9525 matches found
CVE-2006-1385: Undefined Security Weakness
Stack-based buffer overflow in the parseTaggedData function in WavePacket.mm in KisMAC R54 through R73p allows remote attackers to execute arbitrary code via multiple SSIDs in a Cisco vendor tag in a 802.11 management frame...
CVE-2006-0188
webmail.php in SquirrelMail 1.4.0 to 1.4.5 allows remote attackers to inject arbitrary web pages into the right frame via a URL in the rightframe parameter. NOTE: this has been called a cross-site scripting XSS issue, but it is different than what is normally identified as XSS...
Design/Logic Flaw
WmRoot/adapter-index.dsp in SAP Business Connector Core Fix 7 and earlier allows remote attackers to conduct spoofing phishing attacks via an absolute URL in the url parameter, which loads the URL inside a frame...
CVE-2006-0731
WmRoot/adapter-index.dsp in SAP Business Connector Core Fix 7 and earlier allows remote attackers to conduct spoofing phishing attacks via an absolute URL in the url parameter, which loads the URL inside a frame...
SoftiaCom WMailserver 1.0 SMTP Remote Buffer Overflow Expl (meta)
Exploit for unknown platform in category remote exploits ==================================================================== SoftiaCom WMailserver 1.0 SMTP Remote Buffer Overflow Exploit meta ==================================================================== This file is part of the Metasploit...
SoftiaCom WMailserver 1.0 SMTP Remote Buffer Overflow Exploit (meta)
No description provided by source. This file is part of the Metasploit Framework and may be redistributed according to the licenses defined in the Authors field below. In the case of an unknown or missing license, this file defaults to the same license as the core Framework dual GPLv2 and Artisti...
SoftiaCom wMailServer 1.0 - SMTP Remote Buffer Overflow (Metasploit)
SoftiaCom wMailServer 1.0 - SMTP Remote Buffer Overflow Metasploit This file is part of the Metasploit Framework and may be redistributed according to the licenses defined in the Authors field below. In the case of an unknown or missing license, this file defaults to the same license as the core...
SoftiaCom wMailServer 1.0 - SMTP Remote Buffer Overflow (Metasploit)
This file is part of the Metasploit Framework and may be redistributed according to the licenses defined in the Authors field below. In the case of an unknown or missing license, this file defaults to the same license as the core Framework dual GPLv2 and Artistic. The latest version of the...
Ubuntu 4.10 / 5.04 : mozilla vulnerabilities (USN-155-1)
Secunia.com reported that one of the recent security patches in Firefox reintroduced the frame injection patch that was originally known as CAN-2004-0718. This allowed a malicious website to spoof the contents of other websites. CAN-2005-1937 It was discovered that a malicious website could injec...
Ubuntu 5.04 : mozilla-firefox vulnerabilities (USN-149-1)
Secunia.com reported that one of the recent security patches in Firefox reintroduced the frame injection patch that was originally known as CAN-2004-0718. This allowed a malicious website to spoof the contents of other websites. CAN-2005-1937 In several places the browser user interface did not...
security flaw
Multiple heap-based buffer overflows in the 1 DCTStream::readProgressiveSOF and 2 DCTStream::readBaselineSOF functions in the DCT stream parsing code Stream.cc in xpdf 3.01 and earlier, as used in products such as a Poppler, b teTeX, c KDE kpdf, d pdftohtml, e KOffice KWord, f CUPS, and g...
Macromedia Flash Player fails to properly validate the frame type identifier read from a "SWF" file
Overview A buffer overflow vulnerability in some versions of the Macromedia Flash Player may allow a remote attacker to execute code on a vulnerable system. Description The Macromedia Flash Player is a player for the Flash media format and enables frame-based animations with sound to be viewed...
security flaw
Multiple vulnerabilities in Ethereal 0.10.12 and earlier allow remote attackers to cause a denial of service memory consumption via unspecified vectors in the 1 ISAKMP, 2 FC-FCS, 3 RSVP, and 4 ISIS LSP dissector...
Ethernet frame padding information leakage
Incorrect memory managment causes ethernet fame padding bytes may contain sensitive information...
DTSA-7-1 mozilla - frame injection spoofing
Bulletin has no description...
CVE-2005-2627
Multiple integer underflows in Kismet before 2005-08-R1 allow remote attackers to execute arbitrary code via 1 kernel headers in a pcap file or 2 data frame dissection, which leads to heap-based buffer overflows...
CVE-2005-2627
Multiple integer underflows in Kismet before 2005-08-R1 allow remote attackers to execute arbitrary code via 1 kernel headers in a pcap file or 2 data frame dissection, which leads to heap-based buffer overflows...
CVE-2005-2627
Removed by vendor...
CVE-2005-2627: Undefined Security Weakness
Multiple integer underflows in Kismet before 2005-08-R1 allow remote attackers to execute arbitrary code via 1 kernel headers in a pcap file or 2 data frame dissection, which leads to heap-based buffer overflows...
Debian DSA-775-1 : mozilla-firefox - frame injection spoofing
A vulnerability has been discovered in Mozilla and Mozilla Firefox that allows remote attackers to inject arbitrary JavaScript from one page into the frameset of another site. Thunderbird is not affected by this and Galeon will be automatically fixed as it uses Mozilla components. %NASLMINLEVEL...