1856 matches found
Design/Logic Flaw
cbrPager before 0.9.17 allows user-assisted remote attackers to execute arbitrary commands via shell metacharacters in a 1 ZIP aka .cbz or 2 RAR aka .cbr archive filename...
Heap overflow
Heap-based buffer overflow in Evolution 2.22.1 allows user-assisted remote attackers to execute arbitrary code via a long DESCRIPTION property in an iCalendar attachment, which is not properly handled during a reply in the calendar view aka the Calendars window...
Design/Logic Flaw
Unspecified vulnerability in AppKit in Apple Mac OS X before 10.5 allows user-assisted remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted document file, as demonstrated by opening the document with TextEdit...
CVE-2008-1032
Incomplete blacklist vulnerability in CoreTypes in Apple Mac OS X before 10.5.3 allows user-assisted remote attackers to execute arbitrary code via an 1 Automator, 2 Help, 3 Safari, or 4 Terminal content type for a downloadable object, which does not trigger a "potentially unsafe" warning message...
Memory corruption
Unspecified vulnerability in the Apple Type Services ATS server in Apple Mac OS X 10.5 before 10.5.3 allows user-assisted remote attackers to execute arbitrary code via a crafted embedded font in a PDF document, related to memory corruption that occurs during printing...
Input validation
Incomplete blacklist vulnerability in CoreTypes in Apple Mac OS X before 10.5.3 allows user-assisted remote attackers to execute arbitrary code via an 1 Automator, 2 Help, 3 Safari, or 4 Terminal content type for a downloadable object, which does not trigger a "potentially unsafe" warning message...
CVE-2008-1032
Technical details about CVE-2008-1032 are not publicly available in the provided connected documents; monitor for updates.
CVE-2008-1028
Unspecified vulnerability in AppKit in Apple Mac OS X before 10.5 allows user-assisted remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted document file, as demonstrated by opening the document with TextEdit...
CVE-2008-2281
Cross-zone scripting vulnerability in the Print Table of Links feature in Internet Explorer 6.0, 7.0, and 8.0b allows user-assisted remote attackers to inject arbitrary web script or HTML in the Local Machine Zone via an HTML document with a link containing JavaScript sequences, which are evaluat...
Open redirect
Open redirect vulnerability in interface/redirect.htm.php in Mjguest 6.7 GT Rev.01 allows user-assisted remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the goto parameter in a redirect action to mjguest.php. NOTE: this is user-assisted because...
CVE-2008-2268
Open redirect vulnerability in interface/redirect.htm.php in Mjguest 6.7 GT Rev.01 allows user-assisted remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the goto parameter in a redirect action to mjguest.php. NOTE: this is user-assisted because...
CVE-2008-2268
CVE-2008-2268 is an open redirect vulnerability in the Mjguest 6.7 GT Rev.01 product, specifically in interface/redirect.htm.php. The flaw allows user-assisted redirection to arbitrary URLs via a goto parameter in a redirect action to mjguest.php, with a delay and notification before the redirect...
CVE-2008-2268
Open redirect vulnerability in interface/redirect.htm.php in Mjguest 6.7 GT Rev.01 allows user-assisted remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the goto parameter in a redirect action to mjguest.php. NOTE: this is user-assisted because...
Microsoft .NET JIT Compiler Code Execution Vulnerability (ms07-040)
Microsoft .NET JIT Compiler is prone to a code execution vulnerability. SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
GLSA-200805-10 : Pngcrush: User-assisted execution of arbitrary code
The remote host is affected by the vulnerability described in GLSA-200805-10 Pngcrush: User-assisted execution of arbitrary code It has been reported that Pngcrush includes a copy of libpng that is vulnerable to a memory corruption GLSA 200804-15. Impact : A remote attacker could entice a user to...
CVE-2008-2142
Emacs 21 and XEmacs automatically load and execute .flc fast lock files that are associated with other files that are edited within Emacs, which allows user-assisted attackers to execute arbitrary code...
CVE-2008-2142
Emacs 21 and XEmacs automatically load and execute .flc fast lock files that are associated with other files that are edited within Emacs, which allows user-assisted attackers to execute arbitrary code...
CVE-2008-2142: Undefined Security Weakness
Emacs 21 and XEmacs automatically load and execute .flc fast lock files that are associated with other files that are edited within Emacs, which allows user-assisted attackers to execute arbitrary code...