5453 matches found
CVE-2005-2029
amaroK Web Frontend 1.3 stores the globals.inc file under the web root without a .php extension and insufficient access control, which allows remote attackers to obtain the database username and password via a direct request to the file...
GLSA-200504-27 : xine-lib: Two heap overflow vulnerabilities
The remote host is affected by the vulnerability described in GLSA-200504-27 xine-lib: Two heap overflow vulnerabilities Heap overflows have been found in the code handling RealMedia RTSP and Microsoft Media Services streams over TCP MMST. Impact : By setting up a malicious server and enticing a...
CVE-2004-0787: Undefined Security Weakness
Cross-site scripting XSS vulnerability in the web frontend in OpenCA 0.9.1-8 and earlier, and 0.9.2 RC6 and earlier, allows remote attackers to inject arbitrary web script or HTML via the form input fields...
SQL Injection in CACTI
///////////////////////////////////////////////////// //// Vulnerable Program: CACTI //// //// Version : The latest version 0.8.5a //// //// Url: http://www.raxnet.net //// //// The Bug: SQL injection to allows bypass the auth. //// //// Date: Today, August 16 off 2004 //// //// Author: Fernando...
Security fix for the ALT Linux 9 package wireshark version 0.9.16-alt1
Nov. 6, 2003 Alexander Bokovoy 0.9.16-alt1 - 0.9.16 - Fixed: + CAN-2003-0925 + CAN-2003-0926 + CAN-2003-0927 - Added: + --enable Master switch allows to build this package for ALT Linux Master 2.2 + Build GTK+ 2.x frontend instead of GTK+ 1.x - Updated: + PAM entry to follow current PAM policy in...
[SECURITY] [DSA 164-1] New cacti package fixes arbitrary code execution
-------------------------------------------------------------------------- Debian Security Advisory DSA 164-1 [email protected] http://www.debian.org/security/ Martin Schulze September 10th, 2002 http://www.debian.org/security/faq -...
DSA-164 cacti - arbitrary code execution
Bulletin has no description...
CVE-2001-0201
The Postaci frontend for PostgreSQL does not properly filter characters such as semicolons, which could allow remote attackers to execute arbitrary SQL queries via the deletecontact.php program...
CVE-2001-0201
The Postaci frontend for PostgreSQL does not properly filter characters such as semicolons, which could allow remote attackers to execute arbitrary SQL queries via the deletecontact.php program...
CVE-2001-0201: Undefined Security Weakness
The Postaci frontend for PostgreSQL does not properly filter characters such as semicolons, which could allow remote attackers to execute arbitrary SQL queries via the deletecontact.php program...
