Fixed in Apache Tomcat 5.5.18, 5.0.SVN

Moderate: Cross-site scripting CVE-2006-7195 The implicit-objects.jsp in the examples webapp displayed a number of unfiltered header values. This enabled a XSS attack. These values are now filtered. Affects: 5.0.0-5.0.30, 5.5.0-5.5.17...

Update: ViewCVS and ViewVC 'checkout view' content type fixation issue

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Hi! Moritz Naumann wrote: This does not impact how much the rest of my report applies. My findings are now being discussed on the ViewVC developers mailing list 1. They apparently also impact ViewVC. Whether and to which degree what I am reporting c...

[SA23826] Django Two Vulnerabilities

TITLE: Django Two Vulnerabilities SECUNIA ADVISORY ID: SA23826 VERIFY ADVISORY: http://secunia.com/advisories/23826/ CRITICAL: Moderately critical IMPACT: Security Bypass, System access WHERE: From remote SOFTWARE: Django 0.x http://secunia.com/product/13287/ DESCRIPTION: Some vulnerabilities hav...

CVE-2007-0387: Undefined Security Weakness

SQL injection vulnerability in models/category.php in the Weblinks component for Joomla! SVN 20070118 comweblinks allows remote attackers to execute arbitrary SQL commands via the catid parameter...

FreeBSD : mplayer -- buffer overflow in the code for RealMedia RTSP streams. (b2ff68b2-9f29-11db-a4e4-0211d87675b7)

A potential buffer overflow was found in the code used to handle RealMedia RTSP streams. When checking for matching asm rules, the code stores the results in a fixed-size array, but no boundary checks are performed. This may lead to a buffer overflow if the user is tricked into connecting to a...

mplayer -- buffer overflow in the code for RealMedia RTSP streams.

A potential buffer overflow was found in the code used to handle RealMedia RTSP streams. When checking for matching asm rules, the code stores the results in a fixed-size array, but no boundary checks are performed. This may lead to a buffer overflow if the user is tricked into connecting to a...

Buffer-overflow in recvTextMessage and NETrecvFile in Warzone Resurrection 2.0.3 (SVN 127)

Luigi Auriemma Application: Warzone Resurrection http://home.gna.org/warzone/ Warzone 2100 http://www.strategyplanet.com/warzone2100/ Versions: = 2.0.3 and SVN = 127 Platforms: Windows, nix, BSD and others Bug: A buffer-overflow in recvTextMessage B buffer-overflow in NETrecvFile Exploitation: A...

Two crash vulnerabilities in Freeciv 2.1.0-beta1 (SVN 15 Jul 2006)

Luigi Auriemma Application: Freeciv http://www.freeciv.org Versions: = 2.1.0-beta1 and SVN = 15 Jul 2006 Platforms: Windows, nix, BSD, MacOS and more Bugs: A memcpy crash in generichandleplayerattributechunk B invalid memory access in handleunitorders Exploitation: remote, versus server Date: 23...

CVE-2006-3788

Multiple buffer overflows in multiplay.cpp in UFO2000 svn 1057 allow remote attackers to execute arbitrary code via 1 a long unit name in Net::recvaddunit,; 2 large values to Net::recvrules, Net::recvselectunit, Net::recvoptions, and Net::recvunitdata; and 3 a large mapdata GEODATA structure in...

CVE-2006-3791: Undefined Security Weakness

The decodestringmap function in servertransport.cpp for UFO2000 svn 1057 allows remote attackers to cause a denial of service daemon termination via a large keysize or valsize, which causes a crash when the resize function cannot allocate sufficient memory...

CVE-2006-3788: Undefined Security Weakness

Multiple buffer overflows in multiplay.cpp in UFO2000 svn 1057 allow remote attackers to execute arbitrary code via 1 a long unit name in Net::recvaddunit,; 2 large values to Net::recvrules, Net::recvselectunit, Net::recvoptions, and Net::recvunitdata; and 3 a large mapdata GEODATA structure in...

CVE-2006-3790: Undefined Security Weakness

The decodestringmap function in servertransport.cpp for UFO2000 svn 1057 allows remote attackers to cause a denial of service daemon termination via a keysize or valsize that is inconsistent with the packet size, which leads to a buffer over-read...

Format string

Format string vulnerability in the raydiumlog function in console.c in Raydium before SVN revision 310 allows local users to execute arbitrary code via format string specifiers in the format parameter, which are not properly handled in a call to raydiumconsolelineadd...

CVE-2006-2410

raydiumnetworknetcallexec function in network.c in Raydium SVN revision 312 and earlier allows remote attackers to cause a denial of service application crash via a packet of type 0xFF, which causes a null dereference...

CVE-2006-2408

Raydium is affected by multiple buffer overflows prior to SVN revision 310. The vulnerability allows remote attackers to execute arbitrary code by sending a large packet, exploiting two code paths: raydium_log in log.c and raydium_console_line_add in console.c, potentially triggered by a long pla...

CVE-2006-2409

CVE-2006-2409 affects Raydium prior to SVN revision 310, where a format string vulnerability in the raydium_log function (console.c) can allow local users to execute arbitrary code through format specifiers in the format parameter, not properly handled in a call to raydium_console_line_add. Affec...

CVE-2006-2410

raydiumnetworknetcallexec function in network.c in Raydium SVN revision 312 and earlier allows remote attackers to cause a denial of service application crash via a packet of type 0xFF, which causes a null dereference...

Raydium <= SVN 309 Multiple Remote Vulnerabilities Exploit

No description provided by source. Raydium = SVN 309 Multiple Remote Vulnerabilities Exploit http://www.milw0rm.com/sploits/05132006-raydiumx.zip milw0rm.com 2006-05-14...

Raydium <= SVN 309 Multiple Remote Vulnerabilities Exploit

Exploit for unknown platform in category dos / poc ========================================================== Raydium = SVN 309 Multiple Remote Vulnerabilities Exploit ========================================================== http://www.inj3ct0r.com/sploits/6147.zip 0day.today 2018-04-12...

raydium svn 309 - Multiple Vulnerabilities

raydium svn 309 - Multiple Vulnerabilities Raydium = SVN 309 Multiple Remote Vulnerabilities Exploit https://github.com/offensive-security/exploitdb-bin-sploits/raw/master/bin-sploits/1784.zip 05132006-raydiumx.zip...