311 matches found
CVE-2012-3167
CVE-2012-3167 : Unspecified vulnerability in the MySQL Server component of Oracle MySQL 5.1.63 and earlier, and 5.5.25 and earlier, could allow remote authenticated users to affect availability via unknown vectors related to Server Full Text Search. The connected documents corroborate that this f...
CVE-2012-3167
Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.63 and earlier, and 5.5.25 and earlier, allows remote authenticated users to affect availability via unknown vectors related to Server Full Text Search...
CVE-2012-3167: Undefined Security Weakness
Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.63 and earlier, and 5.5.25 and earlier, allows remote authenticated users to affect availability via unknown vectors related to Server Full Text Search...
CVE-2012-3167
Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.63 and earlier, and 5.5.25 and earlier, allows remote authenticated users to affect availability via unknown vectors related to Server Full Text Search...
CVE-2010-3740: Undefined Security Weakness
The Net Search Extender NSE implementation in the Text Search component in IBM DB2 UDB 9.5 before FP6a does not properly handle an alphanumeric Fuzzy search, which allows remote authenticated users to cause a denial of service memory consumption and system hang via the db2ext.textSearch function...
PT-2010-5034
Name of the Vulnerable Software and Affected Versions IBM DB2 UDB version 9.5 before FP6a Description The issue is related to the Net Search Extender implementation in the Text Search component, which does not properly handle an alphanumeric Fuzzy search. This allows remote authenticated users to...
多个厂商Hummingbird STR服务栈溢出漏洞
BUGTRAQ ID: 36868 EMC Documentum eRoom是基于WEB的协作服务器,OpenText Search Server是高效的纯文本搜索引擎,上述产品都使用了Hummingbird STR服务。 默认监听于TCP 10500端口上的Hummingbird STR服务(STRsvc.exe)中存在栈溢出漏洞。STRlib.dll模块将接收到的网络报文拷贝到了静态的栈缓冲区,如果发送了超长的报文就可以触发栈溢出,导致以SYSTEM权限执行任意指令。 EMC Documentum eRoom 7.4.1 Open Text Corporation Search...
Fedora Update for namazu FEDORA-2008-2678
Check for the Version of namazu OpenVAS Vulnerability Test Fedora Update for namazu FEDORA-2008-2678 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the term...
Fedora Update for namazu FEDORA-2008-2767
Check for the Version of namazu OpenVAS Vulnerability Test Fedora Update for namazu FEDORA-2008-2767 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the term...
Cross-site scripting vulnerability in updir.php in UPDIR.NET
Overview updir.php in UPDIR.NET contains a cross-site scripting vulnerability in the full-text search and file upload functions. updir.php from UPDIR.NET is software for publishing and managing image files, etc. on web servers. By installing updir.php on a web server, users are able to upload ima...
JVN#00892830 Namazu cross-site scripting vulnerability
Namazu, Japanese full-text search engine does not specify charset in the ContentType header that could allow a remote attacker to execute an arbitrary script on the user's web browser. Impact An arbitrary script could be executed on the user's web browser. Solution Update the Software Update to t...