4741 matches found
mysql malformed password crasher
MySQL Community Server before 5.0.45 allows remote attackers to cause a denial of service daemon crash via a malformed password packet in the connection protocol...
DEBIAN-CVE-2007-3231
Buffer overflow in MeCab before 0.96 has unknown impact and attack vectors...
DEBIAN-CVE-2007-2231
Directory traversal vulnerability in index/mbox/mbox-storage.c in Dovecot before 1.0.rc29, when using the zlib plugin, allows remote attackers to read arbitrary gzipped .gz mailboxes mbox files via a .. dot dot sequence in the mailbox name...
CVE-2007-1182
WebAPP before 0.9.9.5 allows remote Guest users to edit a Guest profile, which has unknown impact...
D-Bus denial of service
Unspecified vulnerability in the matchruleequal function in bus/signals.c in D-Bus before 1.0.2 allows local applications to remove match rules for other applications and cause a denial of service lost process messages...
DEBIAN-CVE-2006-5444
Integer overflow in the getinput function in the Skinny channel driver chanskinny.c in Asterisk 1.0.x before 1.0.12 and 1.2.x before 1.2.13, as used by Cisco SCCP phones, allows remote attackers to execute arbitrary code via a certain dlen value that passes a signed integer comparison and leads t...
security flaw
Multiple vulnerabilities in libtiff before 3.8.1 allow context-dependent attackers to cause a denial of service via a TIFF image that triggers errors in 1 the TIFFFetchAnyArray function in a tifdirread.c; 2 certain "codec cleanup methods" in b tiflzw.c, c tifpixarlog.c, and d tifzip.c; 3 and...
security flaw
Unspecified vulnerability in Java Applets in OpenOffice.org 1.1.x aka StarOffice up to 1.1.5 and 2.0.x before 2.0.3 allows user-assisted attackers to escape the Java sandbox and conduct unauthorized activities via certain applets in OpenOffice documents...
DEBIAN-CVE-2006-1615
Multiple format string vulnerabilities in the logging code in Clam AntiVirus ClamAV before 0.88.1 might allow remote attackers to execute arbitrary code. NOTE: as of 20060410, it is unclear whether this is a vulnerability, as there is some evidence that the arguments are actually being sanitized...
PYSEC-2006-1
Directory traversal vulnerability in the staticfilter component in CherryPy before 2.1.1 allows remote attackers to read arbitrary files via ".." sequences in unspecified vectors...
DEBIAN-CVE-2005-3256
The key selection dialogue in Enigmail before 0.92.1 can incorrectly select a key with a user ID that does not have additional information, which allows parties with that key to decrypt the message...
security flaw
Directory traversal vulnerability in scp for OpenSSH before 3.4p1 allows remote malicious servers to overwrite arbitrary files. NOTE: this may be a rediscovery of CVE-2000-0992...
security flaw
Multiple unknown vulnerabilities in the 1 WSP, 2 BER, 3 SMB, 4 NDPS, 5 IAX2, 6 RADIUS, 7 TCAP, 8 MRDISC, 9 802.3 Slow, 10 SMBMailslot, or 11 SMB PIPE dissectors in Ethereal before 0.10.11 allow remote attackers to cause a denial of service assert error...
security flaw
Multiple buffer overflows in the 1 SIP, 2 CMIP, 3 CMP, 4 CMS, 5 CRMF, 6 ESS, 7 OCSP, 8 X.509, 9 ISIS, 10 DISTCC, 11 FCELS, 12 Q.931, 13 NCP, 14 TCAP, 15 ISUP, 16 MEGACO, 17 PKIX1Explitit, 18 PKIXQualified, 19 Presentation dissectors in Ethereal before 0.10.11 allow remote attackers to cause a...
CVE-2004-1180
Unknown vulnerability in the rwho daemon rwhod before 0.17, on little endian architectures, allows remote attackers to cause a denial of service application crash...
CVE-2004-2268
PimenGest2 before 1.1.1 allows remote attackers to obtain the database password via debug information in rowLatex.inc.php...
CVE-2004-2744
Unspecified vulnerability in Tincan Limited PHPlist before 2.8.12 has unknown impact and attack vectors, related to a "security update release."...
security flaw
The Internet Printing Protocol IPP implementation in CUPS before 1.1.21 allows remote attackers to cause a denial of service service hang via a certain UDP packet to the IPP port...