1952 matches found
DSA-599-1 tetex-bin - integer overflows
Bulletin has no description...
DSA-597-1 cyrus-imapd - buffer overflow
Bulletin has no description...
phpBB viewtopic.php highlight Parameter SQL Injection (ESMARKCONANT)
The remote host is running phpBB. There is a flaw in the remote software that could allow anyone to inject arbitrary SQL commands in the login form. An attacker could exploit this flaw to bypass the authentication of the remote host or execute arbitrary SQL statements against the remote database...
InnerMedia DynaZip library vulnerable to buffer overflow via long file names
Overview Releases prior to version 5.00.04 of the InnerMedia DynaZip compression library contain a buffer overflow that may allow a remote attacker to execute arbitrary code. Description DynaZip is a popular compression library for the Microsoft Windows platform. A bounds checking deficiency in...
DSA-589-1 libgd - integer overflows
Bulletin has no description...
zgv: Multiple buffer overflows
Background zgv is a console image viewer based on svgalib. Description Multiple arithmetic overflows have been detected in the image processing code of zgv. Impact An attacker could entice a user to open a specially-crafted image file, potentially resulting in execution of arbitrary code with the...
HTTP Header Value Remote Format String
The remote web server seems to be vulnerable to a remote format string attack based on the way it responds to a request containing a header whose value includes a format string. An anonymous attacker may be able to leverage this flaw to make the affected service crash or to execute arbitrary code...
HTTP URI Handling Format String
The remote web server seems to be vulnerable to a format string attack on the URI. An attacker might use this flaw to make it crash or even execute arbitrary code on this host. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid15640; scriptversion"$Revision: 1.19 $";...
HTTP Header Name Remote Format String
The remote web server seems to be vulnerable to a remote format string attack based on the way it responds to a request containing a header whose name includes a format string. An anonymous attacker may be able to leverage this flaw to make the affected service crash or to execute arbitrary code ...
DSA-581-1 xpdf - integer overflows
Bulletin has no description...
DSA-578-1 mpg123 - buffer overflow
Bulletin has no description...
[BUGZILLA] Vulnerabilities in Bugzilla 2.16.6 and 2.18rc2
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Bugzilla Security Advisory October 24, 2004 Summary ======= Bugzilla is a Web-based bug-tracking system, used by a large number of software projects. This advisory covers three security bugs that have recently been discovered and fixed in the Bugzilla...
[SA12960] IPplan Unspecified SQL Injection Vulnerabilities
TITLE: IPplan Unspecified SQL Injection Vulnerabilities SECUNIA ADVISORY ID: SA12960 VERIFY ADVISORY: http://secunia.com/advisories/12960/ CRITICAL: Moderately critical IMPACT: Manipulation of data WHERE: From local network SOFTWARE: IPplan 3.x http://secunia.com/product/4131/ DESCRIPTION: Some...
DSA-573-1 cupsys - integer overflows
Bulletin has no description...
DSA-570-1 libpng - integer overflow
Bulletin has no description...
DSA-569-1 netkit-telnet-ssl - invalid free(3)
Bulletin has no description...
ocPortal index.php req_path Parameter Remote File Inclusion
The remote host is running ocPortal, a content management system written in PHP. There is a bug in the remote version of this software which may allow an attacker to execute arbitrary commands on the remote host by using a file inclusion bug in the file 'index.php'. An attacker may execute...
DSA-564-1 mpg123 - missing user input sanitising
Bulletin has no description...