3741 matches found
AfterLogic WebMail Pro 4.7.10 Multiple Cross Site Scripting Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/36605/info AfterLogic WebMail Pro is prone to multiple cross-site scripting vulnerabilities because the application fails to sufficiently sanitize user-supplied data. Attacker-supplied HTML or JavaScript code could run in...
Gattaca Server 2003 Language Variable Path Exposure
No description provided by source. source: http://www.securityfocus.com/bid/10729/info It is reported that Gattaca Server 2003 contains multiple path disclosure vulnerabilities. By sending HTTP requests to Gattaca's web server, it is reportedly possible to cause the application to return error...
PHP <= 5.2.3 EXT/Session HTTP Response Header Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/24268/info PHP is prone to an HTTP-response-header-injection vulnerability because it fails to sanitize user-supplied input. An attacker can exploit this issue to inject additional cookie attributes into session cookies...
Sysinternals Regmon 6.11 Local Denial of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/11042/info Regmon is reported prone to a local denial of service vulnerability. This issue presents itself because the application fails to handle exceptional conditions and references unvalidated pointers to kernel...
Lighthouse Development Squirrelcart 1.5.5 - SQL Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/12944/info Squirrelcart is affected by an SQL injection vulnerability. This vulnerability could permit remote attackers to pass malicious input to database queries, resulting in modification of query logic or other attack...
CF_Nuke 4.6 Index.CFM Local File Include Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/15777/info CFNuke is prone to a local file include vulnerability. This is due to a lack of sanitization of user-supplied input. This may facilitate the unauthorized viewing of files and unauthorized execution of local...
MercurySteam Scrapland Game Server 1.0 - Remote Denial of Service Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/12680/info Scrapland game server is reported prone to various denial of service vulnerabilities. These issues present themselves because the application fails to handle exceptional conditions. It is reported that the game...
PHP <= 5.2.1 GD Extension WBMP File Integer Overflow Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/23357/info PHP's GD extension is prone to two integer-overflow vulnerabilities because it fails to ensure that integer values aren't overrun. Successfully exploiting these issues allows attackers to crash the affected...
Basic Analysis And Security Engine <= 1.2.4 'readRoleCookie()' Authentication Bypass Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/35470/info Basic Analysis And Security Engine BASE is prone to an authentication-bypass vulnerability. An attacker can exploit this issue to gain unauthorized access to the affected application. Successfully exploiting th...
America's Army 3.0.4 Invalid Query Remote Denial of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/35703/info America's Army is prone to a remote denial-of-service vulnerability because the application fails to properly handle invalid queries. Exploiting this issue allows remote attackers to cause the application to...
AutoIndex PHP Script 2.2.2/2.2.3 Index.PHP Denial of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/26410/info AutoIndex PHP Script is prone to a remote denial-of-service vulnerability because the application fails to properly handle unexpected input. Successfully exploiting this issue allows remote attackers to consume...
Apple Mac OS X 10.3.x Help Protocol Remote Code Execution Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/10356/info It has been reported that Mac OS X may be prone to a vulnerability that could allow a remote attacker to execute arbitrary script code on a vulnerable system. The issue presents itself due to the 'help:' protoc...
DEBIAN-CVE-2013-2125
OpenSMTPD before 5.3.2 does not properly handle SSL sessions, which allows remote attackers to cause a denial of service connection blocking by keeping a connection open...
UBUNTU-CVE-2014-1418
Django 1.4 before 1.4.13, 1.5 before 1.5.8, 1.6 before 1.6.5, and 1.7 before 1.7b4 does not properly include the 1 Vary: Cookie or 2 Cache-Control header in responses, which allows remote attackers to obtain sensitive information or poison the cache via a request from certain browsers...
Foscam IP Camera - Predictable Credentials Security Bypass
Foscam IP Camera - Predictable Credentials Security Bypass // source: https://www.securityfocus.com/bid/67510/info Foscam IP Camera is prone to a security-bypass vulnerability. An attacker can exploit this issue to gain access to sensitive information and perform certain unauthorized actions; thi...
UBUNTU-CVE-2014-2450
Unspecified vulnerability in Oracle MySQL Server 5.6.15 and earlier allows remote authenticated users to affect availability via unknown vectors related to Optimizer...
UBUNTU-CVE-2014-1311
WebKit, as used in Apple Safari before 6.1.3 and 7.x before 7.0.3, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2014-04-01-1...
UBUNTU-CVE-2014-1313
WebKit, as used in Apple Safari before 6.1.3 and 7.x before 7.0.3, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2014-04-01-1...
PT-2014-2168
Name of the Vulnerable Software and Affected Versions OpenSSH versions prior to 5.8p2 Description The issue allows local users to obtain sensitive key information via the ptrace system call due to unintended open file descriptors when executing ssh-rand-helper in ssh-keysign.c. Recommendations Fo...
PT-2013-4989 · Foreman · Foreman
Name of the Vulnerable Software and Affected Versions: Foreman versions prior to 1.2.3 Description: The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the fqdn or hostgroup parameter in the app/models/concerns/host common.rb file. Recommendations: For versio...