CVE-2005-3146

StoreBackup before 1.19 allows local users to perform unauthorized operations on arbitrary files via a symlink attack on temporary files...

CVE-2005-3146

StoreBackup before 1.19 allows local users to perform unauthorized operations on arbitrary files via a symlink attack on temporary files...

CVE-2005-3146

StoreBackup before 1.19 allows local users to perform unauthorized operations on arbitrary files via a symlink attack on temporary files...

CVE-2001-1506

Unknown vulnerability in the file system protection subsystem in HP Secure OS Software for Linux 1.0 allows additional user privileges on some files beyond what is specified in the file system protection rules, which allows local users to conduct unauthorized operations on restricted files...

CVE-2004-0813

Unknown vulnerability in the SGIO functionality in ide-cd allows local users to bypass read-only access and perform unauthorized write and erase operations...

CVE-2004-0017

Multiple SQL injection vulnerabilities in the 1 calendar and 2 infolog modules for phpgroupware 0.9.14 allow remote attackers to perform unauthorized database operations...

CVE-2003-0499

Mantis 0.17.5 and earlier stores its database password in cleartext in a world-readable configuration file, which allows local users to perform unauthorized database operations...

[SECURITY] [DSA 288-1] New OpenSSL packages fix decipher vulnerability

-------------------------------------------------------------------------- Debian Security Advisory DSA 288-1 [email protected] http://www.debian.org/security/ Martin Schulze April 17th, 2003 http://www.debian.org/security/faq -...

CVE-2002-1442

The Google toolbar 1.1.58 and earlier allows remote web sites to perform unauthorized toolbar operations including script execution and file reading in other zones such as "My Computer" by opening a window to tools.google.com or the res: protocol, then using script to modify the window's location...

CVE-2001-1383

CVE-2001-1383 affects the initscript in setserial 2.17-4 and earlier, where it creates predictable temporary file names. This could allow local users to perform unauthorized operations on files. The Connected documents confirm the same description across CVE lists and NVD records, with no provide...

Important: Red Hat Security Advisory: : Updated OpenSSL packages fix vulnerabilities

Updated OpenSSL packages are available that fix a potential timing-based attack and a modified Bleichenbacher attack. OpenSSL is a commercial-grade, full-featured, and open source toolkit that implements Secure Sockets Layer SSL v2/v3 and Transport Layer Security TLS v1 protocols as well as a...

CVE-2002-1442

The Google toolbar 1.1.58 and earlier allows remote web sites to perform unauthorized toolbar operations including script execution and file reading in other zones such as "My Computer" by opening a window to tools.google.com or the res: protocol, then using script to modify the window's location...

CVE-2002-1442

Affected product: Google Toolbar (IE) up to version 1.1.58 and earlier. Vulnerability: remote sites could trigger unauthorized toolbar operations, including script execution and file reading in other zones (e.g., My Computer) by opening a window to tools.google.com or the res: protocol and then u...

CVE-2002-0961

Vulnerabilities in Voxel Dot Net CBMS 0.7 and earlier allow remote attackers to conduct unauthorized operations as other users, e.g. by deleting clients via dltclnt.php, possibly in a SQL injection attack...

CVE-2002-0961

The CVE-2002-0961 entry concerns Voxel Dot Net CBMS 0.7 and earlier. Affected software: Voxel Dot Net CBMS (0.7 and earlier). Vulnerability: remote attackers may perform unauthorized operations as other users, for example deleting clients via dltclnt.php, with potential SQL injection in play. Roo...

CVE-2001-1348

TWIG 2.6.2 and earlier allows remote attackers to perform unauthorized database operations via a SQL injection attack on the id parameter...

CVE-2001-1265

CVE-2001-1265 concerns a directory traversal vulnerability in IBM alphaWorks Java TFTP server 1.21. The issue allows remote attackers to perform unauthorized operations on arbitrary files using a .. (dot dot) path traversal technique. The CVSS vector from NVD indicates a network-accessible, low-c...

CVE-2001-0665

Affected product: Internet Explorer 6 and earlier. Vulnerability: HTTP Request Encoding allows remote attackers to trigger what look like user-originated HTTP requests, potentially enabling privilege escalation or execution of operations in web-based services. Root cause: encoding flaw in HTTP re...