1932 matches found
PT-2006-5784 · Joomla · Joomlaboard Forum
Name of the Vulnerable Software and Affected Versions: Joomlaboard Forum Component com joomlaboard versions prior to 1.1.2 Description: The issue allows remote attackers to execute arbitrary PHP code via a URL in the sbp parameter to specific PHP files, including file upload.php and image...
PT-2006-2134 · Nmdeluxe · Nmdeluxe
Name of the Vulnerable Software and Affected Versions: NMDeluxe versions prior to 1.0.1 Description: A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via the nick parameter in the news.php file. Recommendations: For versions prior to 1.0.1, update to...
PT-2005-2798 · Todd Miller · Sudo
Name of the Vulnerable Software and Affected Versions: Sudo version 1.6.8p7 Description: The issue allows local users to potentially gain privileges by using sudo to call su, then entering a blank password and hitting CTRL-C. However, it has been noted that Sudo catches SIGINT and returns an empt...
PT-2005-2455 · Ethereal +1 · Ethereal +1
Name of the Vulnerable Software and Affected Versions: Ethereal versions prior to 0.10.11 Description: The issue affects multiple dissectors in Ethereal, including WSP, BER, SMB, NDPS, IAX2, RADIUS, TCAP, MRDISC, 802.3 Slow, SMBMailslot, and SMB PIPE. It allows remote attackers to cause a denial ...
[SA14328] fallback-reboot Daemon Status Denial of Service Vulnerability
TITLE: fallback-reboot Daemon Status Denial of Service Vulnerability SECUNIA ADVISORY ID: SA14328 VERIFY ADVISORY: http://secunia.com/advisories/14328/ CRITICAL: Less critical IMPACT: DoS WHERE: From local network SOFTWARE: fallback-reboot 0.x http://secunia.com/product/4693/ DESCRIPTION: A...
[SA14337] Mambo "GLOBALS['mosConfig_absolute_path']" File Inclusion
TITLE: Mambo "GLOBALS'mosConfigabsolutepath'" File Inclusion SECUNIA ADVISORY ID: SA14337 VERIFY ADVISORY: http://secunia.com/advisories/14337/ CRITICAL: Highly critical IMPACT: System access WHERE: From remote SOFTWARE: Mambo 4.x http://secunia.com/product/872/ DESCRIPTION: A vulnerability has...
[SA14365] SD Server Directory Traversal Vulnerability
TITLE: SD Server Directory Traversal Vulnerability SECUNIA ADVISORY ID: SA14365 VERIFY ADVISORY: http://secunia.com/advisories/14365/ CRITICAL: Moderately critical IMPACT: Exposure of system information, Exposure of sensitive information WHERE: From remote SOFTWARE: SD Server 4.x...
[SA14262] NewsBruiser Comment System Security Bypass Vulnerability
TITLE: NewsBruiser Comment System Security Bypass Vulnerability SECUNIA ADVISORY ID: SA14262 VERIFY ADVISORY: http://secunia.com/advisories/14262/ CRITICAL: Less critical IMPACT: Security Bypass WHERE: From remote SOFTWARE: NewsBruiser 2.x http://secunia.com/product/4654/ DESCRIPTION: Jarno has...
Microsoft Security Bulletin MS05-008 Vulnerability in Windows Shell Could Allow Remote Code Execution (890047)
Microsoft Security Bulletin MS05-008 Vulnerability in Windows Shell Could Allow Remote Code Execution 890047 Issued: February 8, 2005 Version: 1.0 Summary Who should read this document: Customers who use Microsoft Windows Impact of Vulnerability: Remote Code Execution Maximum Severity Rating:...
[SA14080] SmarterMail Attachment Upload Vulnerability
TITLE: SmarterMail Attachment Upload Vulnerability SECUNIA ADVISORY ID: SA14080 VERIFY ADVISORY: http://secunia.com/advisories/14080/ CRITICAL: Less critical IMPACT: Cross Site Scripting WHERE: From remote SOFTWARE: SmarterMail http://secunia.com/product/3154/ DESCRIPTION: Soroush Dalili has...
[SA13948] TikiWiki "temp" Arbitrary Script Execution Vulnerability
TITLE: TikiWiki "temp" Arbitrary Script Execution Vulnerability SECUNIA ADVISORY ID: SA13948 VERIFY ADVISORY: http://secunia.com/advisories/13948/ CRITICAL: Highly critical IMPACT: System access WHERE: From remote SOFTWARE: TikiWiki 1.x http://secunia.com/product/3356/ DESCRIPTION: Some...
Microsoft Security Bulletin MS04-042 Vulnerability in DHCP Could Allow Remote Code Execution and Denial of Service (885249)
Microsoft Security Bulletin MS04-042 Vulnerability in DHCP Could Allow Remote Code Execution and Denial of Service 885249 Issued: December 14, 2004 Version: 1.0 Summary Who should read this document: Customers who use the Microsoft DHCP Server service. Impact of Vulnerability: Remote Code Executi...
PunBB < 1.1.2 install.php XSS
The remote version of PunBB is vulnerable to cross-site scripting flaws through 'install.php' script. With a specially crafted URL, an attacker can inject arbitrary HTML and script code into a user's browser resulting in the possible theft of authentication cookies, mis-representation of site...
[SA13331] FreeImage Library Interleaved Bitmap Image Buffer Overflow Vulnerability
TITLE: FreeImage Library Interleaved Bitmap Image Buffer Overflow Vulnerability SECUNIA ADVISORY ID: SA13331 VERIFY ADVISORY: http://secunia.com/advisories/13331/ CRITICAL: Moderately critical IMPACT: DoS, System access WHERE: From remote SOFTWARE: FreeImage 3.x http://secunia.com/product/4341/...
[SA13268] Fastream NETFile FTP/Web Server Multiple HEAD Requests Denial of Service
TITLE: Fastream NETFile FTP/Web Server Multiple HEAD Requests Denial of Service SECUNIA ADVISORY ID: SA13268 VERIFY ADVISORY: http://secunia.com/advisories/13268/ CRITICAL: Less critical IMPACT: DoS WHERE: From remote SOFTWARE: Fastream NETFile FTP/Web Server 6.x http://secunia.com/product/2455/...
PT-2004-1962
Name of the Vulnerable Software and Affected Versions: Eset Anti-Virus versions prior to 1.020 16th September 2004 Description: The issue allows remote attackers to bypass antivirus protection by using a compressed file with both local and global headers set to zero. This technique does not preve...
[SA12853] phpCodeGenie "Simple Application Generation" Code Execution Vulnerability
TITLE: phpCodeGenie "Simple Application Generation" Code Execution Vulnerability SECUNIA ADVISORY ID: SA12853 VERIFY ADVISORY: http://secunia.com/advisories/12853/ CRITICAL: Less critical IMPACT: System access WHERE: From remote SOFTWARE: phpCodeGenie 3.x http://secunia.com/product/4141/...
[SA11711] Apple Remote Desktop Privilege Escalation Vulnerability
TITLE: Apple Remote Desktop Privilege Escalation Vulnerability SECUNIA ADVISORY ID: SA11711 VERIFY ADVISORY: http://secunia.com/advisories/11711/ CRITICAL: Less critical IMPACT: Privilege escalation WHERE: Local system SOFTWARE: Apple Remote Desktop 1.x http://secunia.com/product/4180/ Apple Remo...
[Full-Disclosure] STG Security Advisory: [SSA-20041022-08] MoniWiki XSS vulnerability
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 STG Security Advisory: SSA-20041022-08 MoniWiki XSS vulnerability Revision 1.0 Date Published: 2004-10-22 KST Last Update: 2004-10-22 Disclosed by SSR Team [email protected] Summary ======== MoniWiki is a wiki web application used by many Korea...
Debian DSA-353-1 : sup - insecure temporary file
sup, a package used to maintain collections of files in identical versions across machines, fails to take appropriate security precautions when creating temporary files. A local attacker could exploit this vulnerability to overwrite arbitrary files with the privileges of the user running sup...