CVE-2008-5451

Unspecified vulnerability in the JD Edwards Tools component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.97.2.5 allows remote authenticated users to affect confidentiality via unknown vectors...

Design/Logic Flaw

Unspecified vulnerability in the SQLPlus Windows GUI component in Oracle Database 10.2.0.4 allows remote authenticated users to affect confidentiality via unknown vectors...

CVE-2008-5857

The CVE-2008-5857 issue affects the KnowledgeTree DropDocuments plugin used before version 3.5.4a . The vulnerability allows remote authenticated users to escalate privileges to administrative level by performing a specific sequence of actions involving "browse documents" and dashboard requests ....

CVE-2008-5709

Multiple unspecified vulnerabilities in the web management interface in Avaya Communication Manager CM 3.1 before 3.1.4 SP2, 4.0 before 4.0.3 SP1, and 5.0 before 5.0 SP3 allow remote authenticated users to execute arbitrary code via unknown attack vectors in the 1 Set Static Routes and 2 Backup...

Code injection

wp-admin/options.php in WordPress MU before 1.3.2, and WordPress 2.3.2 and earlier, does not properly validate requests to update an option, which allows remote authenticated users with manageoptions and uploadfiles capabilities to execute arbitrary code by uploading a PHP script and adding this...

CVE-2008-5678

Fretwell-Downing Informatics FDI OLIB7 WebView 2.5.1.1 allows remote authenticated users to obtain sensitive information from files via the infile parameter to the default URI under cgi/, as demonstrated by the 1 getsettings.ini, 2 setup.ini, and 3 text.ini files...

Design/Logic Flaw

Fretwell-Downing Informatics FDI OLIB7 WebView 2.5.1.1 allows remote authenticated users to obtain sensitive information from files via the infile parameter to the default URI under cgi/, as demonstrated by the 1 getsettings.ini, 2 setup.ini, and 3 text.ini files...

CVE-2008-5678

Fretwell-Downing Informatics FDI OLIB7 WebView 2.5.1.1 allows remote authenticated users to obtain sensitive information from files via the infile parameter to the default URI under cgi/, as demonstrated by the 1 getsettings.ini, 2 setup.ini, and 3 text.ini files...

2532/Gigs 1.2.2 Stable - Remote Authentication Bypass

/ ------------------------------------------------------------------------------------------------ 2532|Gigs 1.2.2 Stable Remote Login Bypass Vulnerability ------------------------------------------------------------------------------------------------ by athos - stakerathotmaildotit...

CVE-2008-5416

Heap-based buffer overflow in Microsoft SQL Server 2000 SP4, 8.00.2050, 8.00.2039, and earlier; SQL Server 2000 Desktop Engine MSDE 2000 SP4; SQL Server 2005 SP2 and 9.00.1399.06; SQL Server 2000 Desktop Engine WMSDE on Windows Server 2003 SP1 and SP2; and Windows Internal Database WYukon SP2...

CVE-2008-5296

Gallery 1.5.x before 1.5.10 and 1.6 before 1.6-RC3, when registerglobals is enabled, allows remote attackers to bypass authentication and gain administrative via unspecified cookies. NOTE: some of these details are obtained from third party information...

Symantec Backup Exec远程绕过认证及缓冲区溢出漏洞

BUGTRAQ ID: 32346,32347 Symantec Backup Exec是一款全面的数据备份解决方案。 Backup Exec的远程代理所使用的一些认证方式中存在多个错误，可能允许用户绕过认证获得非授权访问，读取或删除任意文件；此外数据管理协议中还存在缓冲区溢出漏洞。远程攻击者可以通过前一个漏洞认证为特权用户，然后触发缓冲区溢出导致执行任意指令。 Symantec Backup Exec for Windows Servers 12.5 Symantec Backup Exec for Windows Servers 12.0 Symantec Backup Exec f...

Natterchat 1.1 - Remote Authentication Bypass

============================================================================== NATTERCHAT v1.1 Admin Home Bypass Vulnerability ============================================================================== » Script : NATTERCHAT v1.1 » Discover: Mountassif Moad === XPL === »...

Natterchat 1.1 - Remote Authentication Bypass

Natterchat 1.1 - Remote Authentication Bypass ============================================================================== NATTERCHAT v1.1 Admin Home Bypass Vulnerability ============================================================================== » Script : NATTERCHAT v1.1 » Discover:...

CVE-2008-5173

Unspecified vulnerability in testMaker before 3.0p16 allows remote authenticated users to execute arbitrary PHP code via unspecified attack vectors...

USN-669-1: gnome-screensaver vulnerabilities

It was discovered that the notify feature in gnome-screensaver could let a local attacker read the clipboard contents of a locked session by using Ctrl-V. CVE-2007-6389 Alan Matsuoka discovered that gnome-screensaver did not properly handle network outages when using a remote authentication...

AJ ARTICLE Remote Authentication Bypass Vulnerability

No description provided by source. ============================================================================== / \ | | | | / \ | | | | / \ | | | | / \ | || | / \ | | | | / \ | | IN THE NAME OF // \ || || // \ || || ==============================================================================...

AJ Article 1.0 - Remote Authentication Bypass

AJ Article 1.0 - Remote Authentication Bypass ============================================================================== / \ | | | | / \ | | | | / \ | | | | / \ | || | / \ | | | | / \ | | IN THE NAME OF // \ || || // \ || ||...

AJ Article 1.0 - Remote Authentication Bypass

============================================================================== / \ | | | | / \ | | | | / \ | | | | / \ | || | / \ | | | | / \ | | IN THE NAME OF // \ || || // \ || || ============================================================================== / | | || | | \ | | / \ | |/ / | | |...

AJ ARTICLE Remote Authentication Bypass Vulnerability

Exploit for unknown platform in category web applications ===================================================== AJ ARTICLE Remote Authentication Bypass Vulnerability ===================================================== =============================================================================...