6468 matches found
JDK unspecified vulnerability in Sound component
Unspecified vulnerability in the Java Runtime Environment JRE in Oracle Java SE and Java for Business 6 Update 23 and earlier, 5.0 Update 27 and earlier, and 1.4.229 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Sound and...
OpenJDK Java2D font-related system property leak (6985453)
Unspecified vulnerability in the Java Runtime Environment JRE in Oracle Java SE and Java for Business 6 Update 23 and earlier, and 5.0 Update 27 and earlier allows remote untrusted Java Web Start applications and untrusted Java applets to affect confidentiality via unknown vectors related to 2D...
JDK unspecified vulnerability in Deployment component
Unspecified vulnerability in the Java Runtime Environment JRE in Oracle Java SE and Java for Business 6 Update 10 through 6 Update 23 allows remote untrusted Java Web Start applications and untrusted Java applets to affect confidentiality, integrity, and availability via unknown vectors related t...
DEBIAN-CVE-2011-0715
The moddavsvn module for the Apache HTTP Server, as distributed in Apache Subversion before 1.6.16, allows remote attackers to cause a denial of service NULL pointer dereference and daemon crash via a request that contains a lock token...
PHP 5.3.x Intl Extension - NumberFormatter::setSymbol() Denial of Service
PHP 5.3.x Intl Extension - NumberFormatter::setSymbol Denial of Service source: https://www.securityfocus.com/bid/46968/info PHP is prone to a remote denial-of-service vulnerability that affects the 'Intl' extension. Successful attacks will cause the application to crash, creating a...
PT-2011-1083 · Suse +2 · Kernel-Kdumppae +2
Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 2.6.39 kernel-kdumppae affected versions not specified Description: The issue is related to an integer overflow in the Linux kernel, specifically in the vma to resize function in mm/mremap.c, which can be...
PT-2011-1078 · Suse +2 · Kernel-Kdumppae +2
Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 2.6.38.5 kernel-kdumppae affected versions not specified Description: The issue is related to multiple integer overflows in the Linux kernel, specifically in the agp allocate memory and agp create user memory...
Galilery 'index.php' Local File Include Vulnerability
Galilery is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...
VicFTPS 'LIST' Command Remote Denial of Service Vulnerability
VicFTPS is prone to a remote denial-of-service vulnerability because it fails to handle specially crafted input. Successfully exploiting this issue will allow an attacker to crash the affected application, denying further service to legitimate users. Arbitrary code execution may also be possible;...
JDK unspecified vulnerability in Sound component
Unspecified vulnerability in the Java Runtime Environment JRE in Oracle Java SE and Java for Business 6 Update 23 and earlier, 5.0 Update 27 and earlier, and 1.4.229 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Sound and...
Oracle Java - Floating-Point Value Denial of Service
Oracle Java - Floating-Point Value Denial of Service source: https://www.securityfocus.com/bid/46091/info Oracle Java is prone to a remote denial-of-service vulnerability. Successful attacks will cause applications written in Java to hang, creating a denial-of-service condition. This issue affect...
Opera Web Browser 11.00 - 'option' HTML Element Integer Overflow
source: https://www.securityfocus.com/bid/46003/info Opera Web Browser is prone to a remote integer-overflow vulnerability. Successful exploits will allow an attacker to run arbitrary code in the context of the user running the application. Failed attacks will cause denial-of-service conditions...
TinyBB 'Profile' SQL Injection Vulnerability
TinyBB is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective righ...
Primal Fusion openSite 'db_driver' Parameter Multiple Local File Include Vulnerabilities
openSite is prone to multiple local file-include vulnerabilities because it fails to properly sanitize user-supplied input. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...
Sahana Disaster Management System 'sel' Parameter SQL Injection Vulnerability
Sahana Disaster Management System is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent...
Alt-N WebAdmin Information Disclosure Vulnerability (Jan 2011) - Active Check
Alt-N WebAdmin is prone to a remote information disclosure vulnerability because it fails to properly sanitize user-supplied input. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...
QuickPHP <= 1.9.1 Directory Traversal Vulnerability - Active Check
QuickPHP is prone to a directory traversal vulnerability because it fails to sufficiently sanitize user-supplied input. Copyright C 2011 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...
DGNews 2.1 SQL Injection
Remote SQL Injection Vulnerability name : DGNews v 2.1 Author : kalashnikov dork : inurl:news.php?go=fullnews&newsid admincp : admin/login.php // the user is "admin"===========MYSQL INJ======= http://localhost/pach/news.php?go=fullnews&newsid=1' =========================== Warning: mysqlnumrows:...
SquareCMS 0.3.1 (post.php) SQL Injection Vulnerability
Exploit for php platform in category web applications SquareCMS 0.3.1 post.php Remote SQL Injection Vulnerability found by cOndemned vendor: http://spoolio.co.cc/ download: http://webscripts.softpedia.com/script/Content-Management/Square-CMS-66303.html prior versions may also be affected source o...
SquareCMS 0.3.1 - post.php SQL Injection
SquareCMS 0.3.1 - post.php SQL Injection SquareCMS 0.3.1 post.php Remote SQL Injection Vulnerability found by cOndemned vendor: http://spoolio.co.cc/ download: http://webscripts.softpedia.com/script/Content-Management/Square-CMS-66303.html prior versions may also be affected source of post.php...