CVE-2011-5162

Stack-based buffer overflow in GOM Player 2.1.33.5071 allows user-assisted remote attackers to execute arbitrary code via a .ASX file with a long URI in the "ref href" tag. NOTE: this issue exists because of a CVE-2007-0707 regression...

Stack overflow

Stack-based buffer overflow in GOM Player 2.1.33.5071 allows user-assisted remote attackers to execute arbitrary code via a .ASX file with a long URI in the "ref href" tag. NOTE: this issue exists because of a CVE-2007-0707 regression...

CVE-2011-5162

GOM Player 2.1.33.5071 is affected by a stack-based buffer overflow in the ASX ref href handling, allowing user‑assisted remote code execution via a crafted ASX file with a long URI. The issue is described as a regression from CVE-2007-0707. Affected component: parsing of the ASX file’s ref href ...

Slackware Advisory SSA:2004-238-01 kdelibs

The remote host is missing an update as announced via advisory SSA:2004-238-01. OpenVAS Vulnerability Test $Id: esoftslkssa200423801.nasl 6598 2017-07-07 09:36:44Z cfischer $ Description: Auto-generated from the corresponding slackware advisory Authors: Thomas Reinke Copyright: Copyright c 2012...

Slackware: Security Advisory (SSA:2004-238-01)

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

HTTP Response Splitting and XSS vulnerabilities in IBM Lotus Domino

Hello 3APA3A! I want to warn you about HTTP Response Splitting and Cross-Site Scripting vulnerabilities in IBM Lotus Domino. At 15th of August IBM released the advisory concerning these Cross-Site Scripting vulnerabilities. CVE ID: CVE-2012-3301. ------------------------- Affected products:...

MediaWiki 1.x 跨站请求伪造漏洞

Bugtraq ID:55370 CVE ID: CVE-2012-4379 MediaWiki是一套以GPL授权发行的Wiki引擎。 当使用X-Frame-Options头时，MediaWiki存在跨站脚本攻击，允许攻击者构建恶意URI，诱使用户解析，可以目标用户上下文执行恶意操作。 0 MediaWiki 1.x 厂商解决方案 MediaWiki 1.18.5或1.19.2已经修复此漏洞，建议用户下载使用： http://wikipedia.sourceforge.net/...

DataWatch Monarch BI v5.1 admin section reflected cross-site scripting

Class: Input Validation Error Remote: Yes Local: No Published: 26/06/2012 Credit: Raymond Rizk of Dionach Limited [email protected] Vulnerable: DataWatch Monarch BI v5.1 DataWatch's Monarch BI admin section is prone to a reflected cross-site scripting vulnerability because it fails to sufficientl...

CommPort 1.01 Authentication Bypass

---------------------------------------------------- CommPort 1.01 Vendor information: "A 'Community Portal' generator that can be tailored for any location. Each user gets a personal portal page to which they can add their own 'channels' or select from a growing list of pre-prepared local,...

Directory traversal

Directory traversal vulnerability in the XML Server in IOServer before 1.0.19.0, when the Root Directory pathname lacks a trailing \ backslash character, allows remote attackers to read arbitrary files or list arbitrary directories via a .. dot dot in a URI...

CVE-2012-4680

CVE-2012-4680 is a directory-traversal vulnerability in IOServer’s XML Server prior to version 1.0.19.0. When the Root Directory pathname lacks a trailing backslash, remote attackers can read arbitrary files or list directories via a .. in the URI. The issue affects IOServer XML Server components...

IBM Lotus Notes code execution

URI handler command injection...

CVE-2010-5145

The Filtering Service in Websense Web Security and Web Filter before 6.3.1 Hotfix 136 and 7.x before 7.1.1 on Windows allows remote attackers to cause a denial of service filtering outage via a crafted sequence of characters in a URI...

Code injection

The Filtering Service in Websense Web Security and Web Filter before 6.3.1 Hotfix 136 and 7.x before 7.1.1 on Windows allows remote attackers to cause a denial of service filtering outage via a crafted sequence of characters in a URI...

CVE-2010-5145

CVE-2010-5145 affects Websense Web Security and Web Filter prior to 6.3.1 Hotfix 136 and 7.x prior to 7.1.1 on Windows. The vulnerability allows remote attackers to cause a denial of service (filtering outage) by sending a crafted sequence of characters in a URI. The issue is rooted in the Filter...

Code injection

The Web Gateway component in IBM WebSphere MQ File Transfer Edition 7.0.4 and earlier allows remote authenticated users to read files of arbitrary users via vectors involving a username in a URI, as demonstrated by a modified metadata=fteSamplesUser field to the /transfer URI...

CVE-2012-4235

The RSGallery2 comrsgallery2 component before 3.2.0 for Joomla! 2.5.x does not place index.html files in image directories, which allows remote attackers to list image filenames via a request for a directory URI...

IBM WebSphere Portal Dojo Module URI Traversal Arbitrary File Access

The version of WebSphere Portal on the remote host is using a vulnerable version of the Dojo toolkit. Input to the 'path' parameter of layerLoader.jsp is not properly validated. A remote, unauthenticated attacker could exploit this to download arbitrary files. %NASLMINLEVEL 70300 C Tenable Networ...

reflected xss in the pageId request parameter in 500page.jsp

A scanner picked up that the pageId parameter in 500page.jsp is a potentially reflected xss bug. This can be exploited through a url like the following: https://example.com/pages/viewtrash.vm;editpage?pageId=%22%3E%3Cscript%3Ealert1%3C/script%3E code /images/icons/emoticons/warning.png" You can...

PolarisCMS Cross Site Scripting

PolarisCMS blog.aspx Remote URI Based Cross-Site Scripting Vulnerability Vendor: PolarisCMS Product web page: http://www.polariscms.com Affected version: 2012 Summary: PolarisCMS is a White Label CMS content management System providing more features, functions and flexibility to global web...