hpssd of hplip allows unprivileged user to trigger alert mail

The alert-mailing implementation in HP Linux Imaging and Printing HPLIP 1.6.7 allows local users to gain privileges and send e-mail messages from the root account via vectors related to the setalerts message, and lack of validation of the device URI associated with an event message...

Design/Logic Flaw

CFNetwork on Apple Mac OS X 10.3.9 and 10.4.10 does not properly validate ftp: URIs, which allows remote attackers to trigger the transmission of arbitrary FTP commands to arbitrary FTP servers...

BlackBoard Learning System 5.x6.0 - Multiple Cross-Site Scripting Vulnerabilities

BlackBoard Learning System 5.x6.0 - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/10101/info Blackboard Learning System has been reported prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure of the application to...