DSA-648-1 xpdf - buffer overflow

Bulletin has no description...

DSA-643-1 queue - buffer overflows

Bulletin has no description...

DSA-640-1 gatos - buffer overflow

Bulletin has no description...

Novell GroupWise 6.5.3 WebAccess Multiple XSS

The remote host is running Novell GroupWise WebAccess, a commercial groupware package. The remote version of this software is affected by multiple cross-site scripting flaws due to a lack of sanitization of user-supplied data. Successful exploitation of this issue may allow an attacker to use the...

DSA-637-1 exim-tls - buffer overflow

Bulletin has no description...

DSA-636-1 glibc - insecure temporary files

Bulletin has no description...

KPdf, KOffice: More vulnerabilities in included Xpdf

Background KPdf is a KDE-based PDF viewer included in the kdegraphics package. KOffice is an integrated office suite for KDE. Description KPdf and KOffice both include Xpdf code to handle PDF files. Xpdf is vulnerable to multiple new integer overflows, as described in GLSA 200412-24. Impact An...

DSA-627-1 namazu2 - unsanitised input

Bulletin has no description...

tiff: New overflows in image decoding

Background The TIFF library contains encoding and decoding routines for the Tag Image File Format. It is called by numerous programs, including GNOME and KDE applications, to interpret TIFF images. Description infamous41md found a potential integer overflow in the directory entry count routines o...

DSA-624-1 zip - buffer overflow

Bulletin has no description...

DSA-625-1 pcal - buffer overflows

Bulletin has no description...

WHM AutoPilot < 2.5.20 Multiple Remote Vulnerabilities

The remote web server is running WHM AutoPilot, a script designed to administer a web-hosting environment. The remote version of this software is vulnerable to various flaws that may allow an attacker to execute arbitrary commands on the remote host, obtain information about the remote host's PHP...

YaCy Peer-To-Peer Search Engine XSS

The remote host runs YaCy, a peer-to-peer distributed web search engine and caching web proxy. The remote version of this software is vulnerable to multiple cross-site scripting due to a lack of sanitization of user-supplied data. Successful exploitation of this issue may allow an attacker to use...

DSA-618-1 imlib - buffer overflows, integer overflows

Bulletin has no description...

DSA-614-1 xzgv - integer overflows

Bulletin has no description...

F-Secure Policy Manager Path Disclosure

The remote host is running F-Secure Policy Manager, a distributed administration software allowing a system administrator to control applications from a single web console. There is a flaw in the file '/fsms/fsmsh.dll' that discloses the physical path this application is under. An attacker could...

CVE-2004-0451

Multiple format string vulnerabilities in the 1 logquit, 2 logerr, or 3 loginfo functions in Software Upgrade Protocol SUP allows remote attackers to execute arbitrary code via format string specifiers in messages that are logged by syslog...

DEBIAN-CVE-2004-0451

Multiple format string vulnerabilities in the 1 logquit, 2 logerr, or 3 loginfo functions in Software Upgrade Protocol SUP allows remote attackers to execute arbitrary code via format string specifiers in messages that are logged by syslog...

DSA-604-1 hpsockd - missing input sanitising

Bulletin has no description...

CuteFTP Professional FTP Command Response Remote Overflow

The remote host has the program CuteFTP.exe installed. CuteFTP is an FTP client which contains several buffer overflow conditions. Using this version of CuteFTP to connect to a malicious FTP server could cause the client to crash, or could result in arbitrary code execution. C Tenable Network...