1759 matches found
CVE-2007-5498
The Xen hypervisor block backend driver for Linux kernel 2.6.18, when running on a 64-bit host with a 32-bit paravirtualized guest, allows local privileged users in the guest OS to cause a denial of service host OS crash via a request that specifies a large number of blocks...
Code injection
Sun Solaris 8, 9, and 10 allows "remote privileged" users to cause a denial of service panic via unknown vectors related to self encapsulated IP packets...
CVE-2008-1779
Sun Solaris 8, 9, and 10 allows "remote privileged" users to cause a denial of service panic via unknown vectors related to self encapsulated IP packets...
CORE-2008-0123: Leopard Server Remote Path Traversal
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Core Security Technologies - CoreLabs Advisory http://www.coresecurity.com/corelabs/ Leopard Server Remote Path Traversal Advisory Information Title: Leopard Server Remote Path Traversal Advisory ID: CORE-2008-0123 Advisory URL:...
CVE-2008-0272
Cross-site request forgery CSRF vulnerability in the aggregator module in Drupal 4.7.x before 4.7.11 and 5.x before 5.6 allows remote attackers to delete items from a feed as privileged users...
CVE-2007-4063
Multiple cross-site request forgery CSRF vulnerabilities in Drupal 5.x before 5.2 allow remote attackers to 1 delete comments, 2 delete content revisions, and 3 disable menu items as privileged users, related to improper use of HTTP GET and the Forms API...
drupal -- Cross site request forgeries
The Drupal Project reports: Several parts in Drupal core are not protected against cross site request forgeries due to inproper use of the Forms API, or by taking action solely on GET requests. Malicious users are able to delete comments and content revisions and disable menu items by enticing a...
Microsoft Security Bulletin MS07-032 - Moderate Vulnerability in Windows Vista Could Allow Information Disclosure (931213)
Microsoft Security Bulletin MS07-032 - Moderate Vulnerability in Windows Vista Could Allow Information Disclosure 931213 Published: June 12, 2007 Version: 1.0 General Information Executive Summary This moderate security update resolves a privately reported vulnerability. This vulnerability could...
MOKB-09-11-2006
Title: Mac OS X fpathconf syscall denial of service Warning - wet floor! Description: Failure to handle unknown file types by the Mac OS X kernel XNU fpathconf syscall causes a kernel panic, leading to an exploitable local denial of service by non-privileged users. The bug was fixed by FreeBSD on...
CVE-2006-4886
The VirusScan On-Access Scan component in McAfee VirusScan Enterprise 7.1.0 and Scan Engine 4.4.00 allows local privileged users to bypass security restrictions and disable the On-Access Scan option by opening the program via the task bar and quickly clicking the Disable button, possibly due to a...
imlock2006.txt
IM Lock 2006 - Insecure Registry Permission Vulnerability --------------------------------------------------------- Application: IM Lock 2006 Vendor: www.comvigo.com Corporation: Comvigo, Inc. Version: Latest: 2 March 2006 - Home Edition, Enterprise & Professional Description: IM Lock 2006...
Webroot Desktop Firewall buffer overflow
Buffer overflow on deleting application from the list of allowed programs. It's possible for non-privileged users to disable the firewall even when password protection has been enabled, by sending specific DeviceIoControl commands to the firewall driver...
Movable Type < 3.2 Multiple Vulnerabilities
The version of Movable Type installed on the remote host is affected by multiple vulnerabilities : - The application allows an attacker to enumerate valid usernames because its password reset functionality returns different errors depending on whether the supplied username exists. CVE-2005-3101 -...
Hosting Controller < 6.1 Hotfix 2.2 Multiple Vulnerabilities
According to its version number, the installation of Hosting Controller on the remote host is subject to multiple flaws : - Denial of Service Vulnerabilities By accessing the 'editplanopt3.asp', 'planmanager.asp', and 'plansettings.asp' scripts directly or with specific parameters, an attacker ca...
security flaw
The ext3 code in Linux 2.4.x before 2.4.26 does not properly initialize journal descriptor blocks, which causes an information leak in which in-memory data is written to the device for the ext3 file system, which allows privileged users to obtain portions of kernel memory by reading the raw devic...
Debian DSA-164-1 : cacti - arbitrary code execution
A problem in cacti, a PHP based frontend to rrdtool for monitoring systems and services, has been discovered. This could lead into cacti executing arbitrary program code under the user id of the web server. This problem, however, is only persistent to users who already have administrator privileg...
ppp-off.txt
Hi, In SlackWare Linux the script /usr/bin/ppp-off writes the output of 'ps x' to /tmp/grep.tmp Since root is the user that runs ppp-off, a non-privileged user could create a link from /tmp/grep.tmp to any file ie: /etc/issue, thus when root runs the ppp-off script, the output of 'ps x' would be...
CVE-2000-0345
The CVE-2000-0345 entry concerns Cisco routers’ on-line help system options. The vulnerability allows non-privileged users, without enabled access, to obtain sensitive information via the show command. The provided data (NVD) notes partial confidentiality impact with local attack vector and low b...