8194 matches found
Sympa 'sympa.pl' Insecure Temporary File Creation Vulnerability
Sympa creates temporary files in an insecure manner. An attacker with local access could potentially exploit this issue to perform symbolic-link attacks, overwriting arbitrary files in the context of the affected application. Successfully mounting a symlink attack may allow the attacker to delete...
SLES11: Security update for libtiff3
The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: libtiff3 More details may also be found by searching for the SuSE Enterprise Server 11 patch database linked in the references. SPDX-FileCopyrightText: 2009...
SLES9: Security update for multipath-tools
The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: multipath-tools For more information, please visit the referenced security advisories. More details may also be found by searching for keyword 5046186 within...
SLES9: Security update for MySQL
The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: mysql-devel mysql mysql-Max For more information, please visit the referenced security advisories. More details may also be found by searching for keyword...
HP LaserJet printers - 存储型xss
No description provided by source. Digital Security Research Group DSecRG Advisory DSECRG-09-048 http://dsecrg.ru/pages/vul/show.php?id=148 Application: HP LaserJet printer web interface Vulnerable: HP LaserJet 2200, 4350, 4600, 5500, and many others Vendor URL: http://www.hp.com/ Bug: Multiple...
Mozilla Bugzilla 'Bug.search()' WebService Function SQL Injection Vulnerability
Bugzilla is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying...
neon: billion laughs DoS attack
neon before 0.28.6, when expat is used, does not properly detect recursion during entity expansion, which allows context-dependent attackers to cause a denial of service memory and CPU consumption via a crafted XML document containing a large number of nested entity references, a similar issue to...
ProFTP 2.9 (welcome message) Remote Buffer Overflow Exploit (meta)
No description provided by source. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ class Metasploit3...
Mandriva Linux Security Advisory : libneon0.27 (MDVSA-2009:221)
Multiple vulnerabilities has been found and corrected in libneon0.27 : neon before 0.28.6, when expat is used, does not properly detect recursion during entity expansion, which allows context-dependent attackers to cause a denial of service memory and CPU consumption via a crafted XML document...
CVE-2009-2473
neon before 0.28.6, when expat is used, does not properly detect recursion during entity expansion, which allows context-dependent attackers to cause a denial of service memory and CPU consumption via a crafted XML document containing a large number of nested entity references, a similar issue to...
CVE-2009-2473
neon before 0.28.6, when expat is used, does not properly detect recursion during entity expansion, which allows context-dependent attackers to cause a denial of service memory and CPU consumption via a crafted XML document containing a large number of nested entity references, a similar issue to...
Fedora Core 10 FEDORA-2009-7750 (mediawiki)
The remote host is missing an update to mediawiki announced via advisory FEDORA-2009-7750. OpenVAS Vulnerability Test $Id: fcore20097750.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-7750 mediawiki Authors: Thomas Reinke Copyright: Copyright c 200...
Squid Multiple Remote Denial of Service Vulnerabilities
Squid is prone to multiple remote denial-of-service vulnerabilities. Successfully exploiting these issues allow remote attackers to crash the affected application, denying further service to legitimate users. This issue affects Squid 3.0.STABLE16, 3.1.0.11 and prior versions. OpenVAS Vulnerabilit...
Fedora 11 : mediawiki-1.15.1-48.fc11 (2009-7785)
This update upgrades mediawiki code to 1.15.1 and fixes some path references. Upstream comments: This is a security and bugfix release of MediaWiki 1.15.1 and 1.14.1. A cross-site scripting XSS vulnerability was discovered. Only versions 1.14.0, 1.15.0 and release candidates for those releases ar...
CVE-2009-2259
CVE-2009-2259 is a duplicate of CVE-2009-2608 and should reference that entry. Connected records confirm that PHP Address Book 4.0.x contains multiple SQL injection vulnerabilities exploitable via delete.php (id) or index.php (alphabet), enabling remote arbitrary SQL commands. The root cause is u...
Zen Cart 1.3.8 Remote Code Execution Exploit
No description provided by source. !/usr/bin/php ?php ------- Zen Cart 1.3.8 Remote Code Execution http://www.zen-cart.com/ Zen Cart Ecommerce - putting the dream of server rooting within reach of anyone! A new version 1.3.8a is avaible on http://www.zen-cart.com/ BlackH : errorreportingEALL ^...
CVE-2009-2105
SQL injection vulnerability in the References database t3references extension 0.1.1 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...
Sql injection
SQL injection vulnerability in the References database t3references extension 0.1.1 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...
CVE-2009-2105
CVE-2009-2105 affects the TYPO3 References database (t3references) extension versions up to 0.1.1. The vulnerability is a SQL injection that allows remote attackers to execute arbitrary SQL via unspecified vectors, with a CVSS v2 base score of 7.5 (HIGH). Transport/attack vector: network; impact:...
