Cacti 0.8.7 - 'graph_view.php?filter' Cross-Site Scripting

source: https://www.securityfocus.com/bid/27749/info Cacti is prone to multiple unspecified input-validation vulnerabilities, including: - Multiple cross-site scripting vulnerabilities - Multiple SQL-injection vulnerabilities - An HTTP response-splitting vulnerability. Attackers may exploit these...

[Full-disclosure] MIMESweeper For Web 5.X Cross Site Scripting

MIMESweeper For Web 5.X Cross Site Scripting I. INTRODUCTION MIMESweeper For Web is a policy-based content security for web applications. It analyzes web content and blocks pages or files that are prohibited by the organizational security policy. For more Information please refer to:...

[SEC-1 Advisory] Collaboration Data Objects Buffer Overflow Vulnerability

SEC-1 LTD. www.sec-1.com Security Advisory Advisory Name: Collaboration Data Objects Buffer Overflow Vulnerability Application: Multiple Applications that implement CDO Platform: Windows 2000 All versions Windows XP All versions inc sp2 Windows Server 2003 All versions Exchange 2000 Server Servic...

CVE-2003-1014

Multiple content security gateway and antivirus products allow remote attackers to bypass content restrictions via MIME messages that use multiple MIME fields with the same name, which may be interpreted differently by mail clients...

CVE-2003-1016

Multiple content security gateway and antivirus products allow remote attackers to bypass content restrictions via MIME messages that use malformed quoting in MIME headers, parameters, and values, including 1 fields that should not be quoted, 2 duplicate quotes, or 3 missing leading or trailing...

CVE-2004-0162

Multiple content security gateway and antivirus products allow remote attackers to bypass content restrictions via MIME encapsulation that uses RFC822 comment fields, which may be interpreted as other fields by mail clients...

CVE-2004-0053

Multiple content security gateway and antivirus products allow remote attackers to bypass content restrictions via MIME messages that use fields that use RFC2047 encoding, which may be interpreted differently by mail clients...

CVE-2004-0051

Multiple content security gateway and antivirus products allow remote attackers to bypass content restrictions via MIME messages that use non-standard but frequently supported Content-Transfer-Encoding values such as 1 uuencode, 2 mac-binhex40, and 3 yenc, which may be interpreted differently by...

CVE-2004-0161

Multiple content security gateway and antivirus products allow remote attackers to bypass content restrictions via MIME messages that use RFC2231 encoding, which may be interpreted differently by mail clients...

CVE-2003-1015

Multiple content security gateway and antivirus products allow remote attackers to bypass content restrictions via MIME messages that use whitespace in an unusual fashion, which may be interpreted differently by mail clients...

CVE-2004-0052

Multiple content security gateway and antivirus products allow remote attackers to bypass content restrictions via MIME messages that use non-standard separator characters, or use standard separators incorrectly, within MIME headers, fields, parameters, or values, which may be interpreted...

CVE-2003-1014

The CVE-2003-1014 issue affects multiple content security gateway and antivirus products. It arises from how MIME messages with multiple fields of the same name are parsed, allowing remote attackers to bypass content restrictions because different mail clients or security tools may interpret the ...

CVE-2003-1016

Multiple content security gateway and antivirus products allow remote attackers to bypass content restrictions via MIME messages that use malformed quoting in MIME headers, parameters, and values, including 1 fields that should not be quoted, 2 duplicate quotes, or 3 missing leading or trailing...

CVE-2003-1015

CVE-2003-1015: Affects multiple content security gateway and antivirus products. Issue: MIME messages that use whitespace in an unusual fashion may be interpreted differently by mail clients, allowing bypass of content restrictions (vulnerability in how MIME is parsed). Impact: potential bypass o...

CVE-2004-0051

Multiple content security gateway and antivirus products allow remote attackers to bypass content restrictions via MIME messages that use non-standard but frequently supported Content-Transfer-Encoding values such as 1 uuencode, 2 mac-binhex40, and 3 yenc, which may be interpreted differently by...

CVE-2004-0053

The CVE-2004-0053 issue affects multiple content security gateway and antivirus products, where RFC2047-encoded MIME fields can be interpreted differently by mail clients, enabling remote attackers to bypass content restrictions. The root cause is inconsistent handling/interpretation of RFC2047 e...

CVE-2003-1015

Multiple content security gateway and antivirus products allow remote attackers to bypass content restrictions via MIME messages that use whitespace in an unusual fashion, which may be interpreted differently by mail clients...

CVE-2004-0052

Multiple content security gateway and antivirus products allow remote attackers to bypass content restrictions via MIME messages that use non-standard separator characters, or use standard separators incorrectly, within MIME headers, fields, parameters, or values, which may be interpreted...

CVE-2004-0051

CVE-2004-0051 affects multiple content security gateway and antivirus products. The issue arises from MIME Content-Transfer-Encoding values that are non-standard but widely supported (uuencode, mac-binhex40, yenc), which may be interpreted differently by mail clients and allow remote attackers to...

CVE-2004-0052

CVE-2004-0052 concerns multiple content security gateways and antivirus products. It describes bypassing content restrictions via MIME messages that use non-standard separator characters or misuse standard separators in MIME headers/fields/parameters, leading to potential partial exposure of conf...