386 matches found
Moderate: Red Hat Security Advisory: Red Hat Enterprise MRG Messaging security and bug fix update 1.2.2
Updated Red Hat Enterprise MRG Messaging packages that fix two security issues and several bugs are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System CVSS base scores, whic...
CVE-2010-1618
Cross-site scripting XSS vulnerability in the phpCAS client library before 1.1.0, as used in Moodle 1.8.x before 1.8.12 and 1.9.x before 1.9.8, allows remote attackers to inject arbitrary web script or HTML via a crafted URL, which is not properly handled in an error message...
CVE-2009-3457
Cisco ACE XML Gateway AXG and ACE Web Application Firewall WAF before 6.1 allow remote attackers to obtain sensitive information via an HTTP request that lacks a handler, as demonstrated by 1 an OPTIONS request or 2 a crafted GET request, leading to a Message-handling Errors message containing a...
Information disclosure
Cisco ACE XML Gateway AXG and ACE Web Application Firewall WAF before 6.1 allow remote attackers to obtain sensitive information via an HTTP request that lacks a handler, as demonstrated by 1 an OPTIONS request or 2 a crafted GET request, leading to a Message-handling Errors message containing a...
CVE-2009-3457
Cisco ACE XML Gateway AXG and ACE Web Application Firewall WAF before 6.1 allow remote attackers to obtain sensitive information via an HTTP request that lacks a handler, as demonstrated by 1 an OPTIONS request or 2 a crafted GET request, leading to a Message-handling Errors message containing a...
WeeChat: Denial of service
Background Wee Enhanced Environment for Chat WeeChat is a light and extensible console IRC client. Description Sebastien Helleu reported an array out-of-bounds error in the colored message handling. Impact A remote attacker could send a specially crafted PRIVMSG command, possibly leading to a...
Kaspersky Internet Security Suite Malformed MIME Message DoS Vulnerability
This host has Kaspersky Internet Security Suite installed and is prone to denial of service vulnerability. OpenVAS Vulnerability Test $Id: gbkasperskyinternetsecsuitedosvuln.nasl 5370 2017-02-20 15:24:26Z cfi $ Kaspersky Internet Security Suite Malformed MIME Message DoS Vulnerability Authors:...
qt security update
CentOS Errata and Security Advisory CESA-2007:0721 Updated qt packages that correct an integer overflow flaw are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Qt is a software toolkit that simplifies the task of writing and...
CVE-2007-1251
Format string vulnerability in the newwarning function in ntserv/warning.c for Netrek Vanilla Server 2.12.0, when EVENTLOG is enabled, allows remote attackers to cause a denial of service crash or execute arbitrary code via format string specifiers in the message handling...
Kaillera 0.86 - Message Buffer Overflow
// source: https://www.securityfocus.com/bid/18871/info Kaillera is prone to a buffer-overflow vulnerability because it fails to properly bounds-check messages before copying them to an insufficiently sized memory buffer. Successful exploits can allow remote attackers to execute arbitrary machine...
error_log() Safe Mode Bypass PHP 5.1.4 and 4.4.2
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 errorlog Safe Mode Bypass PHP 5.1.4 and 4.4.2 Author: Maksymilian Arciemowicz cXIb8O3 Date: - -Written: 10.6.2006 - -Public: 26.06.2006 from SECURITYREASON.COM CVE-2006-3011 - --- 0.Description --- PHP is an HTML-embedded scripting language. Much of i...
Sendmail < 8.13.7 Multi-part MIME Message Handling DoS
Binary data 3653.prm...
Game-Panel <= 2.1.6 XSS
ORIGIONAL SOURCE: http://notlegal.ws/gamepanel.txt summary software: Game-Panel vendors website: http://game-panel.com versions: = 2.6.1 class: remote status: unpatched exploit: available solution: not available discovered by: sycko risk level: medium description game-panel uses a global variable...
eStara SoftPhone 3.0.1 - SIP SDP Message Handling Format String Denial of Service
eStara SoftPhone 3.0.1 - SIP SDP Message Handling Format String Denial of Service source: https://www.securityfocus.com/bid/16629/info eStara Smartphone is prone to multiple denial-of-service vulnerabilities when processing malformed VOIP headers. Successful exploitation will cause the device to...
eStara SoftPhone 3.0.1 - SIP SDP Message Handling Format String Denial of Service
source: https://www.securityfocus.com/bid/16629/info eStara Smartphone is prone to multiple denial-of-service vulnerabilities when processing malformed VOIP headers. Successful exploitation will cause the device to crash. INVITE sip:[email protected] SIP/2.0 Via: SIP/2.0/UDP...
CVE-2004-0045
Buffer overflow in the ARTpost function in art.c in the control message handling code for INN 2.4.0 may allow remote attackers to execute arbitrary code...
AOL Instant Messenger aim:goaway URI Handler goaway Function Away Message Handling Remote Overflow
Binary data 1274.prm...
Pegasus Mail <= 3.11 Binary Message Handling Remote Overflow
Binary data 1301.prm...
CVE-2004-0045
Buffer overflow in the ARTpost function in art.c in the control message handling code for INN 2.4.0 may allow remote attackers to execute arbitrary code...
[SECURITY] INN: Buffer overflow in control message handling
A buffer overflow has been discovered in a portion of the control message handling code introduced in INN 2.4.0. It is fairly likely that this overflow could be remotely exploited to gain access to the user innd runs as. INN 2.3.x and earlier are not affected. The INN CURRENT tree is affected. So...