9426 matches found
CVE-2004-0729
PhpBB 2.0.8 allows remote attackers to gain sensitive information via an invalid 1 categoryrows parameter to index.php, 2 faq parameter to faq.php, or 3 ranksrow parameter to profile.php, which reveal the full path in an error message...
CVE-2004-2051
The Phoenix browser in eSeSIX Thintune thin clients running firmware 2.4.38 and earlier allows local users to read arbitrary files via a file:/// URL...
Solaris 9 (sparc) : 113575-11
SunOS 5.9: sendmail patch. Date this patch was last updated by Sun : Feb/05/08 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if description...
Authenticated Check : OS Name and Installed Package Enumeration
This plugin logs into the remote host using SSH, RSH, RLOGIN, Telnet, or local commands and extracts the list of installed packages. If using SSH, the scan should be configured with a valid SSH public key and possibly an SSH passphrase if the SSH public key is protected by a passphrase. TRUSTED...
CVE-2004-0178
The OSS code for the Sound Blaster sb16 driver in Linux 2.4.x before 2.4.26, when operating in 16 bit mode, does not properly handle certain sample sizes, which allows local users to cause a denial of service crash via a sample with an odd number of bytes...
CGI bugs
No description provided...
security flaw
Integer underflow in the isakmpidprint for TCPDUMP 3.8.1 and earlier allows remote attackers to cause a denial of service crash via an ISAKMP packet with an Identification payload with a length that becomes less than 8 during byte order conversion, which causes an out-of-bounds read, as...
[Full-Disclosure] (AUSCERT AA-2004.02) AUSCERT Advisory - Denial of Service Vulnerability in IEEE 802.11 Wireless Devices (fwd)
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 =========================================================================== AA-2004.02 AUSCERT Advisory Denial of Service Vulnerability in IEEE 802.11 Wireless Devices 13 May 2004 Last Revised: -- -...
[SECURITY] [DSA 502-1] New exim-tls packages fix buffer overflows
-------------------------------------------------------------------------- Debian Security Advisory DSA 502-1 [email protected] http://www.debian.org/security/ Martin Schulze May 11th, 2004 http://www.debian.org/security/faq -...
[SECURITY] [DSA 501-1] New exim packages fix buffer overflows
-------------------------------------------------------------------------- Debian Security Advisory DSA 501-1 [email protected] http://www.debian.org/security/ Martin Schulze May 7th, 2004 http://www.debian.org/security/faq -...
CGI bugs
No description provided...
CVE-2004-1994
FuseTalk 4.0 allows remote attackers to ban other users via a direct request to banning.cfm...
CVE-2004-0233
Utempter allows device names that contain .. dot dot directory traversal sequences, which allows local users to overwrite arbitrary files via a symlink attack on device names in combination with an application that trusts the utmp or wtmp files...
CVE-2003-0618
...
HP Web JetAdmin 6.5 (connectedNodes.ovpl) Remote Root Exploit
Exploit for hardware platform in category remote exploits ============================================================= HP Web JetAdmin 6.5 connectedNodes.ovpl Remote Root Exploit ============================================================= !/usr/bin/perl use IO::Socket; This is an exploit for H...
[SECURITY] [DSA 495-1] New Linux 2.4.16 packages fix local root exploit (arm)
-------------------------------------------------------------------------- Debian Security Advisory DSA 495-1 [email protected] http://www.debian.org/security/ Martin Schulze April 26th, 2004 http://www.debian.org/security/faq -...
[SECURITY] [DSA 485-1] New ssmtp packages fix format string vulnerabilities
-------------------------------------------------------------------------- Debian Security Advisory DSA 485-1 [email protected] http://www.debian.org/security/ Matt Zimmerman April 14th, 2004 http://www.debian.org/security/faq -...
TikiWiki Project 1.8 - messu-mailbox.php Multiple Cross-Site Scripting Vulnerabilities
TikiWiki Project 1.8 - messu-mailbox.php Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/10100/info Multiple vulnerabilities have been identified in various modules of the application. These vulnerabilities may allow a remote attacker to carry out various...
TikiWiki Project 1.8 - 'tiki-view_chart.php?chartId' Cross-Site Scripting
source: https://www.securityfocus.com/bid/10100/info Multiple vulnerabilities have been identified in various modules of the application. These vulnerabilities may allow a remote attacker to carry out various attacks such as path disclosure, cross-site scripting, HTML injection, SQL injection,...
