DSA-1138-1 cfs - integer overflow

Bulletin has no description...

DSA-1098-1 - horde3 - missing input sanitising

Bulletin has no description...

DSA-1058-1 awstats - missing input sanitising

Bulletin has no description...

[VulnWatch] Cisco Security Advisory: Cisco 11500 Content Services Switch HTTP Request Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: Cisco 11500 Content Services Switch HTTP Request Vulnerability Advisory ID: cisco-sa-20060405-css http://www.cisco.com/warp/public/707/cisco-sa-20060405-css.shtml Revision 1.0 For Public Release 2006 April 05 1500 GMT UTC -...

DSA-994-1 freeciv - denial of service

Bulletin has no description...

DSA-959-1 unalz - buffer overflow

Bulletin has no description...

DSA-955-1 mailman - DoS

Bulletin has no description...

DSA-942-1 albatross - design error

Bulletin has no description...

DSA-937-1 tetex-bin - buffer overflows

Bulletin has no description...

Xpdf, GPdf, CUPS, Poppler: Multiple vulnerabilities

Background Xpdf and GPdf are PDF file viewers that run under the X Window System. Poppler is a PDF rendering library based on Xpdf code. The Common UNIX Printing System CUPS is a cross-platform print spooler. It makes use of Xpdf code to handle PDF files. Description infamous41md discovered that...

DSA-920-1 ethereal - buffer overflow

Bulletin has no description...

DSA-915-1 helix-player - buffer overflow

Bulletin has no description...

DSA-912-1 centericq - denial of service

Bulletin has no description...

DSA-909-1 horde3 - missing input sanitising

Bulletin has no description...

BadBlue invalid null byte vulnerability

It was possible to read the content of /EXT.INI BadBlue configuration file by sending an invalid GET request. A cracker may exploit this vulnerability to steal the passwords. OpenVAS Vulnerability Test $Id: badbluenullbyte.nasl 7175 2017-09-18 11:55:15Z cfischer $ Description: BadBlue invalid nul...

Too long basic authentication DoS

It was possible to kill the web server by sending a request with an too long Basic authentication field. A cracker may exploit this vulnerability to make your web server crash continually or even execute arbirtray code on your system. OpenVAS Vulnerability Test $Id: wwwtoolongauthDoS.nasl 8023...

The ACC router shows configuration without authentication

The remote router is an ACC router. Some software versions on this router will allow an attacker to run the SHOW command without first providing any authentication to see part of the router's configuration. OpenVAS Vulnerability Test $Id: acc.nasl 8023 2017-12-07 08:36:26Z teissa $ Description: T...

BrowseGate HTTP headers overflows

It was possible to kill the BrowseGate proxy by sending it an invalid request with too long HTTP headers Authorization and Referer A cracker may exploit this vulnerability to make your web server crash continually or even execute arbirtray code on your system. OpenVAS Vulnerability Test $Id:...

Interspire ArticleLive 2005 XSS Vulnerability

The remote web server is running ArticleLive, a set of CGIs designed to simplify the management of a news site which is vulnerable to a cross site scripting issue. SPDX-FileCopyrightText: 2005 Noam Rathaus Some text descriptions might be excerpted from a referenced sources, and are Copyright C by...

CactuShop XSS and SQL injection flaws

The remote host runs CactuShop, an e-commerce web application written in ASP. The remote version of this software is vulnerable to cross-site scripting due to a lack of sanitization of user-supplied data in the script SPDX-FileCopyrightText: 2004 David Maciejak Some text descriptions might be...