Stack overflow

Stack-based buffer overflow in VUPlayer 2.49 allows remote attackers to execute arbitrary code via a long .asf URI in the HREF attribute of a REF element in a .asx file...

CVE-2008-3821

Multiple cross-site scripting XSS vulnerabilities in the HTTP server in Cisco IOS 11.0 through 12.4 allow remote attackers to inject arbitrary web script or HTML via 1 the query string to the ping program or 2 unspecified other aspects of the URI...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in the HTTP server in Cisco IOS 11.0 through 12.4 allow remote attackers to inject arbitrary web script or HTML via 1 the query string to the ping program or 2 unspecified other aspects of the URI...

CVE-2008-3821

Multiple cross-site scripting XSS vulnerabilities in the HTTP server in Cisco IOS 11.0 through 12.4 allow remote attackers to inject arbitrary web script or HTML via 1 the query string to the ping program or 2 unspecified other aspects of the URI...

Opera file URI buffer overflow

Added: 01/13/2009 CVE: CVE-2008-5178 BID: 32323 OSVDB: 49882 Background Opera is a web browser which is available for multiple platforms. Problem A buffer overflow vulnerability allows command execution when a user opens a long, specially crafted file:// URI. Resolution Upgrade to Opera 9.63 or...

Opera file URI buffer overflow

Added: 01/13/2009 CVE: CVE-2008-5178 BID: 32323 OSVDB: 49882 Background Opera is a web browser which is available for multiple platforms. Problem A buffer overflow vulnerability allows command execution when a user opens a long, specially crafted file:// URI. Resolution Upgrade to Opera 9.63 or...

FoxMail Client Buffer Overflow vulnerability

This host is installed with FoxMail Client and is prone to Buffer Overflow Vulnerability. OpenVAS Vulnerability Test $Id: gbfoxmailmailtobofvuln.nasl 4918 2017-01-02 14:56:10Z cfi $ FoxMail Client Buffer Overflow Vulnerability Authors: Sujit Ghosal Copyright: Copyright c 2009 Greenbone Networks...

CVE-2008-5839

Buffer overflow in Foxmail 6.5 allows remote attackers to execute arbitrary code via a long mailto URI in the HREF attribute of an A element...

Buffer overflow

Buffer overflow in Foxmail 6.5 allows remote attackers to execute arbitrary code via a long mailto URI in the HREF attribute of an A element...

CVE-2008-5839

CVE-2008-5839 describes a buffer overflow in FoxMail Client (FoxMail 6.5) triggered by a long mailto URI in the HREF attribute of an A element, allowing remote code execution. Affected component: FoxMail Client; root cause: improper handling/overflow in mailto URI parsing. Impact: potential arbit...

CVE-2008-5839

Buffer overflow in Foxmail 6.5 allows remote attackers to execute arbitrary code via a long mailto URI in the HREF attribute of an A element...

CVE-2008-5825

The SmartPoster implementation on the Nokia 6131 Near Field Communication NFC phone with 05.12 firmware does not properly display the URI record when the Title record contains a certain combination of space, CR aka \r, and . dot characters, which allows remote attackers to trick a user into loadi...

CVE-2008-5827

The Nokia 6131 Near Field Communication NFC phone with 05.12 firmware automatically installs software upon completing the download of a JAR file, which makes it easier for remote attackers to execute arbitrary code via a crafted URI record in an NDEF tag...

Design/Logic Flaw

The Nokia 6131 Near Field Communication NFC phone with 05.12 firmware allows remote attackers to cause a denial of service device crash via 1 a large value in the payload length field in an NDEF record, or a certain length for a 2 tel: or 3 sms: NDEF URI...

Design/Logic Flaw

The SmartPoster implementation on the Nokia 6131 Near Field Communication NFC phone with 05.12 firmware does not properly display the URI record when the Title record contains a certain combination of space, CR aka \r, and . dot characters, which allows remote attackers to trick a user into loadi...

Design/Logic Flaw

The Nokia 6131 Near Field Communication NFC phone with 05.12 firmware automatically installs software upon completing the download of a JAR file, which makes it easier for remote attackers to execute arbitrary code via a crafted URI record in an NDEF tag...

CVE-2008-5825

The SmartPoster implementation on the Nokia 6131 Near Field Communication NFC phone with 05.12 firmware does not properly display the URI record when the Title record contains a certain combination of space, CR aka \r, and . dot characters, which allows remote attackers to trick a user into loadi...

CVE-2008-5825

The CVE-2008-5825 entry concerns the Nokia 6131 NFC phone (firmware 05.12) SmartPoster handling. A bug in displaying the URI record occurs when the Title record contains a specific mix of spaces, carriage returns, and dots, allowing a crafted NDEF tag to trick a user into loading an arbitrary URI...

Megacubo 5.0.7 (mega://) Remote eval() Injection Exploit

No description provided by source. !-- Megacubo 5.0.7 mega:// remote eval injection exploit by Nine:Situations:Group::pyrokinesis site: http://retrogod.altervista.org/ tested against Internet Explorer 8 beta 2/xp sp 3 software site: http://www.megacubo.net/tv/ download url:...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in FlatnuX CMS aka Flatnuke3 2008-12-11 allow remote attackers to inject arbitrary web script or HTML via 1 the mod parameter to the default URI; 2 the foto parameter to photo.php in the 05Foto module; or 3 the name parameter in an insertrecord...