UBUNTU-CVE-2014-4240

Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.6.17 and earlier allows local users to affect confidentiality and integrity via vectors related to SRREP...

UBUNTU-CVE-2014-4207

Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.37 and earlier allows remote authenticated users to affect availability via vectors related to SROPTZR...

Mandriva Linux Security Advisory : iodine (MDVSA-2014:128)

Updated iodine packages fix security vulnerability : Oscar Reparaz discovered an authentication bypass vulnerability in iodine, a tool for tunneling IPv4 data through a DNS server. A remote attacker could provoke a server to accept the rest of the setup or also network traffic by exploiting this...

Monkey HTTP Server 0.4/0.5 Invalid POST Request Denial of Service Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/6096/info A denial of service vulnerability has been reported for Monkey HTTP server. The vulnerability is due to inadequate checks being performed when decoding POST requests. An attacker can exploit this vulnerability b...

CVS Kit CVS Server 1.10 .8 Instructed File Create Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/1523/info The cvs client blindly trust paths returned to it by the server. Therefore, a cvs client could be tricked into creating a file anywhere on the system by a malicious server. This problem can be tested yourself as...

mod_accounting Module 0.5 - Blind SQL Injection

No description provided by source. - Affected Vendor: http://sourceforge.net/projects/mod-acct/files/ - Affected Software: modaccounting - Affected Version: 0.5. Other earlier versions may be affected. - Issue type: Blind SQL injection - Release Date: 20 Sep 2013 - Discovered by: Eldar Wireghoul...

Savant Web Server 3.1 CGITest.HTML Cross Site Scripting Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/8242/info cgitest.html has been reported prone to cross-site scripting attacks. The issue occurs due to a lack of sufficient sanitization performed on data supplied to the cgitest.html script. This issue could be exploite...

Trillian 0.74 IRC PART Message Denial of Service Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/5776/info A vulnerability has been reported for Trillian. Reportedly, Trillian is prone to a denial of service condition when certain it receives messages about a user leaving a non-specified channel or a channel that the...

Macromedia ColdFusion MX 6.0 - Remote Development Service File Disclosure Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/8109/info A vulnerability has been reported for the RDS service that may allow an attacker to obtain unauthorized access to a data residing on a ColdFusion MX server. The vulnerability is due to the way that authenticatio...

Perception LiteServe 2.0.1 DNS Wildcard Cross Site Scripting Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/6131/info A cross site scripting vulnerability has been discovered in Perception LiteServe. It should be noted that this vulnerability is limited to server configurations with Wildcard DNS enabled. It has been reported th...

PunkBuster < 1.229 (WebTool Service) Remote Buffer Overflow DoS

No description provided by source. Luigi Auriemma Application: PunkBuster http://www.punkbuster.com Versions: PunkBuster for servers, versions minor than v1.229: America's Army = v1.228 Battlefield 1942 = v1.158 Battlefield 2 = v1.184 Battlefield Vietnam = v1.150 Call of Duty = v1.173 Call of Dut...

Citrix Metaframe for Windows NT 4.0 TSE 1.8 Java ICA Environment DoS

No description provided by source. source: http://www.securityfocus.com/bid/5439/info Citrix Metaframe is a commercial available remote desktop application. This issue affects Metaframe on the Microsoft Windows platform. It has been discovered that Metaframe can be made to become unstable. By...

Perl Web Server 0.x Path Traversal Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/2648/info Perl Web Server, an experimental cross-platform web server project, does not prevent a remote user from requesting documents outside the ServerRoot location of the virtual / directory. This means that if an...

XTux Server 2001.0 6.01 Garbage Denial of Service Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/4260/info XTux is a multiplayer network game for Linux. The server component June 01, 2001 version is vulnerable to a denial of service initiated by connecting to the server and sending unexpected characters. This causes...

Kohana Framework 2.3.3 - Directory Traversal Vulnerability

No description provided by source. Title: ====== Kohana Framework v2.3.3 - Directory Traversal Vulnerability Date: ===== 2013-01-27 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=841 VL-ID: ===== 837 Common Vulnerability Scoring System:...

Plug and Play Web Server 1.0 002c Directory Traversal Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/8645/info It has been reported that Plug and Play Web Server is prone a directory traversal issue allowing a remote attacker to traverse outside the server root directory by using '../' or '..' character sequences...

IIS 1.0,Netscape Server 1.0/1.12,OReilly WebSite Professional 1.1 b BAT/.CMD Remote Command Execution

No description provided by source. IIS 1.0,Netscape Commerce Server 1.0/Communications Server 1.12,OReilly Software WebSite Professional 1.1 b BAT/.CMD Remote Command Execution source: http://www.securityfocus.com/bid/2023/info Some web servers that allow batch files to be executed via CGI are...

1st Class Internet Solutions 1st Class Mail Server 4.0 - Remote Buffer Overflow Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/9794/info 1st Class Mail Server has been reported prone to a remote buffer overflow vulnerability. The issue exists due to a lack of sufficient boundary checks performed on user-supplied data. A remote attacker may pass...

Windows 2000/95/98/ME/NT 3.5.x/Enterprise Server 4.0/Terminal Server 4.0/Workstation 4.0 MS DoS Device Name DoS

No description provided by source. Windows 2000 Advanced Server/2000 Datacenter Server/2000 Professional/2000 Server/95/98/ME/NT 3.5.x/NT Enterprise Server 4.0/NT Terminal Server 4.0/NT Workstation 4.0 MS DOS Device Name DoS Vulnerability source: http://www.securityfocus.com/bid/1043/info Due to ...

Floosietek FTGate Mail Server 1.2 index.fts folder Parameter XSS

No description provided by source. source: http://www.securityfocus.com/bid/10058/info It has been reported that FTGate is prone to multiple remote input validation vulnerabilities; a cross-site scripting issue and an HTML injection vulnerability. These issues are due to a failure of the...