7013 matches found
CVE-2005-2613
Unknown vulnerability in CPAINT Ajax Toolkit before 1.3-SP allows attackers to execute arbitrary PHP or ASP code or read files via unknown vectors...
CVE-2005-2613
CVE-2005-2613 : The vulnerability is listed for the CPAINT Ajax Toolkit before 1.3-SP . It is described as an unknown vulnerability that could allow an attacker to execute arbitrary PHP or ASP code or read files via unknown vectors . The NVD entry assigns a CVSSv2 base score of 6.4 (MEDIUM) with ...
CVE-2005-2613
Unknown vulnerability in CPAINT Ajax Toolkit before 1.3-SP allows attackers to execute arbitrary PHP or ASP code or read files via unknown vectors...
Vulnerability found in CPAINT Ajax Toolkit
I am the original author of the CPAINT Ajax Toolkit http://cpaint.sourceforge.net/. Last night we found a vulnerability affecting all versions of CPAINT prior to v1.3-SP which is the patched version of the software that can allow a user with malicious intent to execute server or ASP/PHP commands...
Cisco Security Advisory:Cisco Security Agent Vulnerable to Crafted IP attack
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ============================================================================== Cisco Security Advisory: Cisco Security Agent Vulnerable to Crafted IP Attack Revision 1.0 For Public Release 2005 July 13 1600 UTC GMT...
CVE-2004-2160
Format string vulnerability in xmlelem.c for XMLStarlet Command Line XML Toolkit 0.9.3 may allow attackers to cause a denial of service or execute arbitrary code...
CVE-2004-2160
XMLStarlet Command Line XML Toolkit 0.9.3 is affected by a format string vulnerability in xml_elem.c, as described for CVE-2004-2160. The issue enables denial of service or arbitrary code execution and is exploitable via network access with low attack complexity, according to the NVD entry. Affec...
CVE-2004-2159
Technical details about CVE-2004-2159 are not publicly provided in the supplied documents; monitor for updates.
openssl, openssl096b security update
CentOS Errata and Security Advisory CESA-2005:476 Updated OpenSSL packages that fix security issues are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. OpenSSL is a toolkit that implements Secure Sockets Layer SSL v2/v3 and...
CVE-2004-1794
Cross-site scripting XSS vulnerability in the VCard4J Toolkit allows remote attackers to inject arbitrary web script or HTML via the NICKNAME tag in a vCard...
CVE-2004-1794
The CVE-2004-1794 entry describes a Cross-site Scripting (XSS) vulnerability in the VCard4J Toolkit. The issue allows remote attackers to inject arbitrary web script or HTML via the NICKNAME tag in a vCard. According to the available data, this is a client-side input handling weakness in VCard4J ...
security flaw
Double free vulnerability in gtk 2 gtk2 before 2.2.4 allows remote attackers to cause a denial of service crash via a crafted BMP image...
security flaw
Double free vulnerability in gtk 2 gtk2 before 2.2.4 allows remote attackers to cause a denial of service crash via a crafted BMP image...
Cisco Security Advisory: Cisco VPN 3000 Concentrator Vulnerable to Crafted SSL Attack
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ================================================================= Cisco Security Advisory: Cisco VPN 3000 Concentrator Vulnerable to Crafted SSL attack ================================================================= Revision 1.0 For Public Release...
GLSA-200503-08 : OpenMotif, LessTif: New libXpm buffer overflows
The remote host is affected by the vulnerability described in GLSA-200503-08 OpenMotif, LessTif: New libXpm buffer overflows Chris Gilbert discovered potentially exploitable buffer overflow cases in libXpm that weren't fixed in previous libXpm security advisories. Impact : A carefully-crafted XPM...
ClamAV: Multiple issues
Background ClamAV is an antivirus toolkit. It includes a multi-threaded daemon and a command line scanner. Description ClamAV fails to properly scan ZIP files with special headers CAN-2005-0133 and base64 encoded images in URLs. Impact By sending a base64 encoded image file in a URL an attacker...
DEBIAN-CVE-2004-2160
Format string vulnerability in xmlelem.c for XMLStarlet Command Line XML Toolkit 0.9.3 may allow attackers to cause a denial of service or execute arbitrary code...
CVE-2004-2160
Format string vulnerability in xmlelem.c for XMLStarlet Command Line XML Toolkit 0.9.3 may allow attackers to cause a denial of service or execute arbitrary code...