2024 matches found
DEBIAN-CVE-2006-6107
Unspecified vulnerability in the matchruleequal function in bus/signals.c in D-Bus before 1.0.2 allows local applications to remove match rules for other applications and cause a denial of service lost process messages...
DEBIAN-CVE-2006-5878
Cross-site request forgery CSRF vulnerability in Edgewall Trac 0.10 and earlier allows remote attackers to perform unauthorized actions as other users via unknown vectors...
How to access blocked sites-bug warning-the black bar safety net
The following methods can also access other blocked website,, so please privately transmitted, is after all public, the more the more dangerous, after providing these services the site also been blocked, the more harm than good. 1, recommended method: use the P2P CDN network access Coral is a P2P...
CVE-2006-3227
Interpretation conflict between Internet Explorer and other web browsers such as Mozilla, Opera, and Firefox might allow remote attackers to modify the visual presentation of web pages and possibly bypass protection mechanisms such as content filters via ASCII characters with the 8th bit set, whi...
W-Agora 4.2 - BBCode Script Injection
source: https://www.securityfocus.com/bid/17751/info W-Agora is prone to a script-injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before including it in dynamically generated content. W-Agora can be configured to send all user...
security flaw
crontab in Vixie cron 4.1, when running with the -e option, allows local users to read the cron files of other users by changing the file being edited to a symlink. NOTE: there is insufficient information to know whether this is a duplicate of CVE-2001-0235...
CVE-2006-0698: Undefined Security Weakness
Unspecified vulnerabilities in Zen Cart before 1.2.7 allow remote attackers to cause unknown impact via unspecified vectors related to "other attempted exploits" other than SQL injection...
CVE-2006-0197
The XClientMessageEvent struct used in certain components of X.Org 6.8.2 and earlier, possibly including 1 the X server and 2 Xlib, uses a "long" specifier for elements of the l array, which results in inconsistent sizes in the struct on 32-bit versus 64-bit platforms, and might allow attackers t...
CVE-2005-3597
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2005-3573. Reason: This candidate is a duplicate of CVE-2005-3573. A CNA error by MITRE introduced the duplicate. Notes: All CVE users should reference CVE-2005-3573 instead of this candidate. All references and descriptions in th...
CVE-2005-3649
jumpto.php in Moodle 1.5.2 allows remote attackers to redirect users to other sites via the jump parameter...
CVE-2002-1711: Undefined Security Weakness
BasiliX 1.1.0 saves attachments in a world readable /tmp/BasiliX directory, which allows local users to read other users' attachments...
CVE-2005-1458: Undefined Security Weakness
Multiple unknown "other problems" in the KINK dissector in Ethereal before 0.10.11 have unknown impact and attack vectors...
CVE-2005-1389
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2005-0175. Reason: This candidate is a duplicate of CVE-2005-0175. Notes: All CVE users should reference CVE-2005-0175 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...
CVE-2005-1430
Mac OS X 10.3.x and earlier uses insecure permissions for a pseudo terminal tty pty that is managed by a non-setuid program, which allows local users to read or modify sessions of other users...
security flaw
Buffer overflow in the LDAP component for Netscape Directory Server NDS 3.6 on HP-UX and other operating systems allows remote attackers to execute arbitrary code...
DEBIAN-CVE-2003-0188
lv reads a .lv file from the current working directory, which allows local users to execute arbitrary commands as other lv users by placing malicious .lv files into other directories...
SuSE Security Announcement: lprold
-----BEGIN PGP SIGNED MESSAGE----- SuSE Security Announcement Package: lprold Announcement-ID: SuSE-SA:2001:033 Date: Wed Oct 10 11:03:12 GMT 2001 Affected SuSE versions: 6.1, 6.2, 6.3, 6.4, 7.0, 7.1, 7.2 Vulnerability Type: bufferoverflow/local privilege escalation Severity 1-10: 6 SuSE default...
CVE-1999-0825
The default permissions for UnixWare /var/mail allow local users to read and modify other users' mail...