URL-Encoding Problem in Finjan SurfinGate

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUMMARY - ------- The Finjan SurfinGate use web content filtering and internet access management for protecting the network. A vulnerability in the product allows you to bypass the access management. You can download files which are normally blocked...

CVE-2004-2083

Opera Web Browser 7.0 through 7.23 allows remote attackers to trick users into executing a malicious file by embedding a CLSID in the file name, which causes the malicious file to appear as a trusted file type, aka "File Download Extension Spoofing."...

CVE-2004-2083

Summary: Opera Web Browser 7.0–7.23 is affected by a file-download extension spoofing flaw. When a malicious site provides a downloadable file, the filename may embed a CLSID that makes the file appear as a trusted type, tricking users into executing it. This can lead to arbitrary code execution ...

CVE-2005-1575

The file download dialog in Mozilla Firefox 0.10.1 and 1.0 for Windows allows remote attackers to hide the real file types of downloaded files via the Content-Type HTTP header and a filename containing whitespace, dots, or ASCII byte 160...

CVE-2005-1575

The file download dialog in Mozilla Firefox 0.10.1 and 1.0 for Windows allows remote attackers to hide the real file types of downloaded files via the Content-Type HTTP header and a filename containing whitespace, dots, or ASCII byte 160...

CVE-2005-1575

The CVE-2005-1575 issue concerns Mozilla Firefox for Windows (versions 0.10.1 and 1.0) where the file download dialog could misrepresent a file’s type. The root cause described across connected records is that a malicious HTTP Content-Type header combined with a filename containing whitespace, do...

CVE-2005-1576

Affected software: Mozilla Firefox on Windows (versions 0.10.1 and 1.0). Vulnerability: The file download dialog uses the Content-Type HTTP header to determine file type, but when selecting “Save to Disk,” it preserves the original file extension, allowing remote attackers to mask the true file t...

CVE-2005-1576

The file download dialog in Mozilla Firefox 0.10.1 and 1.0 for Windows uses the Content-Type HTTP header to determine the file type, but saves the original file extension when "Save to Disk" is selected, which allows remote attackers to hide the real file types of downloaded files...

CVE-2004-1887

CVE-2004-1887 affects Ada Image Server (ImgSvr) 0.4. The vulnerability allows remote attackers to view directories or download files by making an HTTP request with a trailing %00 (null). The NVD entry notes a network attack vector with low complexity and no authentication required, resulting in p...

CVE-2004-1838

CVE-2004-1838 affects xweb 1.0 and describes a directory traversal vulnerability where a dot-dot sequence in the URL allows a remote attacker to download arbitrary files. The available documents state the impact as arbitrary file download but do not provide a stated root cause or remediation. No ...

CVE-2004-1887

Ada Image Server ImgSvr 0.4 allows remote attackers to view directories or download files via an HTTP request with a trailing %00 null...

Multiple Mozilla / Firefox / Netscape vulnerabilities

Few combined vulnerabilities allow to download and execute file on client machine...

Multiple vulnearabilities in e107 cms

Software: http://www.e107.org Author: Heintz Advisory origin: http://www.waraxe.us Software bugtracker: http://e107.org/e107plugins/bugtracker2/bugtracker2.php?0.bug.558 e107 v 0.617 search.php line 142 if$POST'searchquery' echo "div...

[SNS Advisory No.80] nProtect:Netizen Arbitrary File Download Vulnerability

------------------------------------------------------------------ SNS Advisory No.80 nProtect:Netizen Arbitrary File Download Vulnerability Problem first discovered on: Wed, 13 Apr 2005 Published on: Mon, 25 Apr 2005 ------------------------------------------------------------------ Severity...

Gaim 1.1.3 - File Download Denial of Service

Gaim 1.1.3 - File Download Denial of Service source: https://www.securityfocus.com/bid/12667/info Gaim is affected by a denial of service vulnerability during the download of a file. This issue can allow remote attackers to cause an affected client to fail. A vulnerablity in the client arises whe...

Gaim 1.1.3 - File Download Denial of Service

source: https://www.securityfocus.com/bid/12667/info Gaim is affected by a denial of service vulnerability during the download of a file. This issue can allow remote attackers to cause an affected client to fail. A vulnerablity in the client arises when it tries to download a file with bracket...

cURL file download agent and library authentication buffer overflow

Buffer overflow during NTLM and Kerberos authentication...

CVE-2005-0313

Multiple directory traversal vulnerabilities in Magic Winmail Server 4.0 Build 1112 allow remote attackers to 1 upload arbitrary files via certain parameters to upload.php or 2 read arbitrary files via certain parameters to download.php, and remote authenticated users to read, create, or delete...

CVE-2005-0145

CVE-2005-0145 affects Firefox up to version prior to 1.0. The vulnerability arises because Firefox does not properly distinguish between user-generated and synthetic click events, allowing a malicious page to use JavaScript to bypass the file download prompt via the Alt-click feature. Impact is t...

CVE-2005-0145

Firefox before 1.0 does not properly distinguish between user-generated and synthetic click events, which allows remote attackers to use Javascript to bypass the file download prompt when the user uses the Alt-click feature...