Konqueror fails to restrict access to Java classes

Overview The Konqueror web browser may allow Java applets and JavaScripts to bypass the Java security settings and access restricted Java classes. Exploitation may allow a remote attacker to read and write arbitrary files on a vulnerable system. Description Konqueror is a web browser and file...

DEBIAN-CVE-2004-1471

Format string vulnerability in wrapper.c in CVS 1.12.x through 1.12.8, and 1.11.x through 1.11.16 allows remote attackers with CVSROOT commit access to cause a denial of service application crash and possibly execute arbitrary code via format string specifiers in a wrapper line...

Apache 2, mod_ssl: Bypass of SSLCipherSuite directive

Background The Apache HTTP server is one of the most popular web servers on the internet. modssl provides SSL v2/v3 and TLS v1 support for Apache 1.3 and is also included in Apache 2. Description A flaw has been found in modssl where the "SSLCipherSuite" directive could be bypassed in certain...

3Com 3CRADSL72 ADSL Wireless Router - Information Disclosure Authentication Bypass

3Com 3CRADSL72 ADSL Wireless Router - Information Disclosure Authentication Bypass source: https://www.securityfocus.com/bid/11408/info 3Com 3CRADSL72 is reported prone to an information disclosure, and an authentication bypass vulnerability. This issue can allow a remote attacker to disclose...

3Com 3CRADSL72 ADSL Wireless Router - Information Disclosure / Authentication Bypass

source: https://www.securityfocus.com/bid/11408/info 3Com 3CRADSL72 is reported prone to an information disclosure, and an authentication bypass vulnerability. This issue can allow a remote attacker to disclose sensitive information such as the router name, primary and secondary DNS servers,...

DUforum 3.x - Login Form Password SQL Injection

DUforum 3.x - Login Form Password SQL Injection source: https://www.securityfocus.com/bid/11363/info Multiple vulnerabilities have been identified in the software that may allow a remote attacker to carry out SQL injection and HTML injection attacks. An attacker may also gain unauthorized access ...

DUclassified 4.x - 'adDetail.asp' Multiple SQL Injections

source: https://www.securityfocus.com/bid/11363/info Multiple vulnerabilities have been identified in the software that may allow a remote attacker to carry out SQL injection and HTML injection attacks. An attacker may also gain unauthorized access to a user's account. DUclassmate may allow...

Debian DSA-534-1 : mailreader - directory traversal

A directory traversal vulnerability was discovered in mailreader whereby remote attackers could view arbitrary files with the privileges of the nph-mr.cgi process by default, www-data via relative paths and a null byte in the configLanguage parameter. %NASLMINLEVEL 70300 C Tenable Network Securit...

Debian DSA-233-1 : cvs - doubly freed memory

Stefan Esser discovered a problem in cvs, a concurrent versions system, which is used for many Free Software projects. The current version contains a flaw that can be used by a remote attacker to execute arbitrary code on the CVS server under the user id the CVS server runs as. Anonymous read-onl...

BBS E-Market Professional bf_130 1.3.0 - Multiple File Disclosure Vulnerabilities

BBS E-Market Professional bf130 1.3.0 - Multiple File Disclosure Vulnerabilities source: https://www.securityfocus.com/bid/11191/info BBS E-Market Professional is reported prone to multiple file disclosure vulnerabilities. These issues exist due to insufficient sanitization of user-supplied data....

BBS E-Market Professional bf_130 1.3.0 - Multiple File Disclosure Vulnerabilities

source: https://www.securityfocus.com/bid/11191/info BBS E-Market Professional is reported prone to multiple file disclosure vulnerabilities. These issues exist due to insufficient sanitization of user-supplied data. A remote attacker can disclose arbitrary Web-readable files by supplying directo...

Turbo Seek tseekdir.cgi location Parameter Arbitrary File Access

The remote host is running Turbo Seek, a search engine and directory tool. The version of this software running on the remote host has a vulnerability that allows a remote attacker to read arbitrary files from the remote system. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...

CVE-2003-0043

Jakarta Tomcat before 3.3.1a, when used with JDK 1.3.1 or earlier, uses trusted privileges when processing the web.xml file, which could allow remote attackers to read portions of some files through the web.xml file...

CVE-2004-0419

XDM in XFree86 opens a chooserFd TCP socket even when DisplayManager.requestPort is 0, which could allow remote attackers to connect to the port, in violation of the intended restrictions...

phpBugTracker 0.9 - 'bug.php' Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/10153/info Reportedly phpBugTracker contains multiple input validation vulnerabilities; it is prone to multiple SQL injection, cross-site scripting and HTML injection issues. These issues are all due to a failure of the application to properly sanitize us...

HP Web Jetadmin 7.5.2456 - setinfo.hts Script Directory Traversal

HP Web Jetadmin 7.5.2456 - setinfo.hts Script Directory Traversal source: https://www.securityfocus.com/bid/9972/info It has been reported that HP Web JetAdmin may be prone to a directory traversal vulnerability allowing remote attackers to access information outside the server root directory. Th...

Apache Cygwin 1.3.x/2.0.x - Directory Traversal

source: https://www.securityfocus.com/bid/9733/info It has been reported that Apache may be prone to a directory traversal vulnerability that may allow a remote attacker to access information outside the server root directory. This issue is only reported to present itself in Apache running on...

Multiple Real media players fail to properly validate SMIL files

Overview Multiple Real media players fail to properly validate synchronized multimedia integration language SMIL files which may permit a remote attacker to gain sensitive information. Description RealNetworks Real media players are multimedia applications that allow users to view local and remot...

CVE-2004-0127

The CVE-2004-0127 entry concerns a directory-traversal vulnerability in phpGedView

JBrowser 1.02.x - browser.php Directory Traversal

JBrowser 1.02.x - browser.php Directory Traversal source: https://www.securityfocus.com/bid/9535/info JBrowser has been reported to be vulnerable to directory traversal vulnerability that may allow a remote attacker to gain access to files readable by the web-server that reside outside of the...