4077 matches found
CVE-2005-3150
Format string vulnerability in the LogFlush function in Weex 2.6.1.5, 2.6.1, and possibly other versions allows remote FTP servers to execute arbitrary code via format strings in filenames...
PT-2005-3043 · Gaim +1 · Gaim +1
Name of the Vulnerable Software and Affected Versions: Gaim versions prior to 1.5.0 Description: The issue allows remote attackers to cause a denial of service, potentially leading to application crashes, and may also enable the execution of arbitrary code. This is achieved by sending an away...
ProFTPD < 1.3.0rc2 Multiple Format Strings
Binary data 3113.prm...
CVE-2004-2264
Format string bug in the openaltfile function in filename.c for GNU less 382, 381, and 358 might allow local users to cause a denial of service or possibly execute arbitrary code via format strings in the LESSOPEN environment variable. NOTE: since less is not setuid or setgid, then this is not a...
CVE-2004-2237
Technical details for CVE-2004-2237 are not publicly available in the provided documents. Monitor for updates and expect future disclosures before any assessment of impact or remediation.
CVE-2004-2237
Unknown vulnerability in Moodle before 1.3.4 has unknown impact and attack vectors, related to "strings in Moodle texts."...
CVE-2004-2237: Undefined Security Weakness
Unknown vulnerability in Moodle before 1.3.4 has unknown impact and attack vectors, related to "strings in Moodle texts."...
CVE-2002-1788
Format string vulnerability in the nnexitmsg function in nn 6.6.0 through 6.6.3 allows remote NNTP servers to execute arbitrary code via format strings in server responses...
CVE-2005-1806
Format string vulnerability in PeerCast 0.1211 and earlier allows remote attackers to execute arbitrary code via format strings in the URL...
CVE-2005-1806
Format string vulnerability in PeerCast 0.1211 and earlier allows remote attackers to execute arbitrary code via format strings in the URL...
CVE-2004-1837
Cross-site scripting XSS vulnerability in Modsurvey 3.0.x before 3.0.16-pre2 and 3.2.x before 3.2.0-pre4 allows remote attackers to inject arbitrary web script or HTML via the certain survey fields or error messages for malformed query strings...
CVE-2004-1919: Undefined Security Weakness
The hashstrcmp function in hasch.c in Crackalaka 1.0.8 allows remote attackers to cause a denial of service crash via large malformed strings...
ImageMagick 6.x - .PNM Image Decoding Remote Buffer Overflow
ImageMagick 6.x - .PNM Image Decoding Remote Buffer Overflow source: https://www.securityfocus.com/bid/13351/info A remotely exploitable client-side buffer-overflow vulnerability affects ImageMagick. This issue occurs because the application fails to properly validate the length of user-supplied...
Maxthon search bar information leak
Javascript may access search strings...
CVE-2005-0672: Undefined Security Weakness
Carsten's 3D Engine Ca3DE, March 2004 version and earlier, allows remote attackers to execute arbitrary code via text strings that are not null terminated, which triggers a null dereference...
CVE-2005-0612
CVE-2005-0612 affects Cisco IP/VC Videoconferencing System models 3510, 3520, 3525 and 3530. The issue is hard-coded default SNMP community strings, enabling remote attackers to gain access and potentially cause a denial of service and modify configuration. Base metrics indicate network-based, lo...
CVE-2005-0636
Format string vulnerability in Foxmail Server 2.0 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via format strings in the USER command...
CVE-2005-0612: Undefined Security Weakness
Cisco IP/VC Videoconferencing System 3510, 3520, 3525 and 3530 contain hard-coded default SNMP community strings, which allows remote attackers to gain access, cause a denial of service, and modify configuration...
GLSA-200502-05 : Newspost: Buffer overflow vulnerability
The remote host is affected by the vulnerability described in GLSA-200502-05 Newspost: Buffer overflow vulnerability Niels Heinen has discovered a buffer overflow in the socketgetline function of Newspost, which can be triggered by providing long strings that do not end with a newline character...