IBM DB2 universal database protection bypass

User with only SELECT permissions can can insert, update or delete records...

Multiple Sun Solaris perl modules problems

Safe.pm protection bypass, CGI.pm crossite scripting...

CVE-2002-1778: Undefined Security Weakness

Symantec Norton Personal Firewall 2002 allows remote attackers to bypass the portscan protection by using a 1 SYN/FIN, 2 SYN/FIN/URG, 3 SYN/FIN/PUSH, or 4 SYN/FIN/URG/PUSH scan...

CVE-2002-1776: Undefined Security Weakness

NOTE: this issue has been disputed by the vendor. Symantec Norton AntiVirus 2002 allows remote attackers to bypass virus protection via a Word Macro virus with a .nch or .dbx extension, which is automatically recognized and executed as a Microsoft Office document. NOTE: the vendor has disputed th...

Deep Freeze protection bypass

With debugging application it's possible to bypass system state protection...

Sun Java / BlackDown Java sandbox protection bypass

Applet can bypass sandbox limitation to exefute privileged functions...

Sun Java Webstart virtual machine protection bypass

It's possible to bypass sandbox environment...

security flaw

The linux-2.4.21-mlock.patch in Red Hat Enterprise Linux 3 does not properly maintain the mlock page count when one process unlocks pages that belong to another process, which allows local users to mlock more memory than specified by the rlimit...

CVE-2005-1590: Undefined Security Weakness

The Altiris Client Service for Windows ACLIENT.EXE 6.0.88 allows local users to disable password protection and access the administrative interface by finding and showing the "Altiris Client Service" hidden window, disabling the password protection, disabling the "Hide client tray icon box" optio...

CVE-2005-1551: Undefined Security Weakness

Sophos Anti-Virus 3.93 does not check downloaded files for viruses when they have only been written, which creates a race condition and may allow remote attackers to bypass virus protection if the file is executed before the antivirus starts on system reboot...

CVE-2004-1936: Undefined Security Weakness

ZoneAlarm Pro 4.5.538.001 and possibly other versions allows remote attackers to bypass e-mail protection via attachments whose names contain certain non-English characters...

CVE-2003-1154: Undefined Security Weakness

MAILsweeper for SMTP 4.3 allows remote attackers to bypass virus protection via a mail message with a malformed zip attachment, as exploited by certain MIMAIL virus variants...

CVE-2005-1125

Race condition in libsafe 2.0.16 and earlier, when running in multi-threaded applications, allows attackers to bypass libsafe protection and exploit other vulnerabilities before the libsafedie function call is completed...

CVE-2005-1125: Undefined Security Weakness

Race condition in libsafe 2.0.16 and earlier, when running in multi-threaded applications, allows attackers to bypass libsafe protection and exploit other vulnerabilities before the libsafedie function call is completed...

Messenger Plus! instant messanger password protection bypass

It's possible to change password without entering old one...

CVE-2005-0648: Undefined Security Weakness

Multiple vulnerabilities in Pixel-Apes SafeHTML before 1.3.0 allow remote attackers to bypass cross-site scripting XSS protection via 1 "decimal HTML entities" or 2 "the \x00 symbol."...

CVE-2005-0649: Undefined Security Weakness

Pixel-Apes SafeHTML before 1.2.1 allows remote attackers to bypass cross-site scripting XSS protection via "hexadecimal HTML entities."...

NX Server / FreeNX X Server protection bypass

No description provided...

CVE-2004-0937

Sophos Anti-Virus before 3.87.0, and Sophos Anti-Virus for Windows 95, 98, and Me before 3.88.0, allows remote attackers to bypass antivirus protection via a compressed file with both local and global headers set to zero, which does not prevent the compressed file from being opened on a target...

Single crafted HTTP request may result in multiple responses

Overview Some HTTP handling devices are vulnerable to a flaw which may allow a specially crafted request to elicit multiple responses, some of which may be controlled by the attacker. These attacks may result in cache poisoning, information leakage, cross-site scripting, and other outcomes...