272 matches found
CVE-2011-1515
The inet service in HP OpenView Storage Data Protector 6.00 through 6.20 allows remote attackers to cause a denial of service daemon exit via a request containing crafted parameters...
Null pointer dereference
The inet service in HP OpenView Storage Data Protector 6.00 through 6.20 allows remote attackers to cause a denial of service NULL pointer dereference and daemon crash via a request containing crafted parameters...
Stack overflow
Multiple stack-based buffer overflows in the inet service in HP OpenView Storage Data Protector 6.00 through 6.20 allow remote attackers to execute arbitrary code via a request containing crafted parameters...
CVE-2011-1865
Multiple stack-based buffer overflows in the inet service in HP OpenView Storage Data Protector 6.00 through 6.20 allow remote attackers to execute arbitrary code via a request containing crafted parameters...
FreeBSD Ports: linux-flashplugin
The remote host is missing an update to the system as announced in the referenced advisory. VID 4a3482da-3624-11e0-b995-001b2134ef46 OpenVAS Vulnerability Test $ Description: Auto generated from VID 4a3482da-3624-11e0-b995-001b2134ef46 Authors: Thomas Reinke Copyright: Copyright c 2011 E-Soft Inc...
CVE-2009-3630
TYPO3 Backend frame hijacking (CVE-2009-3630) affects the Backend subcomponent in TYPO3 up to specific early releases: 4.0.13 and earlier; 4.1.x before 4.1.13; 4.2.x before 4.2.10; and 4.3.x before 4.3beta2. Remote authenticated users could place arbitrary websites into TYPO3 backend framesets vi...
CVE-2009-3630
The Backend subcomponent in TYPO3 4.0.13 and earlier, 4.1.x before 4.1.13, 4.2.x before 4.2.10, and 4.3.x before 4.3beta2 allows remote authenticated users to place arbitrary web sites in TYPO3 backend framesets via crafted parameters, related to a "frame hijacking" issue...
CVE-2008-5620
RoundCube Webmail roundcubemail before 0.2-beta allows remote attackers to cause a denial of service memory consumption via crafted size parameters that are used to create a large quota image...
Sql injection
SQL injection vulnerability in searchinv.php in Assetman 2.5b allows remote attackers to execute arbitrary SQL commands and conduct session fixation attacks via a combination of crafted order and orderby parameters in a searchall action...
CVE-2008-4161
SQL injection vulnerability in searchinv.php in Assetman 2.5b allows remote attackers to execute arbitrary SQL commands and conduct session fixation attacks via a combination of crafted order and orderby parameters in a searchall action...
CVE-2005-0972
Integer overflow in the searchfs system call in Mac OS X 10.3.9 and earlier allows local users to execute arbitrary code via crafted parameters...
Debian DSA-241-1 : kdeutils - several vulnerabilities
The KDE team discovered several vulnerabilities in the K Desktop Environment. In some instances KDE fails to properly quote parameters of instructions passed to a command shell for execution. These parameters may incorporate data such as URLs, filenames and e-mail addresses, and this data may be...