PT-2008-5548 · Microsoft · Windows Server 2008 +3

Name of the Vulnerable Software and Affected Versions: Microsoft Windows versions prior to the fixed version Description: A remote code execution issue exists due to improper memory handling during the saving of a search file. This allows attackers to execute arbitrary code via a crafted...

Sun Java Web Start Remote Command Execution Vulnerability (Linux)

This host is running Sun Java Web Start and is prone to Remote Command Execution Vulnerability. OpenVAS Vulnerability Test $Id: gbsunjavawscodeexecvulnlin.nasl 7174 2017-09-18 11:48:08Z asteins $ Sun Java Web Start Remote Command Execution Vulnerability Linux Authors: Veerendra GG Copyright:...

Secunia Research: Trend Micro OfficeScan CGI Parsing Buffer Overflows

====================================================================== Secunia Research 22/10/2008 - Trend Micro OfficeScan CGI Parsing Buffer Overflows - ====================================================================== Table of Contents Affected...

PT-2008-4912 · Jasper +1 · Jasper +1

Name of the Vulnerable Software and Affected Versions: JasPer version 1.900.1 Description: A race condition exists in the jas stream tmpfile function, allowing local users to cause a denial of service by creating a specific temporary file, which causes the program to exit. Recommendations: For...

PT-2008-5050 · Havp · Http Antivirus Proxy

Name of the Vulnerable Software and Affected Versions: HTTP Antivirus Proxy HAVP version 0.88 Description: The issue allows remote attackers to cause a denial of service by connecting to a non-responsive server, triggering an infinite loop due to an uninitialized variable. This occurs in the...

Ruby 1.9 - regex engine Remote Socket Memory Leak

Ruby 1.9 - regex engine Remote Socket Memory Leak ------------------------------------------------------- Language : Ruby Web Site: www.ruby-lang.org Platform: All Bug: Remote Socket Memory Leak Products Affected: 1.8 series: - 1.8.5 and all prior versions - 1.8.6-p286 and all prior versions -...

Ruby 1.9 - regex engine Remote Socket Memory Leak

------------------------------------------------------- Language : Ruby Web Site: www.ruby-lang.org Platform: All Bug: Remote Socket Memory Leak Products Affected: 1.8 series: - 1.8.5 and all prior versions - 1.8.6-p286 and all prior versions - 1.8.7-p71 and all prior versions 1.9 series - r18423...

Camera Life 2.6.2 (id) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ========================================================= Camera Life 2.6.2 id Remote SQL Injection Vulnerability ========================================================= Camera Life 2.6.2id Sql Injection Vulnerability Author: nuclear...

PT-2008-1134 · Underbit Technologies +1 · Libid3Tag +1

Name of the Vulnerable Software and Affected Versions: libid3tag versions 0.15.0b through 0.15.1b-r1 libid3tag version 0.15.1b-r2 is not affected, so the range is up to 0.15.1b-r1 Description: The issue allows context-dependent attackers to cause a denial of service, specifically CPU consumption,...

PT-2008-3244 · Autonomy · Worksite Web

Name of the Vulnerable Software and Affected Versions: WorkSite Web versions 8.2 before SP1 P2 Description: The issue allows remote attackers to cause a denial of service, specifically memory consumption, via a large number of SendNrlLink directives. This results in opening a separate window for...

PT-2008-1001 · Zyxel +1 · Zywall Usg 300 +3

Name of the Vulnerable Software and Affected Versions: ZyXEL ZyWALL 1050 affected versions not specified ZyXEL ZyWALL USG 300 affected versions not specified Description: The issue is related to a hard-coded password for the Quagga and Zebra processes in the ZyXEL ZyWALL firewall/router operating...

projectpier-xssxsrf.txt

====================================================================== ProjectPier Impact: Cross Site Scripting Cross Site Request Forgery Status: patch available ------------------------------ Affected software description: ------------------------------ Application: ProjectPier Version: = 0.80...

Anon Proxy Server <= 0.102 remote buffer overflow

====================================================================== Anon Proxy Server = 0.102 remote buffer overflow ====================================================================== Author: L4teral l4teral 4t gmail com Impact: remote buffer overflow Status: patch available...

Syhunt: HFS (HTTP File Server) Log Arbitrary File/Directory Manipulation and Denial-of-Service Vulnerabilities

Syhunt: HFS HTTP File Server Log Arbitrary File/Directory Manipulation and Denial-of-Service Vulnerabilities Advisory-ID: 200801162 Discovery Date: 1.16.2008 Release Date: 1.23.2008 Affected Applications: HFS 2.2 to and including 2.3Beta Build 174 Non-Affected Applications: HFS 2.1d and earlier...

Debian Security Advisory DSA 514-1 (kernel-source-2.2.20, kernel-image-2.2-sparc)

The remote host is missing an update to kernel-source-2.2.20, kernel-image-2.2-sparc announced via advisory DSA 514-1. OpenVAS Vulnerability Test $Id: deb5141.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 514-1 Authors: Thomas Reinke Copyright: Copyright ...

GLSA-200712-19 : Syslog-ng: Denial of Service

The remote host is affected by the vulnerability described in GLSA-200712-19 Syslog-ng: Denial of Service Oriol Carreras reported a NULL pointer dereference in the logmsgparse function when processing timestamps without a terminating whitespace character. Impact : A remote attacker could send a...

icebb-database.txt

./includes/functions.php, line 73 $ip = empty$SERVER'HTTPXFORWARDEDFOR' ? $SERVER'REMOTEADDR' : $SERVER'HTTPXFORWARDEDFOR'; $ip = $this-cleankey$ip; $input'ICEBBUSERIP' = $ip; ./icebb.php, line 169 $icebb-clientip = $input'ICEBBUSERIP'; ./admin/index.php, line 112 $icebb-adsess =...

autoindex-xss.txt

====================================================================== AutoIndex Impact: Cross Site Scripting Denial of Service DoS Status: patch available ------------------------------ Affected software description: ------------------------------ Application: AutoIndex Version:...

SEC Consult SA-20071101-0 :: Multiple Vulnerabilities in SonicWALL SSL-VPN Client

SEC Consult Security Advisory 20071101-0 ===================================================================================== title: Multiple vulnerabilities in SonicWALL SSL-VPN Client Deletion of arbitrary files on the client Arbitrary code execution thru various buffer overflows program:...

ilias-xss.txt

====================================================================== ILIAS Impact: Cross Site Scripting Status: patch available ------------------------------ Affected software description: ------------------------------ Application: ILIAS Version: = 3.8.3 Vendor: http://www.ilias.de Descriptio...