Design/Logic Flaw

The keycertify function in usr.bin/ssh/key.c in OpenSSH 5.6 and 5.7, when generating legacy certificates using the -t command-line option in ssh-keygen, does not initialize the nonce field, which might allow remote attackers to obtain sensitive stack memory contents or make it easier to conduct...

"The Daily" Hacked, Unauthorized Web Index Created !

One affair about The Daily that ashamed me from the additional I aboriginal laid eyes on the iPad bi-weekly that launched bygone is that there is no one abode area you can see a simple account of every news in the issue. There is a table of contents, but it shows alone ten featured stories. Like...

Design/Logic Flaw

Ruby Version Manager RVM before 1.2.1 writes file contents to a terminal without sanitizing non-printable characters, which might allow remote attackers to execute arbitrary commands via a crafted file, related to an "escape sequence injection vulnerability." NOTE: some of these details are...

CVE-2010-3928

Ruby Version Manager (RVM) prior to 1.2.1 contains an escape sequence injection vulnerability. The issue arises because RVM writes file contents to a terminal without sanitizing non‑printable characters, enabling a crafted file to cause the terminal to process escape sequences. This could allow a...

CVE-2010-3925

Contents-Mall before 15 does not properly handle passwords, which allows remote attackers to discover the administrative password, and consequently obtain sensitive information or modify data, via unspecified vectors...

CVE-2008-7271

Multiple cross-site scripting XSS vulnerabilities in the Help Contents web application aka the Help Server in Eclipse IDE, possibly 3.3.2, allow remote attackers to inject arbitrary web script or HTML via 1 the searchWord parameter to help/advanced/searchView.jsp or 2 the workingSet parameter in ...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in the Help Contents web application aka the Help Server in Eclipse IDE, possibly 3.3.2, allow remote attackers to inject arbitrary web script or HTML via 1 the searchWord parameter to help/advanced/searchView.jsp or 2 the workingSet parameter in ...

CVE-2010-4647

Multiple cross-site scripting XSS vulnerabilities in the Help Contents web application aka the Help Server in Eclipse IDE before 3.6.2 allow remote attackers to inject arbitrary web script or HTML via the query string to 1 help/index.jsp or 2 help/advanced/content.jsp...

Default credentials

Contents-Mall before 15 does not properly handle passwords, which allows remote attackers to discover the administrative password, and consequently obtain sensitive information or modify data, via unspecified vectors...

CVE-2008-7271

Multiple cross-site scripting XSS vulnerabilities in the Help Contents web application aka the Help Server in Eclipse IDE, possibly 3.3.2, allow remote attackers to inject arbitrary web script or HTML via 1 the searchWord parameter to help/advanced/searchView.jsp or 2 the workingSet parameter in ...

CVE-2008-7271

CVE-2008-7271 describes multiple cross-site scripting (XSS) vulnerabilities in the Eclipse IDE Help Contents web application (Help Server). An attacker could inject arbitrary script/HTML via (1) the searchWord parameter to help/advanced/searchView.jsp or (2) the workingSet parameter in an add act...

CVE-2010-3925

Contents-Mall before version 15 contains a vulnerability in password handling that can allow remote attackers to disclose the administrative password and potentially access or modify stored data. The issue is addressed in Contents-Mall Ver.15.00; affected versions are Ver.14.00 and earlier. No ex...

CVE-2010-3925

Contents-Mall before 15 does not properly handle passwords, which allows remote attackers to discover the administrative password, and consequently obtain sensitive information or modify data, via unspecified vectors...

CVE-2008-7271

Removed by vendor...

Contents-Mall vulnerability in password handling

Overview Contents-Mall contains a vulnerability in the way it handles passwords. Contents-Mall is a shopping cart software for digital contents. Contents-Mall contains a vulnerability in the way it handles passwords. Impact The administrative password may be disclosed. As a result, information...

PT-2011-1615 · Eclipse +1 · Eclipse Ide +1

Name of the Vulnerable Software and Affected Versions: Eclipse IDE versions prior to 3.6.2 Description: The issue concerns multiple cross-site scripting XSS vulnerabilities in the Help Contents web application of the Eclipse IDE. These vulnerabilities allow remote attackers to inject arbitrary we...

[SECURITY] Fedora 13 Update: evince-2.30.3-2.fc13

Evince is simple multi-page document viewer. It can display and print Portable Document Format PDF, PostScript PS and Encapsulated PostScript EPS files. When supported by the document format, evince allows searching for text, copying text to the clipboard, hypertext navigation, table-of-contents...

JVN#53293565: Contents-Mall vulnerability in password handling

Contents-Mall is a shopping cart software for digital contents. Contents-Mall contains a vulnerability in the way it handles passwords. Impact The administrative password may be disclosed. As a result, information stored by the software may be viewed or altered. Solution Updatethe software Update...

Integer overflow

Multiple integer overflows in innsv.dll in the innsv plugin in Winamp before 5.6 allow remote attackers to execute arbitrary code via a crafted Table of Contents TOC in a 1 NSV stream or 2 NSV file that triggers a heap-based buffer overflow...

Clipboard contents alteration vulnerability in Grani

Overview Grani contains a vulnerability in which the contents of the clipboard may be altered. Grani, a web browser provided by Fenrir, contains a vulnerability in which the contents of the clipboard may be altered. As a result, when Grani is being used under certain settings, the contents of the...