1983 matches found
CactuShop XSS and SQL injection flaws
The remote host runs CactuShop, an e-commerce web application written in ASP. The remote version of this software is vulnerable to cross-site scripting due to a lack of sanitization of user-supplied data in the script SPDX-FileCopyrightText: 2004 David Maciejak Some text descriptions might be...
Incomplete Basic Authentication DoS Vulnerability
It was possible to kill the web server by sending an invalid request with an incomplete Basic authentication. SPDX-FileCopyrightText: 2004 Michel Arboi Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier...
dwhttpd format string
The remote web server is vulnerable to a format string attack. SPDX-FileCopyrightText: 2002 Michel Arboi Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Interspire ArticleLive 2005 XSS Vulnerability
The remote web server is running ArticleLive, a set of CGIs designed to simplify the management of a news site which is vulnerable to a cross site scripting issue. SPDX-FileCopyrightText: 2005 Noam Rathaus Some text descriptions might be excerpted from a referenced sources, and are Copyright C by...
Format string on HTTP header name
The remote web server seems to be vulnerable to a format string attack on HTTP headers names. SPDX-FileCopyrightText: 2004 Michel Arboi Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
The ACC router shows configuration without authentication
The remote router is an ACC router. Some software versions on this router will allow an attacker to run the SHOW command without first providing any authentication to see part of the router SPDX-FileCopyrightText: 2000 Sebastian Andersson Some text descriptions might be excerpted from a reference...
SOCKS4 Username Overflow DoS Vulnerability
It was possible to kill the remote SOCKS4 server by sending a request with a too long username. SPDX-FileCopyrightText: 2002 Michel Arboi Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
AnalogX SimpleServer:WWW DoS
It was possible to kill the remote web server by sending 640 @ character to it. SPDX-FileCopyrightText: 2002 Michel Arboi Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
DSA-878-1 netpbm-free - buffer overflow
Bulletin has no description...
DSA-874-1 lynx - buffer overflow
Bulletin has no description...
DSA-858-1 xloadimage - buffer overflows
Bulletin has no description...
DSA-845-1 mason - programming error
Bulletin has no description...
DSA-816-1 xfree86 - integer overflow
Bulletin has no description...
EMC Legato Networker Multiple Vulnerabilities
The remote host is running one of the following products : - Legato Networker - Sun StorEdge Enterprise Backup Software - Sun Solstice Backup Software - Informix Storage Manager The installed version of this software is vulnerable to denial of service, unauthorized access and remote command...
DSA-797-2 zsync - buffer overflow
zsync, a file transfer program, includes a modified local copy of the zlib library, and is vulnerable to certain bugs fixed previously in the zlib package. There was a build error for the sarge i386 proftpd packages released in DSA 797-1. A new build, zsync\0.3.3-1.sarge.1.2, has been prepared to...
DSA-791-1 maildrop - missing privilege release
Bulletin has no description...
DSA-788-1 kismet - several
Bulletin has no description...
Allegro Software RomPager 2.10 Malformed Authentication Request DoS
The remote host is running Allegro Software RomPager version 2.10, according to its banner. This version is vulnerable to a denial of service attack that can be exploited by sending a specifically crafted request to crash the affected system. Sarju Bhagat GPLv2 include"compat.inc"; ifdescription...
DSA-764-1 cacti - several
Bulletin has no description...
invisionXSSSQL.txt
GulfTech Security Research June 7th, 2005 Vendor : Invision Power Services URL : http://www.invisionblog.com Version : All Versions Prior To 1.1.2 Final Risk : Multiple Vulnerabilities Description: Invision Blog is a community based blogging software that can be integrated into Invision Power...