1245 matches found
CVE-2009-5015
The URL dispatch mechanism in TurboGears2 aka tg2 before 2.0.2 exposes controller methods even when an @expose decoration is not used, which has unspecified impact and attack vectors...
CVE-2009-5015
The URL dispatch mechanism in TurboGears2 aka tg2 before 2.0.2 exposes controller methods even when an @expose decoration is not used, which has unspecified impact and attack vectors...
CVE-2009-5015
Removed by vendor...
CVE-2009-5015
CVE-2009-5015 affects TurboGears2 (tg2) prior to 2.0.2, where the URL dispatch mechanism exposes controller methods even if @expose is not used. The description notes unspecified impact and attack vectors; the provided connected documents do not elaborate on the root cause, affected components be...
CVE-2009-5015: Undefined Security Weakness
The URL dispatch mechanism in TurboGears2 aka tg2 before 2.0.2 exposes controller methods even when an @expose decoration is not used, which has unspecified impact and attack vectors...
PT-2010-1817
Name of the Vulnerable Software and Affected Versions TurboGears2 versions prior to 2.0.2 Description The issue in TurboGears2 concerns the URL dispatch mechanism, which exposes controller methods even when an @expose decoration is not used. This has an unspecified impact and attack vectors...
DEBIAN-CVE-2010-2060
The put command functionality in beanstalkd 1.4.5 and earlier allows remote attackers to execute arbitrary Beanstalk commands via the body in a job that is too big, which is not properly handled by the dispatchcmd function in prot.c...
PT-2010-3678 · Beanstalkd · Beanstalkd
Name of the Vulnerable Software and Affected Versions: beanstalkd versions 1.4.5 and earlier Description: The issue allows remote attackers to execute arbitrary Beanstalk commands via the body in a job that is too big. This is due to improper handling by the dispatch cmd function in prot.c...
CS-Cart 2.0.0 Beta 3 (product_id) SQL Injection Vulnerability
No description provided by source. CS-Cart 2.0.0 Beta 3 dispatch SQL Injection Vulnerability Provider: www.cs-cart.com Discovered by netsoul Greetz: m1cr0n, IvanKalet, blackfalcon, str0ke Contact: netsoul2atgmail.com ALTO PARANA - PARAGUAY Ñane mba'e teete Exploit: http://cs-cart...
CVE-2007-6515
support/dispatch.cgi in SiteScape Forum allows remote attackers to execute arbitrary TCL code via code separator characters in the query string...
Design/Logic Flaw
The Event Dispatch Thread in Robocode before 1.5.1 allows remote attackers to execute arbitrary Java code by using a robot to invoke the SwingUtilities.invokeLater method...
CVE-2007-6382
The Event Dispatch Thread in Robocode before 1.5.1 allows remote attackers to execute arbitrary Java code by using a robot to invoke the SwingUtilities.invokeLater method...
CVE-2007-6382
Summary: Robocode versions before 1.5.1 are affected by an arbitrary code execution vulnerability involving the Event Dispatch Thread (EDT). According to the documents, a robot can trigger Java code execution by invoking SwingUtilities.invokeLater on the EDT. Affected product/component: Robocode ...
CVE-2007-6382
The Event Dispatch Thread in Robocode before 1.5.1 allows remote attackers to execute arbitrary Java code by using a robot to invoke the SwingUtilities.invokeLater method...
CVE-2007-6382
The Event Dispatch Thread in Robocode before 1.5.1 allows remote attackers to execute arbitrary Java code by using a robot to invoke the SwingUtilities.invokeLater method...
CVE-2007-6382: Undefined Security Weakness
The Event Dispatch Thread in Robocode before 1.5.1 allows remote attackers to execute arbitrary Java code by using a robot to invoke the SwingUtilities.invokeLater method...
openSUSE 10 Security Update : samba (samba-2584)
"A logic error in the deferred open code can lead to an infinite loop in Samba's smbd daemon. In addition the following changes are included with these packages : - Disable broken DCERPC funnel patch; 242833. - Avoid winbind event handler for internal domains. - Fix smbcontrol winbind offline;...
security flaw
The SimpleXMLRPCServer library module in Python 2.2, 2.3 before 2.3.5, and 2.4, when used by XML-RPC servers that use the registerinstance method to register an object without a dispatch method, allows remote attackers to read or modify globals of the associated module, and possibly execute...
PT-2005-1198 · Python +1 · Python +2
Name of the Vulnerable Software and Affected Versions: Python versions 2.2, 2.3 before 2.3.5, and 2.4 Description: The issue allows remote attackers to read or modify globals of the associated module, and possibly execute arbitrary code, via dotted attributes, when the SimpleXMLRPCServer library...