Ubisoft CoGSManager ActiveX Control 1.0.0.23 - Initialize() Method Stack Buffer Overflow

Ubisoft CoGSManager ActiveX Control 1.0.0.23 - Initialize Method Stack Buffer Overflow source: https://www.securityfocus.com/bid/48462/info Ubisoft CoGSManager ActiveX control is prone to a remote stack-based buffer-overflow vulnerability because the application fails to properly bounds check...

xAurora 10.00 - 'RSRC32.dll' DLL Loading Arbitrary Code Execution

/ source: https://www.securityfocus.com/bid/48432/info xAurora is prone to a vulnerability that lets attackers execute arbitrary code. An attacker can exploit this issue by enticing a legitimate user to use the vulnerable application to open a file from a network share location that contains a...

Wireshark 1.4.5 - bytes_repr_len() Null Pointer Dereference Denial of Service

Wireshark 1.4.5 - bytesreprlen Null Pointer Dereference Denial of Service source: https://www.securityfocus.com/bid/48389/info Wireshark is prone to a remote denial-of-service vulnerability caused by a NULL-pointer-dereference error. An attacker can exploit this issue to crash the application,...

PHP-Nuke 8.3 - 'upload.php' Arbitrary File Upload (1)

source: https://www.securityfocus.com/bid/48257/info Phpnuke is prone to an arbitrary-file-upload vulnerability because the application fails to adequately sanitize user-supplied input. An attacker can exploit this issue to upload arbitrary code and run it in the context of the webserver process...

Silex <= 1.5.4.2 XSS Vulnerability - Active Check

Silex is prone to a cross-site scripting XSS vulnerability because it fails to sufficiently sanitize user-supplied data. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Storecalc Simple Web-Server <= 1.2 Directory Traversal Vulnerability - Active Check

Simple web-server is prone to a directory traversal vulnerability because it fails to sufficiently sanitize user-supplied input. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Unbound DNS Resolver < 1.4.10 Remote DoS Vulnerability

Unbound is prone to a remote denial of service DoS vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:unbound:unbound...

allocPSA <= 1.7.4 XSS Vulnerability - Active Check

allocPSA is prone to a cross-site scripting XSS vulnerability because it fails to sufficiently sanitize user-supplied data. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Microsoft Windows Live Messenger 14 - 'dwmapi.dll' DLL Loading Arbitrary Code Execution

// source: https://www.securityfocus.com/bid/48055/info Microsoft Windows Live Messenger is prone to a vulnerability that lets attackers execute arbitrary code. An attacker can exploit this issue by enticing a legitimate user to use the vulnerable application to open a file from a network share...

Vordel Gateway 6.0.3 - Directory Traversal

Vordel Gateway 6.0.3 - Directory Traversal source: https://www.securityfocus.com/bid/47975/info Vordel Gateway is prone to a directory-traversal vulnerability because it fails to sufficiently sanitize user-supplied input. A remote attacker could exploit this vulnerability using directory-traversa...

Vordel Gateway 6.0.3 - Directory Traversal

source: https://www.securityfocus.com/bid/47975/info Vordel Gateway is prone to a directory-traversal vulnerability because it fails to sufficiently sanitize user-supplied input. A remote attacker could exploit this vulnerability using directory-traversal strings such as '../' to gain access to...

BarCodeWiz ActiveX LoadProperties Buffer Overflow

Added: 05/23/2011 CVE: CVE-2010-2932 BID: 42097 OSVDB: 66882 Background BarCodeWiz Barcode ActiveX Control is a tool for generating barcodes in Microsoft Office documents, and for Visual Basic, Visual C++, VB.NET, C, or Delphi developer looking to include barcodes in programs. Problem The...

openQRM 4.8 - source_tab Cross-Site Scripting

openQRM 4.8 - sourcetab Cross-Site Scripting source: https://www.securityfocus.com/bid/47865/info openQRM is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in the...

Mambo Component Docman 1.3.0 - Multiple SQL Injections

source: https://www.securityfocus.com/bid/47857/info The 'comdocman' component for Mambo is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could allow an attacker to compromise t...

Apache 1.42.2.x - APR apr_fnmatch() Denial of Service

Apache 1.42.2.x - APR aprfnmatch Denial of Service source: https://www.securityfocus.com/bid/47820/info Apache APR is prone to a vulnerability that may allow attackers to cause a denial-of-service condition. Apache APR versions prior to 1.4.4 are vulnerable. ?php / Apache 2.2.17 modautoindex...

showoff! digital media software 1.5.4 - Multiple Vulnerabilities

showoff! digital media software 1.5.4 - Multiple Vulnerabilities source: https://www.securityfocus.com/bid/13598/info ShowOff! Digital Media Software is affected by multiple vulnerabilities. These issues can allow an attacker to carry out directory traversal and denial of service attacks. ShowOff...

ZAPms 1.22 - nick SQL Injection

ZAPms 1.22 - nick SQL Injection source: https://www.securityfocus.com/bid/47782/info ZAPms is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the...

FestOS 2.3c - 'upload.php' Arbitrary File Upload

source: https://www.securityfocus.com/bid/47751/info FestOS is prone to an arbitrary-file-upload vulnerability because the application fails to adequately sanitize user-supplied input. An attacker can exploit this issue to upload arbitrary code and run it in the context of the webserver process...

PHPDug 2.0 - Multiple Cross-Site Scripting Vulnerabilities

PHPDug 2.0 - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/47733/info PHPDug is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary...

GoT.MY (Multiple Products) - theme_dir Cross-Site Scripting

GoT.MY Multiple Products - themedir Cross-Site Scripting source: https://www.securityfocus.com/bid/47702/info Multiple GoT.MY products are prone to a cross-site scripting vulnerability. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in...