4841 matches found
PT-2005-4858 · Simple Machines · Simple Machines Forum
Name of the Vulnerable Software and Affected Versions: Simple Machines Forum SMF versions 1.1 rc1 and earlier Description: A SQL injection issue in Memberlist.php allows remote attackers to potentially execute arbitrary SQL commands via the start parameter. However, the vendor and third parties...
security flaw
Multiple heap-based buffer overflows in the 1 DCTStream::readProgressiveSOF and 2 DCTStream::readBaselineSOF functions in the DCT stream parsing code Stream.cc in xpdf 3.01 and earlier, as used in products such as a Poppler, b teTeX, c KDE kpdf, d pdftohtml, e KOffice KWord, f CUPS, and g...
CVE-2005-3940
SQL injection vulnerability in ringmaker.php in Orca Ringmaker 2.3c and earlier allows remote attackers to execute arbitrary SQL commands via the start parameter...
PT-2005-4313 · Chipmunk Scripts · Chipmunk Scripts Guestbook
Name of the Vulnerable Software and Affected Versions: Chipmunk Scripts Guestbook affected versions not specified Description: The issue allows remote attackers to obtain the installation path of the script by causing an error message to be displayed. This can be achieved through a URL that...
CVE-2005-2380
PHP Surveyor 0.98 is affected by multiple cross-site scripting vulnerabilities. The issue allows remote attackers to inject arbitrary script/HTML via parameters to browse.php (sid, start, id) or to dataentry.php/export.php (sid). OpenVAS notes additional vulnerabilities (SQL injection and path di...
SUSE-SA:2005:032: java2
The remote host is missing the patch for the advisory SUSE-SA:2005:032 java2. Two security bugs in the SUN Java implementation have been fixed. Java Web Start can be exploited remotely due to an error in input validation of tags in JNLP files, so an attacker can pass arbitrary command-line option...
CVE-2002-2005
Technical details about CVE-2002-2005 are not publicly available in the provided documents. No concrete affected product/version, root cause, or remediation are described here. Monitor for updates from trusted sources.
CVE-2005-1973
Java Web Start in Java 2 Platform Standard Edition J2SE 5.0 and 5.0 Update 1 allows applications to assign permissions to themselves and gain privileges...
CVE-2005-1973
CVE-2005-1973 affects Java Web Start in J2SE 5.0 and 5.0 Update 1, where applications can assign permissions to themselves and gain privileges. The connected documents corroborate this vulnerability and its privilege-escalation risk, but do not provide a patch version or explicit remediation steps.
[SA15671] Java Web Start Sandbox Security Bypass Vulnerability
---------------------------------------------------------------------- Bist Du interessiert an einem neuen Job in IT-Sicherheit? Secunia hat zwei freie Stellen als Junior und Senior Spezialist in IT- Sicherheit: http://secunia.com/secuniavacancies/...
PT-2005-2826 · Mwchat · Mwchat
Name of the Vulnerable Software and Affected Versions: MWChat versions 6.x Description: The issue allows remote attackers to execute arbitrary PHP code via the CONFIGMWCHAT Libs parameter in the start lobby.php file. Recommendations: For MWChat version 6.x, consider restricting access to the star...
CVE-2005-1778
Cross-site scripting XSS vulnerability in readpmsg.php in PostNuke 0.750 allows remote attackers to inject arbitrary web script or HTML via the start parameter...
CVE-2005-0418
Argument injection vulnerability in Java Web Start for J2SE 1.4.2 up to 1.4.206, on Mac OS X, allows untrusted applications to gain privileges via the value parameter of a property tag in a JNLP file. NOTE: it is highly likely that this item will be MERGED with CVE-2005-0836...
AZL-37051 CVE-2005-0868 affecting package tn5250 0.17.6-4
AS/400 Telnet 5250 terminal emulation clients, as implemented by 1 IBM client access, 2 Bosanova, 3 PowerTerm, 4 Mochasoft, and possibly other emulations, allows malicious AS/400 servers to execute arbitrary commands via a STRPCO Start PC Organizer command followed by STRPCCMD Start PC command, a...
AZL-7383 CVE-2005-0868 affecting package tn5250 0.17.4-26
AS/400 Telnet 5250 terminal emulation clients, as implemented by 1 IBM client access, 2 Bosanova, 3 PowerTerm, 4 Mochasoft, and possibly other emulations, allows malicious AS/400 servers to execute arbitrary commands via a STRPCO Start PC Organizer command followed by STRPCCMD Start PC command, a...
GLSA-200503-28 : Sun Java: Web Start argument injection vulnerability
The remote host is affected by the vulnerability described in GLSA-200503-28 Sun Java: Web Start argument injection vulnerability Jouko Pynnonen discovered that Java Web Start contains a vulnerability in the way it handles property tags in JNLP files. Impact : By enticing a user to open a malicio...
CVE-2005-0418
Argument injection vulnerability in Java Web Start for J2SE 1.4.2 up to 1.4.206, on Mac OS X, allows untrusted applications to gain privileges via the value parameter of a property tag in a JNLP file. NOTE: it is highly likely that this item will be MERGED with CVE-2005-0836...
CVE-2005-0418
CVE-2005-0418 is an argument-injection vulnerability in Java Web Start for J2SE 1.4.2 (up to 1.4.2_06) on Mac OS X. The flaw allows an untrusted JNLP file to inject values via a property tag, enabling privilege escalation. Connected entries also reference CVE-2005-0836, which describes a related ...
Sun Java: Web Start argument injection vulnerability
Background Sun provides implementations of Java Development Kits JDK and Java Runtime Environments JRE. These implementations provide the Java Web Start technology that can be used for easy client-side deployment of Java applications. Description Jouko Pynnonen discovered that Java Web Start...