3274 matches found
CVE-2009-1674
Stack-based buffer overflow in Microchip MPLAB IDE 8.30 allows user-assisted remote attackers to execute arbitrary code via a long .cof pathname in a TOOLSETTINGS section in a .mcp file, possibly a related issue to CVE-2009-1608...
EUVD-2009-1554
Directory traversal vulnerability in adm/file.cgi on the Cisco Linksys WVC54GCA wireless video camera with firmware 1.00R22 and 1.00R24 allows remote attackers to read arbitrary files via a %2e. encoded dot dot or an absolute pathname in the nextfile parameter...
Wireshark 1.0.7版本修复多个拒绝服务漏洞
BUGTRAQ ID: 34457 CVECAN ID: CVE-2009-1267,CVE-2009-1268,CVE-2009-1269 Wireshark之前名为Ethereal，是一款非常流行的网络协议分析工具。 Wireshark的LDAP和CPHAP协议解析模块中存在拒绝服务漏洞。如果用户受骗从网络抓取了恶意的LDAP或CPHA FWHAMYSTATE报文或读取了恶意抓包文件的话，就会导致解析模块崩溃。此外如果加载了恶意的Tektronix .rf5文件的话Wireshark可能会崩溃。 Wireshark 0.9.6 - 1.0.6 Wireshark ---------...
Mandriva Update for cups MDVSA-2008:081 (cups)
Check for the Version of cups OpenVAS Vulnerability Test Mandriva Update for cups MDVSA-2008:081 cups Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the ter...
DEBIAN-CVE-2009-1151
Static code injection vulnerability in setup.php in phpMyAdmin 2.11.x before 2.11.9.5 and 3.x before 3.1.3.1 allows remote attackers to inject arbitrary PHP code into a configuration file via the save action...
Femitter FTP Server 1.x - (Authenticated) Multiple Vulnerabilities
Femitter FTP Server 1.x - Authenticated Multiple Vulnerabilities / Femitter Server FTP 1.x Multiple Vulnerability ---------------------------------------------------- Arbitrary: ---------- The vulnerability is caused due to an input validation error when processing FTP requests. This can be...
Ubuntu Update for file vulnerability USN-439-2
Ubuntu Update for Linux kernel vulnerabilities USN-439-2 OpenVAS Vulnerability Test $Id: gbubuntuUSN4392.nasl 7969 2017-12-01 09:23:16Z santu $ Ubuntu Update for file vulnerability USN-439-2 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH,...
Ubuntu Update for file vulnerability USN-439-1
Ubuntu Update for Linux kernel vulnerabilities USN-439-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN4391.nasl 7969 2017-12-01 09:23:16Z santu $ Ubuntu Update for file vulnerability USN-439-1 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH,...
Winamp skin.xml皮肤文件处理缓冲区溢出漏洞
BUGTRAQ ID: 34009 Winamp是一款流行的媒体播放器，支持多种文件格式。 如果Winamp受骗加载了恶意的皮肤文件的话，就可能触发缓冲区溢出，导致在用户系统上执行任意代码。 Nullsoft Winamp 5.541 厂商补丁： Nullsoft -------- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://www.winamp.com/ http://www.sebug.net/exploit/5933/...
Ewebeditor2.8.0最终版删除任意文件漏洞
eWebEditor是基于浏览器的、所见即所得的在线HTML编辑器。她能够在网页上实现许多桌面编辑软件（如：Word）所具有的强大可视编辑功能。WEB开发人员可以用她把传统的多行文本输入框TEXTAREA替换为可视化的富文本输入框，使最终用户可以可视化的发布HTML格式的网页内容。eWebEditor!已基本成为网站内容管理发布的必备工具！ 此漏洞存在于Example\NewsSystem目录下的delete.asp文件中，这是ewebeditor的测试页面，无须登陆可以直接进入，看这些代码： ‘ 把带”|”的字符串转为数组 Dim aSavePathFileName...
WB News 2.1.1 Remote File Inclusion
-----------------:Remote File Include:----------------- ------------------------------------------------------- script:wb news v2.1.1 ------------------------------------------------------------------ download from:http://www.webmobo.com/downloads/...
Synactis ALL In-The-Box ActiveX控件SaveDoc()方法覆盖任意文件漏洞
Synactis ALL In-The-Box ActiveX控件是一种PDF及图像文件自动化生成及输出工具。 ALL In-The-Box ActiveX控件AllInTheBox.ocx的SaveDoc方法实现上存在漏洞，远程攻击者可能利用此漏洞通过指定以NULL结尾的文件名覆盖系统上的任意文件，导致拒绝服务或任意命令执行。 Synactis ALL In-The-Box ActiveX 3.x 厂商补丁： Synactis -------- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://www.synactis.com...
EPOLL SYSTEM 3.1 - Password.dat Disclosure
EPOLL SYSTEM 3.1 - Password.dat Disclosure !/usr/bin/python Portal Name: EPOLL SYSTEM Version : All version 'Google Dork : Powered by Egorix Exploit Coded by: PouyaServer Exploit Discovered by: PouyaServer Contact Me : [email protected] Epoll system login page = www.site.com/Path/admin.php...
CVE-2009-0179
libmikmod 3.1.11 through 3.2.0, as used by MikMod and possibly other products, allows user-assisted attackers to cause a denial of service application crash by loading an XM file...
CVE-2008-5910
Unspecified vulnerability in txzonemgr in Sun OpenSolaris has unknown impact and local attack vectors, related to a "Temporary file vulnerability," aka Bug ID 6653462...
CVE-2009-0167
Unspecified vulnerability in lpadmin in Sun Solaris 10 and OpenSolaris snv61 through snv106 allows local users to cause a denial of service via unspecified vectors, related to enumeration of "wrong printers," aka a "Temporary file vulnerability."...
CVE-2009-0167
Unspecified vulnerability in lpadmin in Sun Solaris 10 and OpenSolaris snv61 through snv106 allows local users to cause a denial of service via unspecified vectors, related to enumeration of "wrong printers," aka a "Temporary file vulnerability."...
Design/Logic Flaw
Unspecified vulnerability in txzonemgr in Sun OpenSolaris has unknown impact and local attack vectors, related to a "Temporary file vulnerability," aka Bug ID 6653462...
Design/Logic Flaw
Unspecified vulnerability in lpadmin in Sun Solaris 10 and OpenSolaris snv61 through snv106 allows local users to cause a denial of service via unspecified vectors, related to enumeration of "wrong printers," aka a "Temporary file vulnerability."...