2480 matches found
Multiple Vendor Malformed ZIP Archive Anti-virus Detection Bypass
Anti-virus products provide protection against dangerous content such as viruses, trojans, worms and other destructive programs. A non-privileged code execution vulnerability has been reported in the way multiple anti-virus products scan ZIP archive files. The vulnerability is due to ANSI escape...
Cross site request forgery (csrf)
Cross-site request forgery CSRF vulnerability in Forms/PortForwardingEdit1 on the ZyXEL O2 DSL Router Classic allows remote attackers to hijack the authentication of administrators for requests that insert cross-site scripting XSS sequences via the PortRuleName parameter...
Cross site request forgery (csrf)
Multiple cross-site request forgery CSRF vulnerabilities in phpList 2.10.13 and earlier allow remote attackers to hijack the authentication of administrators for requests that 1 create a list or 2 insert cross-site scripting XSS sequences. NOTE: this issue exists because of an incomplete fix for...
CVE-2011-1669
Directory traversal vulnerability in wp-download.php in the WP Custom Pages module 0.5.0.1 for WordPress allows remote attackers to read arbitrary files via ..%2F encoded dot dot sequences in the url parameter...
CVE-2011-1566
Directory traversal vulnerability in dc.exe 9.00.00.11059 and earlier in 7-Technologies Interactive Graphical SCADA System IGSS allows remote attackers to execute arbitrary programs via ..\ dot dot backslash sequences in opcodes 1 0xa and 2 0x17 to TCP port 12397...
Cross site request forgery (csrf)
Multiple cross-site request forgery CSRF vulnerabilities in the configuration screen in wp-relatedposts.php in the WP Related Posts plugin 1.0 for WordPress allow remote attackers to hijack the authentication of administrators for requests that insert cross-site scripting XSS sequences via the 1...
Hex-Rays IDA Pro Multiple Vulnerabilities
This host is installed with Hex-Rays IDA Pro and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: secpodidapromultvuln.nasl 7044 2017-09-01 11:50:59Z teissa $ Hex-Rays IDA Pro Multiple Vulnerabilities Authors: Sooraj KS Copyright: Copyright c 2011 SecPod, http://www.secpod.co...
CVE-2011-1050
Unspecified vulnerability in Hex-Rays IDA Pro 5.7 and 6.0 has unknown impact and attack vectors related to "converson of string encodings" and "inconsistencies in the handling of UTF8 sequences by the user interface."...
Directory traversal
Directory traversal vulnerability in the GetData method in the Dell DellSystemLite.Scanner ActiveX control in DellSystemLite.ocx 1.0.0.0 allows remote attackers to read arbitrary files via directory traversal sequences in the fileID parameter...
CVE-2011-1050
Hex-Rays IDA Pro versions 5.7 and 6.0 are affected by CVE-2011-1050. The description notes an unspecified vulnerability with unknown impact and attack vectors related to the conversion of string encodings and inconsistencies in the handling of UTF-8 sequences in the user interface. OpenVAS and re...
CVE-2011-1050
Unspecified vulnerability in Hex-Rays IDA Pro 5.7 and 6.0 has unknown impact and attack vectors related to "converson of string encodings" and "inconsistencies in the handling of UTF8 sequences by the user interface."...
php: XSS mitigation bypass via utf8_decode()
The utf8decode function in PHP before 5.3.4 does not properly handle non-shortest form UTF-8 encoding and ill-formed subsequences in UTF-8 data, which makes it easier for remote attackers to bypass cross-site scripting XSS and SQL injection protection mechanisms via a crafted string...
Multiple Vulnerabilities in ReOS
High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in ReOS which could be exploited to perform SQL injection attacks and compromise vulnerable system. 1 SQL injection vulnerabilities in ReOS 1.1 The vulnerability exists due to input sanitation errors in the...
CVE-2011-0474
Google Chrome before 8.0.552.237 and Chrome OS before 8.0.552.344 do not properly handle Cascading Style Sheets CSS token sequences in conjunction with cursors, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors that lead to a...
CVE-2011-0474
Removed by vendor...
Buffer overflow
Buffer overflow in the log2visutf8 function in pyfribidi.c in GNU FriBidi 0.19.1, 0.19.2, and possibly other versions, as used in PyFriBidi 0.10.1, allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted Arabic UTF-8 string that causes original...
Type confusion
The CSSParser::parseFontFaceSrc function in WebCore/css/CSSParser.cpp in WebKit, as used in Google Chrome before 8.0.552.224, Chrome OS before 8.0.552.343, webkitgtk before 1.2.6, and other products does not properly parse Cascading Style Sheets CSS token sequences, which allows remote attackers ...
CVE-2010-3962
Use-after-free vulnerability in Microsoft Internet Explorer 6, 7, and 8 allows remote attackers to execute arbitrary code via vectors related to Cascading Style Sheets CSS token sequences and the clip attribute, aka an "invalid flag reference" issue or "Uninitialized Memory Corruption...
