle < 1.4.3 Glossary Module SQLi
Binary data 2388.prm...
Quicktime < 6.5.2
The remote Mac OS X host is running a version of Quicktime that is older than Quicktime 6.5.2. The remote version of this software reportedly fails to check bounds properly when decoding BMP images, leading to a heap overflow. If a remote attacker can trick a user into opening a maliciously craft...
WordPress < 1.2.1 'wp-login.php' HTTP Response Splitting
Binary data 2356.prm...
IBM DB2 < 8.2 Multiple Vulnerabilities (2) (deprecated)
Binary data 2349.prm...
Kerio MailServer < 6.0.3 Unspecified Vulnerability
The remote host is running a version of Kerio MailServer prior to 6.0.3. There is an undisclosed flaw in the remote version of this server that might allow an attacker to execute arbitrary code on the remote host. C Tenable Network Security, Inc. include"compat.inc"; ifdescription scriptid15404;...
Serv-U FTP Server < 5.2.0.1 'STOU' Command Remote DoS
Binary data 2275.prm...
OpenSSL < 0.9.6m / 0.9.7d Multiple DoS
Binary data 2183.prm...
Abyss Web Server < 1.1.4 HTTP GET Header Remote DoS
Binary data 1475.prm...
SquirrelMail < 1.4.3 Multiple Vulnerabilities
Binary data 1217.prm...
Samba-TNG < 0.3.1 Multiple Vulnerabilities (deprecated)
Binary data 1341.prm...
Powie PHP Forum < 1.15 Multiple Vulnerabilities
Binary data 1732.prm...