ChaSen Buffer Overflow Vulnerability (Windows)

The host is running ChaSen Software and is prone to buffer overflow vulnerability OpenVAS Vulnerability Test $Id: gbchasenbofvulnwin.nasl 5364 2017-02-20 13:26:07Z cfi $ ChaSen Buffer Overflow Vulnerability Windows Authors: Rachana Shetty Copyright: Copyright c 2011 Greenbone Networks GmbH,...

JDK Double.parseDouble Denial-Of-Service

The Double.parseDouble method in Java Runtime Environment JRE in Oracle Java SE and Java for Business 6 Update 23 and earlier, 5.0 Update 27 and earlier, and 1.4.229 and earlier, as used in OpenJDK, Apache, JBossweb, and other products, allows remote attackers to cause a denial of service via a...

CVE-2009-4559

CVE-2009-4559 is a Cross-site Scripting (XSS) vulnerability in Drupal’s Submitted By module for the 6.x branch up to version 6.x-1.3. The issue allows remote authenticated users who have "administer content types" privileges to inject arbitrary script or HTML via the text entered in the "submitte...

FreeBSD : php -- multiple vulnerabilities (39a25a63-eb5c-11de-b650-00215c6a37bb)

PHP developers reports : This release focuses on improving the stability of the PHP 5.2.x branch with over 60 bug fixes, some of which are security related. All users of PHP 5.2 are encouraged to upgrade to this release. Security Enhancements and Fixes in PHP 5.2.12 : - Fixed a safemode bypass in...

php -- multiple vulnerabilities

PHP developers reports: This release focuses on improving the stability of the PHP 5.2.x branch with over 60 bug fixes, some of which are security related. All users of PHP 5.2 are encouraged to upgrade to this release. Security Enhancements and Fixes in PHP 5.2.12: Fixed a safemode bypass in...

Vermillion FTP Daemon PORT Command Memory Corruption

This module exploits an out-of-bounds array access in the Arcane Software Vermillion FTP server. By sending a specially crafted FTP PORT command, an attacker can corrupt stack memory and execute arbitrary code. This particular issue is caused by processing data bound by attacker controlled input...

CVE-2009-3276

CVE-2009-3276 affects Zoran/WinFormsAdvansed/RegeularDataToXML/Form1.cs in WinFormsAdvansed within NASD CORE.NET Terelik (aka corenet1). The vulnerability is a ReDoS: context-dependent attackers can cause CPU exhaustion by supplying an input string consisting of many alphabetic characters followe...

CVE-2009-0779

Buffer overflow in pppdial in IBM AIX 5.3 and 6.1 allows local users to gain privileges via a long "input string."...

Sqlhello overflow process-vulnerability warning-the black bar safety net

Two days before the use of sqlhello overflow vulnerability tools with a local area network inside a colleague made a joke, made his win2k shell So also want to play about overflow. First with Delphi write a vulnerable program. If not check the input string length, then the input string length is...

CVE-2007-0666

Ipswitch WSFTP Server 5.04 allows FTP site administrators to execute arbitrary code on the system via a long input string to the 1 iFTPAddU or 2 iFTPAddH file, or to a 3 edition module...

Denial Of Service in Vizer Web Server 1.9.1

Donato Ferrante Application: Vizer Web Server http://sourceforge.net/projects/vizerwebserver/ Version: 1.9.1 Bug: Denial Of Service Author: Donato Ferrante e-mail: [email protected] web: www.autistici.org/fdonato xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx 1...

CVE-2003-0791

The Script.prototype.freeze/thaw functionality in Mozilla 1.4 and earlier allows attackers to execute native methods by modifying the string used as input to the script.thaw JavaScript function, which is then deserialized and executed...