4481 matches found
PT-2005-2825 · I-Man · I-Man
Name of the Vulnerable Software and Affected Versions: I-Man versions 0.9 and earlier Description: The issue allows remote attackers to execute arbitrary PHP code by uploading a file attachment with a .php extension. This can be done by exploiting the file upload functionality, potentially leadin...
CVE-2005-1366: Undefined Security Weakness
Pico Server pServ 3.2 and earlier allows remote attackers to obtain the source code for CGI scripts via "dirname/../cgi-bin" in a URL...
PWSPHP 1.2 - Multiple Cross-Site Scripting Vulnerabilities
PWSPHP 1.2 - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/13561/info PwsPHP is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage...
PT-2005-1739 · Ethereal +1 · Ethereal +1
Name of the Vulnerable Software and Affected Versions: Ethereal versions 0.10.9 and earlier Description: The issue is related to multiple buffer overflows in the dissect a11 radius function in the CDMA A11 3G-A11 dissector. This allows remote attackers to execute arbitrary code via RADIUS...
CVE-2004-1750
RealVNC 4.0 and earlier is affected; remote attackers can cause a denial of service by establishing a large number of connections to port 5900. The available documents do not provide exploit details or remediation. No further specifics on affected versions beyond 4.0 and earlier, or mitigation in...
CVE-2004-1057: Undefined Security Weakness
Multiple drivers in Linux kernel 2.4.19 and earlier do not properly mark memory with the VMIO flag, which causes incorrect reference counts and may lead to a denial of service kernel panic when accessing freed kernel pages...
PT-2004-3109 · Embedthis · Mbedthis Appweb Http Server
Name of the Vulnerable Software and Affected Versions: Mbedthis AppWeb HTTP server versions prior to 1.1.3 Description: The issue allows remote attackers to bypass access restrictions via a URI with mixed case characters. Recommendations: For versions prior to 1.1.3, update to version 1.1.3 or...
opera Web browser 7.54 java implementation - Multiple Vulnerabilities (3)
source: https://www.securityfocus.com/bid/11712/info Multiple remote vulnerabilities reportedly affect the Opera Web Browser Java implementation. These issues are due to the insecure proprietary design of the Web browser's Java implementation. These issues may allow an attacker to craft a Java...
Opera Web browser 7.54 java implementation - Multiple Vulnerabilities (4)
source: https://www.securityfocus.com/bid/11712/info Multiple remote vulnerabilities reportedly affect the Opera Web Browser Java implementation. These issues are due to the insecure proprietary design of the Web browser's Java implementation. These issues may allow an attacker to craft a Java...
IceWarp Web Mail < 5.3.1 Multiple Vulnerabilities (2)
Binary data 2387.prm...
IlohaMail user Parameter XSS
According to its banner, the remote web server is running IlohaMail version 0.8.10 or earlier. Such versions do not properly sanitize the 'user' parameter before using it to generate dynamic HTML output. An attacker may be able to leverage this to inject arbitrary HTML and script code into a user...
DEBIAN-CVE-2004-0591
Cross-site scripting XSS vulnerability in the printheaderuc function for SqWebMail 4.0.4 and earlier, and possibly 3.x, allows remote attackers to inject arbitrary web script or HRML via 1 e-mail headers or 2 a message with a "message/delivery-status" MIME Content-Type...
CVE-2003-0862
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2003-0813. Reason: This candidate is a duplicate of CVE-2003-0813. Notes: All CVE users should reference CVE-2003-0813 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...
Holes in Actinic E-commerce services.
http://www.actinic.com http://www.actinic.co.uk/ http://www.actinic-europe.com/ Versions : 4.7.0 & - With the files : bb|000|001|.pl ca| |002| os| |003| sh| |004| ss| |005| | |006| | |007| | |009| | |010| | |011| | |012| | |020| | |036| | |045| | |046| | |137| | |143| | |410| referrer.pl...
CVE-2001-0935
Vulnerability in wu-ftpd 2.6.0, and possibly earlier versions, which is unrelated to the ftpglob bug described in CVE-2001-0550...
PT-2001-2667 · Oracle · Solaris
Name of the Vulnerable Software and Affected Versions: Solaris versions 8 and earlier Description: The issue allows remote attackers to execute arbitrary commands via a job request with a crafted control file that is not properly handled when the lpd daemon invokes a mail program. Recommendations...
CVE-2001-0462: Undefined Security Weakness
Directory traversal vulnerability in Perl web server 0.3 and earlier allows remote attackers to read arbitrary files via a .. dot dot in the URL...
CVE-2001-0205: Undefined Security Weakness
Directory traversal vulnerability in AOLserver 3.2 and earlier allows remote attackers to read arbitrary files by inserting "..." into the requested pathname, a modified .. dot dot attack...
PT-1999-1041 · Controlit · Controlit
Name of the Vulnerable Software and Affected Versions: ControlIT versions 4.5 and earlier Description: The issue is related to weak password encryption. Recommendations: For ControlIT versions 4.5 and earlier, update to a version with improved password encryption to resolve the issue...
