74 matches found
UBUNTU-CVE-2019-7283
An issue was discovered in rcp in NetKit through 0.17. For an rcp operation, the server chooses which files/directories are sent to the client. However, the rcp client only performs cursory validation of the object name returned. A malicious rsh server or Man-in-The-Middle attacker can overwrite...
Command injection
TP-Link WVR, WAR and ER devices allow remote authenticated administrators to execute arbitrary commands via command injection in the new-remotesubnet variable in the pptpclient.lua file...
CVE-2017-8624
CLFS in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an elevation of privilege vulnerability due to the way it handles objects in memory, aka "Windows CLFS Elevati...
PGBouncer 'src/client.c' Remote Denial of Service Vulnerability
PGBouncer is a set of lightweight database connection pooling tools for PostgreSQL. A security vulnerability exists in PGBouncer that allows a remote attacker to exploit the vulnerability to submit a special request and crash the application...
Microsoft Internet Explorer 6.0 ADODB.Stream Object File Installation Weakness
No description provided by source. source: http://www.securityfocus.com/bid/10514/info Microsoft Internet Explorer is prone to a security weakness that may permit malicious HTML documents to create or overwrite files on a victim file system when interpreted from the Local Zone or other Security...
Nomachine NX Web Companion code spoofing
client.zip file is downloaded without signature check...
Novell iPrint Client < 5.78 Multiple Code Execution Vulnerabilities
The version of Novell iPrint Client installed on the remote host is earlier than 5.78. Such versions are reportedly affected by one or more of the following vulnerabilities that can allow for arbitrary code execution : - An unspecified issue exists in the GetDriverSettings realm in nipplib.dll...
Novell iPrint Client < 5.78 Multiple Code Execution Vulnerabilities
Binary data 6315.prm...
CVE-2011-1705
Heap-based buffer overflow in nipplib.dll in Novell iPrint Client before 5.64 allows remote attackers to execute arbitrary code via a crafted client-file-name parameter in a printer-url...
CVE-2002-0131
CVE-2002-0131 : The ActivePython ActiveX control for Python in the AXScript package, used in Internet Explorer, can be exploited to read arbitrary files from the client’s filesystem via a malicious web page containing Python script. The root cause is that the control does not prevent script from ...
security bug Internet Explorer 5
There is a security bug in the Internet Explorer 5 I haven't tested it on other browsers. It is possible to read some textfiles others than cookies from the client's hard disk. If there is for example in the directory 'C:WINNT' a textfile 'test.txt' with content: us="stefaan" passwd="mypasswd" th...
Проблемы с SCP в OpenSSH
Со стороны сервера можно контролировать размещение файлов на компьютере клиента...
CVE-1999-0179
Publicly available documents provided do not include detailed technical information (affected products/versions, root cause, exploit details) for CVE-1999-0179. Monitor connected sources (Red Hat, CVE, EUVD, NVD) for updates and clarifications.
