DEBIAN-CVE-2009-0755

The FormWidgetChoice::loadDefaults function in Poppler before 0.10.4 allows remote attackers to cause a denial of service crash via a PDF file with an invalid Form Opt entry...

CVE-2009-0755

The FormWidgetChoice::loadDefaults function in Poppler before 0.10.4 allows remote attackers to cause a denial of service crash via a PDF file with an invalid Form Opt entry...

CVE-2009-0755

The FormWidgetChoice::loadDefaults function in Poppler before 0.10.4 allows remote attackers to cause a denial of service crash via a PDF file with an invalid Form Opt entry...

CVE-2009-0755

The FormWidgetChoice::loadDefaults function in Poppler before 0.10.4 allows remote attackers to cause a denial of service crash via a PDF file with an invalid Form Opt entry...

CVE-2008-3340

Cross-site scripting XSS vulnerability in searchresult.cfm in Jobbex JobSite allows remote attackers to inject arbitrary web script or HTML via the searchFor variable possibly the opt parameter...

Cross site scripting

Cross-site scripting XSS vulnerability in searchresult.cfm in Jobbex JobSite allows remote attackers to inject arbitrary web script or HTML via the searchFor variable possibly the opt parameter...

CVE-2008-3340: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in searchresult.cfm in Jobbex JobSite allows remote attackers to inject arbitrary web script or HTML via the searchFor variable possibly the opt parameter...

CVE-2007-6683

The browser plugin in VideoLAN VLC 0.8.6d allows remote attackers to overwrite arbitrary files via 1 the :demuxdump-file option in a filename in a playlist, or 2 a EXTVLCOPT statement in an MP3 file, possibly an argument injection vulnerability...

MailMachine Pro 2.2.4 Remote SQL Injection Vulnerability

No description provided by source. --------------------------------------------------------------- / | |\ \ / | / |/ | | |/ \ | | / \ \ | \ \ | | | \ | |/ \ | | // | || | ||| /| / /\ | |||| /| / / &nb...

MailMachine Pro 2.2.4 - SQL Injection

MailMachine Pro 2.2.4 - SQL Injection --------------------------------------------------------------- / | |\ \ / | / |/ | | |/ \ | | | |||| /| / / --------------------------------------------------------------- Http://www.inj3ct-it.org Staffatinj3ct-itdotorg...

MailMachine Pro 2.2.4 - SQL Injection

--------------------------------------------------------------- / | |\ \ / | / |/ | | |/ \ | | | |||| /| / / --------------------------------------------------------------- Http://www.inj3ct-it.org Staffatinj3ct-itdotorg --------------------------------------------------------------- Remote Sql...

CVE-2003-1353

CVE-2003-1353 concerns multiple cross-site scripting (XSS) vulnerabilities in Outreach Project Tool (OPT) 0.946b, allowing remote attackers to inject arbitrary script/HTML via the news field.

CVE-2003-1353: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Outreach Project Tool OPT 0.946b allow remote attackers to inject arbitrary web script or HTML, as demonstrated using the news field...

JVN#23891849 ADPLAN cross-site scripting vulnerability

ADPLAN Version 3, web access measurement software provided by Opt, Inc., contains a cross-site scripting vulnerability in the SEO search engine optimization module. A website that employs ADPLAN Version 3 service generates a web page using the HTTP header information sent from a client web browse...

CVE-2006-4239

CVE-2006-4239 describes a PHP remote file inclusion vulnerability in the Outreach Project Tool (OPT), affecting Max 1.2.6 and earlier. The issue allows a remote attacker to execute arbitrary PHP code by supplying a URL in the CRM_inc parameter. The cited sources (NVD/NVD description) confirm the ...

CVE-2006-4239: Undefined Security Weakness

PHP remote file inclusion vulnerability in include/urights.php in Outreach Project Tool OPT Max 1.2.6 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the CRMinc parameter...

CVE-2006-0837: Undefined Security Weakness

IBM Tivoli Micromuse Netcool/NeuSecure 3.0.236 has world-readable permissions for 1 /etc/neusecure.conf, 2 /opt/NeuSecure/etc/cms-3.0.236.buildconf, and 3 /opt/NeuSecure/bin/nsarchiver.log, which allows local users to read sensitive information such as passwords. NOTE: IBM has privately confirmed...

CVE-2006-0838: Undefined Security Weakness

IBM Tivoli Micromuse Netcool/NeuSecure 3.0.236 stores cleartext passwords in the 1 CMSDBPASS, 2 CMSMDBPASS, and 3 RPTDBPASS fields in /etc/neusecure.conf, and in 4 /opt/NeuSecure/bin/nsarchiver.log, which allows local users to gain privileges. NOTE: IBM has privately confirmed to CVE that a fix i...

Sun Solaris PC Netlink symbolic links problem

"/opt/lanman/sbin/slsmgr" and "/etc/init.d/slsadmin" symbolic links problem...

CVE-2004-2368

The CVE-2004-2368 issue affects Opt-X 0.7.2, where header.php is vulnerable to a PHP remote file inclusion via the systempath parameter, enabling remote code execution. The documented vulnerable component is header.php in Opt-X 0.7.2, with the root cause described as improper handling of the syst...