2450 matches found
Обход проверки адреса IP в OpenSSH (protection bypass)
При определенной последовательности ключей в йале конфигурации не устанавливаются отдельные опции конфигурации на доступ с данным ключем...
CVE-1999-1273
Squid Internet Object Cache 1.1.20 allows users to bypass access control lists ACLs by encoding the URL with hexadecimal escape sequences...
CVE-2001-0642
The CVE-2001-0642 entry describes a directory traversal vulnerability in IncrediMail up to version 1400185 and earlier. By injecting leading “..” sequences into filenames listed in the content.ini file, local users could overwrite files on the local disk. The root cause is improper verification o...
Microsoft IIS 4.05.0 - FTP Denial of Service (MS01-026)
Microsoft IIS 4.05.0 - FTP Denial of Service MS01-026 source: https://www.securityfocus.com/bid/2717/info Due to a flaw in the pattern-matching function used by FTP commands, denial of service attacks can be successfully launched. If a user submits an FTP command along with a filename containing...
Microsoft IIS 4.0/5.0 - FTP Denial of Service (MS01-026)
source: https://www.securityfocus.com/bid/2717/info Due to a flaw in the pattern-matching function used by FTP commands, denial of service attacks can be successfully launched. If a user submits an FTP command along with a filename containing specially placed wildcard sequences, the...
Nosque Workshop MsgCore 1.9 - Denial of Service
source: https://www.securityfocus.com/bid/930/info There is a denial of service condition in Nosque Workshop's MsgCore SMTP server. The problem lies in memory used to store server input not being deallocated and eventually exhausted, causing the target NT host to freeze requiring a reboot. If a...
CVE-1999-1273
Squid Internet Object Cache 1.1.20 allows users to bypass access control lists ACLs by encoding the URL with hexadecimal escape sequences...
CVE-2026-45133: YAML Parser Stack Exhaustion via Unbounded Recursion in Nested Blocks, Sequences, and Mappings
More info at https://symfony.com/cve-2026-45133...
PT-2010-5625 · Openldap +1 · Libldap +3
Name of the Vulnerable Software and Affected Versions: openldap versions 2.2.13 through 2.4.22 openldap versions prior to 2.4.35 openldap-clients-2.2.13 openldap-servers-2.2.13 openldap-servers-sql-2.2.13 openldap-devel-2.2.13 compat-openldap-2.1.30 libldap-2.4-2 libldap-2.4-2-dbg libldap2-dev...