CVE-2008-3067

sudo in SUSE openSUSE 10.3 does not clear the stdin buffer when password entry times out, which might allow local users to obtain a password by reading stdin from the parent process after a sudo child process exits...

CVE-2008-2807

Mozilla Firefox before 2.0.0.15 and SeaMonkey before 1.1.10 do not properly handle an invalid .properties file for an add-on, which allows remote attackers to read uninitialized memory, as demonstrated by use of ISO 8859 encoding instead of UTF-8 encoding in a French .properties file...

Unauthorized reading confirmation from Outlook

I've just got an interesting idea about how a malicious e-mail sender could try to get a unseen by the recipient reading confirmation, including the IP address of the recipient. I was working on S/MIME messages and I thought about the signature validation process, where some of the steps could...

CVE-2008-2715

Unspecified vulnerability in Opera before 9.5 allows remote attackers to read cross-domain images via HTML CANVAS elements that use the images as patterns...

lv Arbitrary Command Execution Vulnerability

Overview lv contains a vulnerability of reading and running a .lv file in the current directry. Impact An attacker could execute arbitrary command as other users with the privilege of the user running lv. Solution Please refer to the 'Vendor Information' section of this advisory for official...

[SECURITY] Fedora 7 Update: libid3tag-0.15.1b-5.fc7

libid3tag is a library for reading and eventually writing ID3 tags, both ID3v1 and the various versions of ID3v2...

CVE-2008-2045

SugarCRM Community Edition 4.5.1 and 5.0.0 are affected by an absolute path traversal in modules/Feeds/Feed.php, allowing remote attackers to read arbitrary files by supplying a full path in the URL parameter; the content is placed into a related cache file in the .cache/feeds directory. This sum...

CVE-2008-1924

Unspecified vulnerability in phpMyAdmin before 2.11.5.2, when running on shared hosts, allows remote authenticated users with CREATE table permissions to read arbitrary files via a crafted HTTP POST request, related to use of an undefined UploadDir variable...

CVE-2008-1415

CVE-2008-1415 affects the web app component index.php in Multiple Time Sheets (MTS) 5.0 and earlier. The vulnerability is a directory traversal through the tab parameter, using modified dot-dot sequences ("../..//"), allowing remote attackers to read arbitrary files. The provided documents do not...

Debian Security Advisory DSA 1521-1 (lighttpd)

The remote host is missing an update to lighttpd announced via advisory DSA 1521-1. OpenVAS Vulnerability Test $Id: deb15211.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1521-1 lighttpd Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

GLSA-200803-27 : MoinMoin: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200803-27 MoinMoin: Multiple vulnerabilities Multiple vulnerabilities have been discovered: A vulnerability exists in the file wikimacro.py because the macroGetval function does not properly enforce ACLs CVE-2008-1099. A directory...

CA BrightStor ARCserve Backup r11.5 ActiveX Remote BOF Exploit 0day

No description provided by source. HTML !-- CA BrightStor ARCserve Backup r11.5 AddColumn 0day ActiveX Remote Buffer Overflow Exploit Bug discovered by Krystian Kloskowski h07 [email protected] Tested on: - CA BrightStor ARCserve Backup r11.5 ftp://ftp.ca.com/priv/trial/BABr11/BABLDr115/BABLDr115.zi...

Input validation

Opera before 9.26 allows user-assisted remote attackers to read arbitrary files by tricking a user into typing the characters of the target filename into a file input...

CVE-2008-0420

The CVE-2008-0420 issue affects Mozilla Firefox (before 2.0.0.12), Mozilla Thunderbird (before 2.0.0.12), and SeaMonkey (before 1.1.8). It stems from incorrect calculations in the BMP decoder (nsBMPDecoder.cpp) related to the mColors table for 8-bit BMPs, enabling an out-of-bounds read of heap me...

ImageShack Toolbar ActiveX unauthorized access

Insecure method allows local files reading access...

CVE-2008-0396

CVE-2008-0396 is a directory traversal vulnerability in BitDefender Update Server (http.exe) used by BitDefender products. The vulnerability allows an unauthenticated remote attacker to read arbitrary files by crafting HTTP requests with directory traversal sequences (..). The issue affects the U...

Debian Security Advisory DSA 750-1 (dhcpcd)

The remote host is missing an update to dhcpcd announced via advisory DSA 750-1. infamous42md discovered that dhcpcd, a DHCP client for automatically configuring IPv4 networking, can be tricked into reading past the end of the supplied DHCP buffer which could lead to the daemon crashing. The old...

Debian Security Advisory DSA 150-1 (interchange)

The remote host is missing an update to interchange announced via advisory DSA 150-1. OpenVAS Vulnerability Test $Id: deb1501.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 150-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

Debian Security Advisory DSA 005-1 (slocate)

The remote host is missing an update to slocate announced via advisory DSA 005-1. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 8 Update: libexif-0.6.15-5.fc8

Most digital cameras produce EXIF files, which are JPEG files with extra tags that contain information about the image. The EXIF library allows you to parse an EXIF file and read the data from those tags...