3427 matches found
Secunia Research: VMWare VMnc Codec HexTile Encoding Two Integer Truncation Vulnerabilities
====================================================================== Secunia Research 09/04/2010 - VMWare VMnc Codec HexTile Encoding - - Two Integer Truncation Vulnerabilities - ====================================================================== Table of Contents Affected...
Ling news management system v1. 0 vulnerability-vulnerability warning-the black bar safety net
This app with a generic anti-injection procedures. Each page contains so I'm not from the injection here. Looking for the next, in the administrator directory there is a link to the picture upload of the file. Although you can create folders, but can not define yourself, so give up. This upload...
Design/Logic Flaw
The nfswaitonrequest function in fs/nfs/pagelist.c in Linux kernel 2.6.x through 2.6.33-rc5 allows attackers to cause a denial of service Oops via unknown vectors related to truncating a file and an operation that is not interruptible...
Upload vulnerability filepath variable\0 0 truncation-vulnerabilities and early warning-the black bar safety net
POST /coin/upload. asp? action=upfile HTTP/1.1 Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, application/x-shockwave-flash, application/vnd. ms-excel, application/vnd. ms-powerpoint, application/msword, / Referer: Recently phpwind contains a vulnerability that Diamondback always...
Debian DSA-1849-1 : xml-security-c - design flaw
It was discovered that the W3C XML Signature recommendation contains a protocol-level vulnerability related to HMAC output truncation. This update implements the proposed workaround in the C++ version of the Apache implementation of this standard, xml-security-c, by preventing truncation to outpu...
On the php local includes-vulnerability warning-the black bar safety net
Would have thought it struck gold with a black brother after the Exchange found can only be applied to the Win32 platform, so this BUG might of the storm reduced, the basic not much harm, because in the WIN32 platform using PHP too. include $GETfile.”. php”; Previously we used a%0 0 to cut off, n...
Sun OpenOffice.org < 3.2 Multiple Vulnerabilities
The version of Sun Microsystems OpenOffice.org installed on the remote host is prior to version 3.2. It is, therefore, affected by several issues : - Signatures may not be handled properly due to a vulnerability in the libxml2 library. CVE-2006-4339 - There is an HMAC truncation authentication...
xml-security-1.3.0-1jpp.ep1.*: XMLDsig HMAC-based signatures spoofing and authentication bypass
The design of the W3C XML Signature Syntax and Processing XMLDsig recommendation, as implemented in products including 1 the Oracle Security Developer Tools component in Oracle Application Server 10.1.2.3, 10.1.3.4, and 10.1.4.3IM; 2 the WebLogic Server component in BEA Product Suite 10.3, 10.0...
CentOS 5 : openoffice.org (CESA-2008:0835)
Updated openoffice.org packages that fix a security issue are now available for Red Hat Enterprise Linux 5. This update has been rated as having important security impact by the Red Hat Security Response Team. OpenOffice.org is an office productivity suite that includes desktop applications, such...
PHPBB 2.04,2.09 多个HTTP响应头截断漏洞
No description provided by source...
xml-security-1.3.0-1jpp.ep1.*: XMLDsig HMAC-based signatures spoofing and authentication bypass
The design of the W3C XML Signature Syntax and Processing XMLDsig recommendation, as implemented in products including 1 the Oracle Security Developer Tools component in Oracle Application Server 10.1.2.3, 10.1.3.4, and 10.1.4.3IM; 2 the WebLogic Server component in BEA Product Suite 10.3, 10.0...
Mozilla Firefox Multiple Spoofing Vulnerabilies - dec09 (Windows)
The host is installed with Firefox browser and is prone to multiple spoofing vulnerabilies. OpenVAS Vulnerability Test $Id: gbfirefoxmultspoofvulnwindec09.nasl 4865 2016-12-28 16:16:43Z teissa $ Mozilla Firefox Multiple Spoofing Vulnerabilies - dec09 Windows Authors: Antu Sanadi Copyright:...
Mozilla Firefox Multiple Spoofing Vulnerabilities (Dec 2009) - Linux
Mozilla Firefox is prone to multiple spoofing vulnerabilities. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Mozilla Firefox Multiple Spoofing Vulnerabilies - dec09 (Linux)
The host is installed with Firefox browser and is prone to multiple spoofing vulnerabilies. OpenVAS Vulnerability Test $Id: gbfirefoxmultspoofvulnlindec09.nasl 4865 2016-12-28 16:16:43Z teissa $ Mozilla Firefox Multiple Spoofing Vulnerabilies - dec09 Linux Authors: Antu Sanadi Copyright: Copyrigh...
Design/Logic Flaw
Visual truncation vulnerability in the MakeScriptDialogTitle function in nsGlobalWindow.cpp in Mozilla Firefox allows remote attackers to spoof the origin domain name of a script via a long name...
CVE-2009-4130
Mozilla Firefox vulnerability CVE-2009-4130 affects the MakeScriptDialogTitle function in nsGlobalWindow.cpp. A visual truncation flaw allows remote attackers to spoof the origin domain name of a script by providing an excessively long name, enabling spoofing of the script’s perceived origin. Roo...
xml-security-1.3.0-1jpp.ep1.*: XMLDsig HMAC-based signatures spoofing and authentication bypass
The design of the W3C XML Signature Syntax and Processing XMLDsig recommendation, as implemented in products including 1 the Oracle Security Developer Tools component in Oracle Application Server 10.1.2.3, 10.1.3.4, and 10.1.4.3IM; 2 the WebLogic Server component in BEA Product Suite 10.3, 10.0...
Microsoft Windows内核本地权限提升和拒绝服务漏洞（MS09-058）
BUGTRAQ ID: 36625,36623,36624 CVECAN ID: CVE-2009-2517,CVE-2009-2516,CVE-2009-2515 Windows是微软发布的非常流行的操作系统。 由于错误地将64位至截断为32位值，以及未充分验证用户态传递的某些数据，导致Windows内核中存在权限提升漏洞。成功利用此漏洞的攻击者可以运行任意内核态代码。此外由于内核处理特定异常方式而导致Windows内核中存在拒绝服务漏洞。 Microsoft Windows XP SP3 Microsoft Windows XP SP2 Microsoft Windows Vista...
Sql injection
The CryptoAPI component in Microsoft Windows 2000 SP4, Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista Gold, SP1, and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7, as used by Internet Explorer and other applications, does not properly handle a '\0' character in a domai...