287 matches found
mysql: Unspecified vulnerability allows remote authenticated users to affect availability
Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.x and 5.5.x allows remote authenticated users to affect availability via unknown vectors, a different vulnerability than CVE-2012-0112, CVE-2012-0115, CVE-2012-0119, CVE-2012-0120, and CVE-2012-0485...
Aipo vulnerable to SQL injection
Overview Aipo contains a SQL injection vulnerability. Aipo from Aimluck, Inc. is groupware including functions such as scheduler and intra-office blogging. Aipo contains a SQL injection vulnerability. Tsuyoshi Yamaguchi of Digiplate, inc. reported this vulnerability to IPA. JPCERT/CC coordinated...
PYSEC-2011-21
Cross-site scripting XSS vulnerability in feedparser.py in Universal Feed Parser aka feedparser or python-feedparser 5.x before 5.0.1 allows remote attackers to inject arbitrary web script or HTML via an unexpected URI scheme, as demonstrated by a javascript: URI...
MySQL: mysqld DoS (crash) by processing IN / CASE statements with NULL arguments (MySQL bug #54477)
Oracle MySQL 5.1 before 5.1.49 allows remote authenticated users to cause a denial of service crash via 1 IN or 2 CASE operations with NULL arguments that are explicitly specified or indirectly provided by the WITH ROLLUP modifier...
PT-2008-3851 · Red Hat · Red Hat Network Satellite Server
Name of the Vulnerable Software and Affected Versions: Red Hat Network Satellite Server versions prior to 5.1.1 Description: The issue concerns a hard-coded authentication key in the manzier.pxt file, which allows remote attackers to connect to the server. This enables them to obtain sensitive...