289 matches found
OpenJDK: getDeclaringClass() information leak (Libraries, 8014349)
Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect confidentiality via unknown vectors related to Libraries...
mysql: Unspecified vulnerability allows remote authenticated users to affect availability
Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.0.x and 5.1.x allows remote authenticated users to affect availability via unknown vectors, a different vulnerability than CVE-2012-0087 and CVE-2012-0101...
DEBIAN-CVE-2009-5065
Cross-site scripting XSS vulnerability in feedparser.py in Universal Feed Parser aka feedparser or python-feedparser before 5.0 allows remote attackers to inject arbitrary web script or HTML via vectors involving nested CDATA stanzas...
PYSEC-2011-19
feedparser.py in Universal Feed Parser aka feedparser or python-feedparser before 5.0.1 allows remote attackers to cause a denial of service application crash via a malformed DOCTYPE declaration...
PT-2009-4041 · Microsoft · Internet Explorer
Name of the Vulnerable Software and Affected Versions: Microsoft Internet Explorer versions 5.01 SP4, 6, 6 SP1, and 7 Description: The issue allows remote attackers to execute arbitrary code via a crafted data stream header that triggers memory corruption. Recommendations: For Microsoft Internet...
OpenJDK: Type1 font processing buffer overflow vulnerability
Integer signedness error in Java SE Development Kit JDK and Java Runtime Environment JRE 5.0 Update 17 and earlier, and 6 Update 12 and earlier, allows remote attackers to access files or execute arbitrary code via crafted glyph descriptions in a Type1 font, which bypasses a signed comparison and...
security flaw
SQL injection vulnerability in MySQL 4.1.x before 4.1.20 and 5.0.x before 5.0.22 allows context-dependent attackers to execute arbitrary SQL commands via crafted multibyte encodings in character sets such as SJIS, BIG5, and GBK, which are not properly handled when the mysqlrealescape function is...
PT-2002-2461 · Alt N Technologies · Mdaemon
Name of the Vulnerable Software and Affected Versions: Alt-N Technologies Mdaemon versions 5.0 through 5.0.6 Description: The issue concerns the use of a weak encryption algorithm to store user passwords, allowing local users to crack passwords. Recommendations: For versions 5.0 through 5.0.6,...
