4288 matches found
CVE-2006-0217: Undefined Security Weakness
Multiple cross-site scripting XSS vulnerabilities in Ultimate Auction 3.67 allow remote attackers to inject arbitrary web script or HTML via the 1 item parameter in item.pl and 2 category parameter in itemlist.pl, which reflects the XSS in an error message. NOTE: the affected version might be wro...
CVE-2005-4404: Undefined Security Weakness
SQL injection vulnerability in default.asp in Media2 CMS Shop 18.x allows remote attackers to execute arbitrary SQL commands via the item parameter. NOTE: the provenance of this issue is unknown; the details were obtained solely from third party sources...
MuOnline Loopholes Web Server - 'pkok.asp' SQL Injection
milw0rm.com 2005-10-15...
security flaw
Format string vulnerability in the protoitemsettext function in Ethereal 0.9.4 through 0.10.11, as used in multiple dissectors, allows remote attackers to write to arbitrary memory locations and gain privileges via a crafted AFP packet...
CVE-2005-1631
booby.php in Booby 1.0.0 and earlier allows remote attackers to view private bookmarks by guessing item IDs...
CVE-2005-1631
booby.php in Booby 1.0.0 and earlier allows remote attackers to view private bookmarks by guessing item IDs...
CVE-2005-1631: Undefined Security Weakness
booby.php in Booby 1.0.0 and earlier allows remote attackers to view private bookmarks by guessing item IDs...
CVE-2005-1502
Cross-site scripting XSS vulnerability in MidiCart PHP Shopping Cart allows remote attackers to inject arbitrary web script or HTML via the 1 searchstring parameter to searchlist.php or the 2 secondgroup or 3 maingroup parameters to itemlist.php...
CVE-2005-1460
Multiple unknown dissectors in Ethereal before 0.10.11 allow remote attackers to cause a denial of service assert error via an invalid protocol tree item length...
CVE-2005-1460
Multiple unknown dissectors in Ethereal before 0.10.11 allow remote attackers to cause a denial of service assert error via an invalid protocol tree item length...
PT-2005-2456 · Ethereal +1 · Ethereal +1
Name of the Vulnerable Software and Affected Versions: Ethereal versions prior to 0.10.11 Description: The issue allows remote attackers to cause a denial of service via an invalid protocol tree item length, resulting in an assert error. This is due to multiple unknown dissectors in the affected...
CVE-2005-1460: Undefined Security Weakness
Multiple unknown dissectors in Ethereal before 0.10.11 allow remote attackers to cause a denial of service assert error via an invalid protocol tree item length...
CVE-2005-1364
Multiple SQL injection vulnerabilities in MetaBid Auctions allow remote attackers to execute arbitrary SQL commands via the 1 username or 2 password fields in logIn.asp, or 3 intAuctionID parameter to item.asp...
Solaris 9 (x86) : 114435-16
SunOS 5.9x86: IKE patch. Date this patch was last updated by Sun : Aug/09/10 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if ! definedfunc"bnrandom"...
CVE-2003-0495: Undefined Security Weakness
Cross-site scripting XSS vulnerability in LedNews 0.7 allows remote attackers to insert arbitrary web script via a news item...
CVE-2002-0823: Undefined Security Weakness
Buffer overflow in Winhlp32.exe allows remote attackers to execute arbitrary code via an HTML document that calls the HTML Help ActiveX control HHCtrl.ocx with a long pathname in the Item parameter...
SHGetPathFromIDList.txt
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Windows Api SHGetPathFromIDList Buffer Overflow To all those people who sent email to us asking for more information about the SHGetPathFromIDList Windows Api overflow. Here is a more specific description about the problem. All Structure lengths, or...
MS:633A7190-4F6D-4955-A0E4-15C126448AF1
...