CVE-2004-1621: Undefined Security Weakness

NOTE: this issue has been disputed by the vendor. Cross-site scripting XSS vulnerability in IBM Lotus Notes R6 and Domino R6, and possibly earlier versions, allows remote attackers to execute arbitrary web script or HTML via square brackets at the beginning and end of 1 computed for display, 2...

DEBIAN-CVE-2004-2160

Format string vulnerability in xmlelem.c for XMLStarlet Command Line XML Toolkit 0.9.3 may allow attackers to cause a denial of service or execute arbitrary code...

CVE-2004-1104: Undefined Security Weakness

Microsoft Internet Explorer 6.0 SP2 allows remote attackers to spoof a legitimate URL in the status bar and conduct a phishing attack via a web page that contains a BASE element that points to the legitimate site, followed by an anchor a element with an empty "href" attribute, and a FORM whose...

CVE-2002-1187: Undefined Security Weakness

Cross-site scripting vulnerability XSS in Internet Explorer 5.01 through 6.0 allows remote attackers to read and execute files on the local system via web pages using the or element and javascript, aka "Frames Cross Site Scripting," as demonstrated using the PrivacyPolicy.dlg resource...

CVE-2004-1078

Stack-based buffer overflow in the client for Citrix Program Neighborhood Agent for Win32 8.00.24737 and earlier and Citrix MetaFrame Presentation Server client for WinCE before 8.33 allows remote attackers to execute arbitrary code via a long cached icon filename in the InName XML element...

Microsoft Internet Explorer does not properly evaluate "application/hta" MIME type referenced by DATA attribute of OBJECT element

Overview Microsoft Internet Explorer IE will execute an HTML Application HTA referenced by the DATA attribute of an OBJECT element if the Content-Type header returned by the web server is set to "application/hta". An attacker could exploit this vulnerability to execute arbitrary code with the...

Microsoft Media Player Media Library unauthorized access

ActiveX element can access medial library...

CVE-2002-1049

Format string vulnerability in HylaFAX faxgetty before 4.1.3 allows remote attackers to cause a denial of service crash via the TSI data element...

CVE-2002-1049

Format string vulnerability in HylaFAX faxgetty before 4.1.3 allows remote attackers to cause a denial of service crash via the TSI data element...

CVE-2002-0594: Undefined Security Weakness

Netscape 6 and Mozilla 1.0 RC1 and earlier allows remote attackers to determine the existence of files on the client system via a LINK element in a Cascading Style Sheet CSS page that causes an HTTP redirect...

CVE-2002-1049: Undefined Security Weakness

Format string vulnerability in HylaFAX faxgetty before 4.1.3 allows remote attackers to cause a denial of service crash via the TSI data element...

CVE-2003-0137

The CVE affects the SNMP daemon in the DX200-based Nokia SGSN network element. It allows remote attackers to read SNMP options by using arbitrary community strings, enabling partial information disclosure. No remediation details are provided in the supplied documents. Exploitation status or in-th...

Nokia SGSN (DX200 Based Network Element) SNMP issue

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 @stake, Inc. www.atstake.com Security Advisory Advisory Name: Nokia SGSN DX200 Based Network Element SNMP issue Release Date: 03/13/2003 Application: Nokia SGSN DX200 Based Network Element Platform: DX200 Severity: An attacker is able to read SNMP...

CVE-2002-1049

Format string vulnerability in HylaFAX faxgetty before 4.1.3 allows remote attackers to cause a denial of service crash via the TSI data element...

CVE-2002-1049

Format string vulnerability in HylaFAX faxgetty before 4.1.3 allows remote attackers to cause a denial of service crash via the TSI data element...

Unauthorized local file access in Opera

Javascript submition of form with input type="file" element doesn't require user intervation...

[RHSA-2002:062-08] Insecure DocBook stylesheet option

--------------------------------------------------------------------- Red Hat, Inc. Red Hat Security Advisory Synopsis: Insecure DocBook stylesheet option Advisory ID: RHSA-2002:062-08 Issue date: 2002-04-11 Updated on: 2002-04-26 Product: Red Hat Linux Keywords: docbook stylesheet Cross...

PHP-Nuke 5.0 - user.php Form Element Substitution

PHP-Nuke 5.0 - user.php Form Element Substitution source: https://www.securityfocus.com/bid/3107/info PHP-Nuke is a website creation/maintenance tool written in PHP3. If a malicious user may subtitute arbitrary values for image form elements in the PHP-Nuke User Registration Form by saving the...

Проблемы в vim (VIM control code)

При исопльзовании status line можно вставить элементы управления в файл...

CVE-2000-1001

CVE-2000-1001 affects Element InstantShop: the add_2_basket.asp endpoint allows remote attackers to modify price information via the hidden form variable price. The underlying issue is input/data integrity on the price field, enabling tampering before processing. The CVSS data assigns a base scor...