CVE-2009-3876

Unspecified vulnerability in Sun Java SE in JDK and JRE 5.0 before Update 22, JDK and JRE 6 before Update 17, SDK and JRE 1.3.x before 1.3.127, and SDK and JRE 1.4.x before 1.4.224 allows remote attackers to cause a denial of service memory consumption via crafted DER encoded data, which is not...

CVE-2009-3877: Undefined Security Weakness

Unspecified vulnerability in Sun Java SE in JDK and JRE 5.0 before Update 22, JDK and JRE 6 before Update 17, SDK and JRE 1.3.x before 1.3.127, and SDK and JRE 1.4.x before 1.4.224 allows remote attackers to cause a denial of service memory consumption via crafted HTTP headers, which are not...

CVE-2009-3876: Undefined Security Weakness

Unspecified vulnerability in Sun Java SE in JDK and JRE 5.0 before Update 22, JDK and JRE 6 before Update 17, SDK and JRE 1.3.x before 1.3.127, and SDK and JRE 1.4.x before 1.4.224 allows remote attackers to cause a denial of service memory consumption via crafted DER encoded data, which is not...

KLA10344 Multiple vulnerabilities in Sun Java SE

Multiple serious vulnerabilities have been found in SUN Java SE. Malicious users can exploit these vulnerabilities to cause denial of service or bypass authentication. Below is a complete list of vulnerabilities 1. Unknown vectors can be exploited remotely via specially designed HTTP headers or...

Null pointer dereference

The asn1decodegeneraltime function in lib/krb5/asn.1/asn1decode.c in the ASN.1 GeneralizedTime decoder in MIT Kerberos 5 aka krb5 before 1.6.4 allows remote attackers to cause a denial of service daemon crash or possibly execute arbitrary code via vectors involving an invalid DER encoding that...

CVE-2009-0846

The asn1decodegeneraltime function in lib/krb5/asn.1/asn1decode.c in the ASN.1 GeneralizedTime decoder in MIT Kerberos 5 aka krb5 before 1.6.4 allows remote attackers to cause a denial of service daemon crash or possibly execute arbitrary code via vectors involving an invalid DER encoding that...

krb5: ASN.1 decoder can free uninitialized pointer when decoding an invalid encoding (MITKRB5-SA-2009-002)

The asn1decodegeneraltime function in lib/krb5/asn.1/asn1decode.c in the ASN.1 GeneralizedTime decoder in MIT Kerberos 5 aka krb5 before 1.6.4 allows remote attackers to cause a denial of service daemon crash or possibly execute arbitrary code via vectors involving an invalid DER encoding that...

Gentoo Security Advisory GLSA 200602-08 (libtasn1)

The remote host is missing updates announced in advisory GLSA 200602-08. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

joomlajpad-sql.txt

Joomla Component JPad Remote SQL Injection Founded by : His0k4 Algerian HaCkeR; Contact: His0k4atgmail.com Greetz : All friends & muslims HaCkeRs : ScriptName: "Joomla" ComponentName: "JPad" DORK: allinurl:comjpad P.O.C: /index.php?option=comjpad&task=edit&Itemid=39&cid=SQL Example:...

Joomla Component JPad 1.0 SQL Injection Vulnerability (postauth)

No description provided by source. Joomla Component JPad Remote SQL Injection Founded by : His0k4 Algerian HaCkeR; Contact: His0k4atgmail.com Greetz : All friends & muslims HaCkeRs : ScriptName: "Joomla" ComponentName: "JPad" DORK: allinurl:comjpad P.O.C:...

Joomla! Component JPad 1.0 - (Authenticated) SQL Injection

Joomla Component JPad Remote SQL Injection Founded by : His0k4 Algerian HaCkeR; Contact: His0k4atgmail.com Greetz : All friends & muslims HaCkeRs : ScriptName: "Joomla" ComponentName: "JPad" DORK: allinurl:comjpad P.O.C: /index.php?option=comjpad&task=edit&Itemid=39&cid=SQL Example:...

Debian Security Advisory DSA 985-1 (libtasn1-2)

The remote host is missing an update to libtasn1-2 announced via advisory DSA 985-1. Evgeny Legerov discovered several out-of-bounds memory accesses in the DER decoding component component of the Tiny ASN.1 Library that allows attackers to crash the DER decoder and possibly execute arbitrary code...

Debian: Security Advisory (DSA-986-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian: Security Advisory (DSA-985-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2007-5146

Multiple PHP remote file inclusion vulnerabilities in dedi-group Der Dirigent 1.0 allow remote attackers to execute arbitrary PHP code via a URL in the dedipath parameter to 1 inc.generatecode.php, 2 fnc.typeforms.php, or 3 fnc.type.php in backend/inc/, or 4 frontend.php or 5 backend.php in...

CVE-2007-5146

CVE-2007-5146 ffects dedi-group Der Dirigent 1.0. Multiple PHP remote file inclusion vulnerabilities allow remote attackers to execute arbitrary PHP code via a URL in the dedi_path parameter to: inc.generate_code.php, fnc.type_forms.php, fnc.type.php (backend/inc/), frontend.php or backend.php (p...

CVE-2007-5146: Improper Control of Generation of Code

Multiple PHP remote file inclusion vulnerabilities in dedi-group Der Dirigent 1.0 allow remote attackers to execute arbitrary PHP code via a URL in the dedipath parameter to 1 inc.generatecode.php, 2 fnc.typeforms.php, or 3 fnc.type.php in backend/inc/, or 4 frontend.php or 5 backend.php in...

Unfixed XSS vulnerability at www.van-der-wal.be

Security researcher MaXWeL, has submitted on 13/03/2007 a cross-site-scripting XSS vulnerability affecting www.van-der-wal.be, which at the time of submission ranked 6847721 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/03/2007. It is...

security flaw

Off-by-one error in the dergetoid function in modauthkerb 5.0 allows remote attackers to cause a denial of service crash via a crafted Kerberos message that triggers a heap-based buffer overflow in the component array...

CVE-2006-5507

Multiple PHP remote file inclusion vulnerabilities in Der Dirigent DeDi 1.0.3 allow remote attackers to execute arbitrary PHP code via a URL in the cfgdedidedipath parameter in 1 find.php, 2 insertline.php, 3 fullscreen.php, 4 changecase.php, 5 insertlink.php, 6 inserttable.php, 7...