6372 matches found
CVE-2007-5241
Buffer overflow in NET$CSMACD.EXE in HP OpenVMS 8.3 and earlier allows local users to cause a denial of service machine crash via the "MCR MCL SHOW CSMA-CD Port All" command, which overwrites a Non-Paged Pool Packet...
Buffer overflow
Buffer overflow in NET$CSMACD.EXE in HP OpenVMS 8.3 and earlier allows local users to cause a denial of service machine crash via the "MCR MCL SHOW CSMA-CD Port All" command, which overwrites a Non-Paged Pool Packet...
CVE-2007-5241
Buffer overflow in NET$CSMACD.EXE in HP OpenVMS 8.3 and earlier allows local users to cause a denial of service machine crash via the "MCR MCL SHOW CSMA-CD Port All" command, which overwrites a Non-Paged Pool Packet...
Buffer overflow
The nvcoaft51 driver in Norman Virus Control NVC 5.82 uses weak permissions unrestricted write access for the NvcOa device, which allows local users to gain privileges by 1 triggering a buffer overflow in a kernel pool via a string argument to ioctl 0xBF67201C; or by 2 sending a crafted KEVENT...
Cross site scripting
Cross-site scripting XSS vulnerability in index.php in the Pool 1.0.7 theme for WordPress allows remote attackers to inject arbitrary web script or HTML via the PATHINFO PHPSELF...
CVE-2007-4482
The CVE-2007-4482 entry describes a Cross-site scripting (XSS) vulnerability in the Pool theme for WordPress v1.0.7, exploitable via PATH_INFO (PHP_SELF) in index.php. The vulnerability could allow remote attackers to inject arbitrary web script or HTML. Affected component: Pool theme (WordPress)...
WordPress Pool Theme <= 1.0.7 - XSS
Because of this vulnerability in index.php, the attackers can inject arbitrary web script or HTML via the PATHINFO. Solution Update the theme...
Vulnerability in theme Pool 1.0.7 for WordPress
Здравствуйте 3APA3A! Сообщаю вам о найденной мною Cross-Site Scripting уязвимости в теме Pool 1.0.7 для WordPress. XSS: http://site/index.php/223E3Cscript3Ealertdocument.cookie3C/script3E Уязвимость связана с недостаточной фильтрацией переменной PHPSELF. Дополнительная информация о данной...
WordPress 1.0.7 - Pool index.php Cross-Site Scripting
WordPress 1.0.7 - Pool index.php Cross-Site Scripting source: https://www.securityfocus.com/bid/25413/info WordPress Pool is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitra...
Remote file inclusion
PHP remote file inclusion vulnerability in admin.tourtoto.php in the Tour de France Pool comtourtoto 1.0.1 module for Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the mosConfigabsolutepath parameter...
CVE-2007-4186
PHP remote file inclusion vulnerability in admin.tourtoto.php in the Tour de France Pool comtourtoto 1.0.1 module for Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the mosConfigabsolutepath parameter...
Joomla! Component Tour de France Pool 1.0.1 Module - MosConfig_absolute_path Remote File Inclusion
Joomla! Component Tour de France Pool 1.0.1 Module - MosConfigabsolutepath Remote File Inclusion source: https://www.securityfocus.com/bid/25183/info Tour de France Pool for Joomla is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied input...
Joomla! Component Tour de France Pool 1.0.1 Module - MosConfig_absolute_path Remote File Inclusion
source: https://www.securityfocus.com/bid/25183/info Tour de France Pool for Joomla is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied input. Exploiting this issue may allow an attacker to compromise the application and the underlying system;...
Stack overflow
Stack-based buffer overflow in the random number generator RNG implementation in the Linux kernel before 2.6.22 might allow local root users to cause a denial of service or gain privileges by setting the default wakeup threshold to a value greater than the output pool size, which triggers writing...
Important: Red Hat Security Advisory: kernel security and bug fix update
Updated kernel packages that fix security issues and bugs in the Red Hat Enterprise Linux 5 kernel are now available. This update has been rated as having important security impact by the Red Hat Security Response Team. The Linux kernel handles the basic functions of the operating system. These n...
CVE-2006-6100
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2006. Notes: none...
CVE-2006-6100
CVE-2006-6100 entry is rejected/not used per the Initial Description.
CVE-2006-6492
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2006. Notes: none...