2902 matches found
Sun Java Plugin may create temporary files with predictable names
Overview The Sun Java Plugin may allow remote users to create files with arbitrary content in a specific location. Description From the Sun Java Plugin page:Java Plug-in technology, included as part of the Java 2 Runtime Environment, Standard Edition JRE, establishes a connection between popular...
CVE-2005-0233
The International Domain Name IDN support in Firefox 1.0, Camino .8.5, and Mozilla before 1.7.6 allows remote attackers to spoof domain names using punycode encoded domain names that are decoded in URLs and SSL certificates in a way that uses homograph characters from other character sets, which...
Default SNMP Community Strings in Cisco IP/VC Products
...
Ventia DeskNow Multiple Remote Vulnerabilities (deprecated)
Binary data 2586.prm...
MS-SQL Server Protocol - General Settings (CAN-2000-1209; CVE-2002-1123)
...
MSN Messenger Service Popup Messages (CAN-1999-0630)
...
Microsoft Windows ANI File Parsing Buffer Overflow (MS05-002; CVE-2004-1049; CVE-2007-0038)
...
[Full-Disclosure] Integrigy Security Advisory - High Risk Security Issues in the Oracle Database and Oracle Applications
Integrigy Security Advisory High Risk Security Issues in the Oracle Database and Oracle Applications Oracle Critical Patch Update - January 2005 January 19, 2005 Summary: Oracle has released the its first Critical Patch Update January 2005 and fixes 23 vulnerabilities in the Oracle Database, Orac...
newsgrab -- insecure file and directory creation
The newsgrab script uses insecure permissions during the creation of the local output directory and downloaded files. After a file is created, permissions on it are set using the mode value of the newsgroup posting. This can potentially be a problem when the mode is not restrictive enough. In...
IlohaMail Insecure Configuration Files
------------------------------------------------ Advisory Name : IlohaMail Insecure Configuration Files Release Date : 10 January, 2004 Application : IlohaMail http://ilohamail.org/ Vulnerable: IlohaMail-0.8.14-rc1 and lower Not Vulnerable: IlohaMail-0.8.14-rc2 Author : SRR Project Group of Ready...
sugarCRM.txt
---------------------------------------------------------------------------- Cross Site Scripting Vulnerabilities and Possible Code Execution in SugarCRM ---------------------------------------------------------------------------- Author: Jose Antonio Coret Joxean Koret Date: 2004 Location: Basqu...
WHM-autopilot.txt
GulfTech Security Research December 28th, 2004 Vendor : Benchmark Designs, LLC URL : http://www.whmautopilot.com/ Version : WHM AutoPilot v2.4.6.5 && Others All Versions Risk : Multiple Vulnerabilities Description: Started by a webhost looking for more out of a simple managment script, Brandee...
CVE-2004-2159
Multiple buffer overflows in XMLStarlet Command Line XML Toolkit 0.9.3 have unknown impact and attack vectors via 1 xmlelem.c and 2 xmlselect.c...
Linux 2.6 Kernel Capability LSM Module Local Privilege Elevation
Venustech AD-Lab www.venustech.com.cn Security Advisory Advisory: ADLAB-04003Linux 2.6. Kernel Capability LSM Module Local Privilege Elevation Authors: [email protected] Release: 09/12/04 Class: Design Error Remote: No, local Vulnerable: Linux kernel 2.6. Linux kernel 2.5.72-lsm1...
CVE-2001-1413
...
Multiple Vulnerabilities In Kayako eSupport v2.x
GulfTech Security Research December 18th, 2004 Vendor : Kayako Web Solutions URL : http://www.kayako.com/ Version : Kayako eSupport v2.x Risk : Multiple Vulnerabilities Description: Kayako eSupport is one of the most feature packed support systems; in this tour you will find why over a thousand...
WordPress < 1.2.2 Multiple Vulnerabilities
Binary data 2465.prm...
Cisco Unity Integrated with Exchange Has Default Passwords
...
UBB.threads < 6.5.1 Multiple XSS
There are various cross-site scripting issues in the remote version of this software. An attacker may exploit them to use the remote website to inject arbitrary HTML and script code into a user's browser to be executed within the security context of the affected website. %NASLMINLEVEL 70300 C...