2126 matches found
CVE-2007-0751
A cleanup script in crontabs in Apple Mac OS X 10.3.9 and 10.4.9 might delete filesystems that have been mounted in /tmp, which might allow local users to cause a denial of service, related to the find command...
Command injection
A cleanup script in crontabs in Apple Mac OS X 10.3.9 and 10.4.9 might delete filesystems that have been mounted in /tmp, which might allow local users to cause a denial of service, related to the find command...
CVE-2007-0751
The CVE-2007-0751 issue affects Apple Mac OS X 10.3.9 and 10.4.9 where a cleanup script in crontabs could delete mounted filesystems in /tmp, potentially causing local denial of service. The root cause is related to the find/cron cleanup logic as described in the vulnerability entry. Practical im...
CVE-2007-0751
A cleanup script in crontabs in Apple Mac OS X 10.3.9 and 10.4.9 might delete filesystems that have been mounted in /tmp, which might allow local users to cause a denial of service, related to the find command...
CVE-2007-0751: Undefined Security Weakness
A cleanup script in crontabs in Apple Mac OS X 10.3.9 and 10.4.9 might delete filesystems that have been mounted in /tmp, which might allow local users to cause a denial of service, related to the find command...
PHP 5.2.1 - 'hash_update_file()' Freed Resource Usage
?php //////////////////////////////////////////////////////////////////////// // // // | || | | | | | | | || || \ // // | |/ || '|/ |/ -| ' \ / -/ |||| /| || / // // ||||,||| ,|||||||,| || |||||| // // // // Proof of concept code from the Hardened-PHP Project // // C Copyright 2007 Stefan...
iDefense Security Advisory 03.15.07: Horde Project Cleanup Script Arbitrary File Deletion Vulnerability
Horde Project Cleanup Script Arbitrary File Deletion Vulnerability iDefense Security Advisory 03.15.07 http://labs.idefense.com/intelligence/vulnerabilities/ Mar 15, 2007 I. BACKGROUND The Horde Project provides a PHP-based framework, as well as applications for web-based group collaboration. IMP...
PHP 4 Userland ZVAL Reference Counter Overflow Exploit PoC
No description provided by source. ?php //////////////////////////////////////////////////////////////////////// // // // | || | | | | | | | || || // // | |/ || '|/ |/ -| ' / -/ |||| /| || / //...
Design/Logic Flaw
The Find feature in Palm OS Treo smart phones operates despite the system password lock, which allows attackers with physical access to obtain sensitive information memory contents by doing 1 text searches or 2 paste operations after pressing certain keyboard shortcut keys...
CVE-2007-0859: Undefined Security Weakness
The Find feature in Palm OS Treo smart phones operates despite the system password lock, which allows attackers with physical access to obtain sensitive information memory contents by doing 1 text searches or 2 paste operations after pressing certain keyboard shortcut keys...
CVE-2007-0859
The CVE-2007-0859 issue affects Palm OS Treo smartphones. The Find feature remains accessible even when the system password is locked, enabling text searches and pasting data from the clipboard via keyboard shortcuts on the Emergency Call or Call In Progress screens. Root cause is a design flaw i...
PalmOS Treo smartphones protection bypass
Find feature allows access to locked device...
security flaw
Race condition in the findgetblockslow function in the ISO9660 filesystem in Linux 2.6.18 and possibly other versions allows local users to cause a denial of service infinite loop by mounting a crafted ISO9660 filesystem containing malformed data structures...
Derdirigent.txt
ToXiC Der dirigent: Remote File Inclusion by ToXiC CreW ToXic Security Italian CreW BuG FounD by Drago84 Application Affect: Derdirigent Source Code: http://www.der-dirigent.de/downloads/derdirigentv1.0.zip Page: insertline.php insertpage.php find.php fullscreen.php changecase.php insertlink.php...
CVE-2006-4940
login/forgotpassword.php in Moodle before 1.6.2 allows remote attackers to obtain sensitive information e-mail addresses and Moodle account names via a find action...
CVE-2006-4940
login/forgotpassword.php in Moodle before 1.6.2 allows remote attackers to obtain sensitive information e-mail addresses and Moodle account names via a find action...
Privilege escalation using addSelectionListener — Mozilla
Web content could access the nsISelectionPrivate interface of the Selection object and use it to add a SelectionListener. The listener would be called when the user did a "Find" on the page or a "select all", and as intended this shouldn't cause any problems. But as with escaping the PAC sandbox ...
CVE-2006-2279: Undefined Security Weakness
Multiple SQL injection vulnerabilities in SaphpLesson 3.0 allow remote attackers to execute arbitrary SQL commands via 1 the Find parameter in a search.php, and the 2 LID and 3 Rate parameters in b misc.php...
Cross site scripting
Cross-site scripting XSS vulnerability in anyboard.cgi in Netbula Anyboard 9.9 and earlier allows remote attackers to inject arbitrary web script or HTML via the tK parameter in a find command...
CVE-2006-0247: Undefined Security Weakness
Cross-site scripting XSS vulnerability in anyboard.cgi in Netbula Anyboard 9.9 and earlier allows remote attackers to inject arbitrary web script or HTML via the tK parameter in a find command...