23601 matches found
CVE-2007-6042
PHP remote file inclusion vulnerability in fehler.inc.php in SWSoft Confixx Professional 3.2.1 allows remote attackers to execute arbitrary PHP code via a URL in an unspecified parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party...
CVE-2009-3341
Buffer overflow on the Linksys WRT54GL wireless router allows remote attackers to execute arbitrary code via unspecified vectors, as demonstrated by a certain module in VulnDisco Pack Professional 8.10 through 8.11. NOTE: as of 20090917, this disclosure has no actionable information. However,...
CVE-2006-7252
Integer overflow in the calloc function in libc/stdlib/malloc.c in jemalloc in libc for FreeBSD 6.4 and NetBSD makes it easier for context-dependent attackers to perform memory-related attacks such as buffer overflows via a large size value, which triggers a memory allocation of one byte...
CVE-2002-2320
MySimpleNews 1.0 allows remote attackers to delete arbitrary email messages via a direct request to vider.php3...
CVE-2009-1757
Cross-site request forgery CSRF vulnerability in Transmission 1.5 before 1.53 and 1.6 before 1.61 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...
CVE-2006-6534
Multiple cross-site scripting XSS vulnerabilities in osCommerce 3.0a3 allow remote attackers to inject arbitrary web script or HTML via the 1 set parameter to admin/modules.php, the 2 selectedbox parameter to definitiva/admin/customers.php, the 3 lID parameter to admin/languagesdefinitions.php, o...
CVE-2009-3177
Unspecified vulnerability in Kaspersky Online Scanner 7.0 has unknown impact and attack vectors, as demonstrated by a certain module in VulnDisco Pack Professional 8.8, 1 "Kaspersky Online Antivirus Scanner 7.0 exploit Linux" and 2 "Kaspersky Online Antivirus Scanner 7.0 exploit Windows." NOTE: a...
CVE-1999-0717
A remote attacker can disable the virus warning mechanism in Microsoft Excel 97...
CVE-1999-0201
A quote cwd command on FTP servers can reveal the full path of the home directory of the "ftp" user...
CVE-2025-48060
jq is a command-line JSON processor. In versions up to and including 1.7.1, a heap-buffer-overflow is present in function jvstringvfmt in the jqfuzzexecute harness from oss-fuzz. This crash happens on file jv.c, line 1456 void p = mallocsz;. As of time of publication, no patched versions are...
CVE-1999-0741
QMS CrownNet Unix Utilities for 2060 allows root to log on without a password...
CVE-1999-0902
ypserv allows local administrators to modify password tables...
CVE-1999-0893
userOsa in SCO OpenServer allows local users to corrupt files via a symlink attack...
CVE-1999-0732
The logging facility of the Debian smtp-refuser package allows local users to delete arbitrary files using symbolic links...
CVE-1999-0713
The dtlogin program in Compaq Tru64 UNIX allows local users to gain root privileges...
CVE-1999-0676
sdtcmconvert in Solaris 2.6 allows a local user to overwrite sensitive files via a symlink attack...
CVE-1999-0606
An incorrect configuration of the EZMall 2000 shopping cart CGI program "mall2000.cgi" could disclose private information...
CVE-1999-0447
Local users can gain privileges using the debug utility in the MPE/iX operating system...