4526 matches found
CVE-2007-5350
Unspecified vulnerability in the Windows Advanced Local Procedure Call ALPC in the kernel in Microsoft Windows Vista allows local users to gain privileges via unspecified vectors involving "legacy reply paths."...
Unfixed XSS vulnerability at www.legacyofkain.net
Security researcher zuppergazi, has submitted on 08/03/2007 a cross-site-scripting XSS vulnerability affecting www.legacyofkain.net, which at the time of submission ranked 2722529 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 08/03/2007. It i...
EEYE: Microsoft Publisher 2007 Arbitrary Pointer Dereference
Microsoft Publisher 2007 Arbitrary Pointer Dereference Release Date: July 10, 2007 Date Reported: February 16, 2007 Severity: High Remote Code Execution Vendor: Microsoft Vendor Software Affected: Microsoft Office 2007 Small Business Microsoft Office 2007 Professional Microsoft Office 2007 Ultima...
Mozilla Firefox Bootstrapped Addon Social Engineering Code Execution
Mozilla Firefox before version 41 allowed users to install unsigned browser extensions from arbitrary web servers. This module dynamically creates an unsigned .xpi addon file. The resulting bootstrapped Firefox addon is presented to the victim via a web page. The victim's Firefox browser will pop...
CVE-2006-6834
Multiple unspecified vulnerabilities in Joomla! before 1.0.12 have unknown impact and attack vectors related to 1 "unneeded legacy functions" and 2 "Several low level security fixes."...
CVE-2006-6834
CVE-2006-6834 describes multiple vulnerabilities in Joomla! before 1.0.12. Connected records confirm a cross-site scripting issue in Joomla! (per JVNDB-2006-000852) and note multiple remote vulnerabilities with unspecified impact in older Joomla! releases. The OpenVAS and VuXML entries reiterate ...
CVE-2006-6834
Multiple unspecified vulnerabilities in Joomla! before 1.0.12 have unknown impact and attack vectors related to 1 "unneeded legacy functions" and 2 "Several low level security fixes."...
security flaw
scanf.c in PHP 5.1.4 and earlier, and 4.4.3 and earlier, allows context-dependent attackers to execute arbitrary code via a sscanf PHP function call that performs argument swapping, which increments an index past the end of an array and triggers a buffer over-read...
security flaw
Multiple cross-site scripting XSS vulnerabilities in PHP 4.4.1 and 5.1.1, when displayerrors and htmlerrors are on, allow remote attackers to inject arbitrary web script or HTML via inputs to PHP applications that are not filtered when they are included in the resulting error message...
Invision Power Board 2.1 < 2.1.6 - SQL Injection (1)
!/usr/bin/perl Invision Power Board v2.1 "r57ipb216gui" ; $mw-geometry '420x550' ; $mw-resizable0,0; $mw-Label-text = '!', -font = 'Webdings 22'-pack; $mw-Label-text = 'Invision Power Board 2.1. 'Verdana 7 bold',-foreground='red'-pack; $mw-Label-text = ''-pack; $fleft=$mw-Frame-pack -side = 'left...
[SA19578] MAXdev MD-Pro "topicid" SQL Injection Vulnerability
TITLE: MAXdev MD-Pro "topicid" SQL Injection Vulnerability SECUNIA ADVISORY ID: SA19578 VERIFY ADVISORY: http://secunia.com/advisories/19578/ CRITICAL: Moderately critical IMPACT: Manipulation of data, Exposure of system information WHERE: From remote SOFTWARE: MAXdev MD-Pro 1.x...
PT-2006-2671 · Maxdev · Maxdev Md-Pro
Name of the Vulnerable Software and Affected Versions: MAXdev MDPro versions prior to 1.076 Description: The issue allows remote attackers to obtain the full path of the server via a direct request to "includes/legacy.php". Recommendations: For versions prior to 1.076, consider restricting access...
Multiple Vendor BIOS - Keyboard Buffer Password Persistence (2)
Multiple Vendor BIOS - Keyboard Buffer Password Persistence 2 // source: https://www.securityfocus.com/bid/15751/info Multiple vendors fail to clear the BIOS Basic Input-Output System keyboard buffer after reading the preboot authentication password during the system startup process. Depending on...
Multiple Vendor BIOS - Keyboard Buffer Password Persistence (1)
Multiple Vendor BIOS - Keyboard Buffer Password Persistence 1 source: https://www.securityfocus.com/bid/15751/info Multiple vendors fail to clear the BIOS Basic Input-Output System keyboard buffer after reading the preboot authentication password during the system startup process. Depending on th...
Multiple Vendor BIOS - Keyboard Buffer Password Persistence (2)
// source: https://www.securityfocus.com/bid/15751/info Multiple vendors fail to clear the BIOS Basic Input-Output System keyboard buffer after reading the preboot authentication password during the system startup process. Depending on the operating system running on affected computers, the memor...
Multiple Vendor BIOS - Keyboard Buffer Password Persistence (1)
source: https://www.securityfocus.com/bid/15751/info Multiple vendors fail to clear the BIOS Basic Input-Output System keyboard buffer after reading the preboot authentication password during the system startup process. Depending on the operating system running on affected computers, the memory...
CVE-2005-1721
CVE-2005-1721 : The vulnerability is a buffer overflow in the legacy client support for AFP Server for Mac OS X 10.4.1 that allows an attacker to execute arbitrary code. The provided sources describe the affected component and the basic impact but do not specify affected product versions beyond 1...
NetSec Security Advisory: Multiple Vulnerabilities Resulting From Use Of Apple OSX HFS+
------------------------ NetSec Security Advisory ------------------------ VULNERABILITY DETAILS Name: Multiple Vulnerabilities Resulting From Use Of Apple OSX HFS+ Impact: HIGH Platform: Apple OS X Darwin = 10.2 Method: Possible unauthorized access to file system data Identifier: 07012005-01...
PT-2004-3237 · Apache · Apache Http Server
Name of the Vulnerable Software and Affected Versions: Apache HTTP Server versions 2.0.47 and earlier Description: The issue allows local users to bypass .htaccess file restrictions, as specified in httpd.conf with directives such as Deny From All, by using an ErrorDocument directive. It is noted...
security flaw
Buffer overflow in LHA 1.14 and earlier allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via unknown vectors related to "command line processing," a different vulnerability than CVE-2004-0771. NOTE: this issue may be REJECTED if there are not any case...