Mozilla Firefox < 1.1 POP3 Client Malformed Email DoS

Binary data 1758.prm...

War FTP Daemon < 1.67b5 Traversal Arbitrary Directory Access

Binary data 1831.prm...

Netscape < 6.2.3 POP3 Client Malformed Email DoS

Binary data 1760.prm...

Wget < 1.8.3 Rogue FTP Site File Deletion

Binary data 1744.prm...

SSH < 1.2.28 Kerberos NFS Share Ticket Disclosure

Binary data 1977.prm...

MySQL < 4.0.21 mysql_real_connect() Function Remote Overflow

The remote host is running a version of MySQL that is older than 4.0.21. MySQL is a database that runs on both Linux/BSD and Windows platforms. This version is vulnerable to a length overflow within it's mysqlrealconnect function. The overflow is due to an error in the processing of a return Doma...

HP System Management Homepage (SMH) < 2.1.12 Unspecified XSS

Binary data 4595.prm...

Unreal IRCD < 3.2.1 Cloak IP Address Disclosure

Binary data 2153.prm...

Cherokee Web Server < 0.5.1 XSS

Binary data 3508.prm...

Savant < 3.0 GET Request CGI Source Disclosure

Binary data 1518.prm...

Horde Passwd Module < 3.1.1 XSS

Binary data 5092.prm...

Coppermine Gallery < 1.1 beta 3 SQL Injection (deprecated)

Binary data 1553.prm...

FreeBSD : acroread uudecoder input validation error (78348ea2-ec91-11d8-b913-000c41e2cdad)

An iDEFENSE security advisory reports : Remote exploitation of an input validation error in the uudecoding feature of Adobe Acrobat Reader Unix 5.0 allows an attacker to execute arbitrary code. The Unix and Linux versions of Adobe Acrobat Reader 5.0 automatically attempt to convert uuencoded...

Opera < 7.20 news URL Handling DoS

The version of Opera installed on the remote host reportedly crashes when processing a 'news:' URL of excessive length, that may result in a denial of service. It has been reported that this issue will trigger a condition that will prevent Opera from functioning until the program has been...

phpBB Fetch All < 2.0.12 Multiple Scripts SQL Injection

The remote host is running a version of phpBB FetchAll older than 2.0.12. It is reported that this version of phpBB Fetch All is susceptible to a SQL injection vulnerability. This issue is due to a failure of the application to properly sanitize user-supplied input before using it in a SQL query...

CVE-2004-0652

BEA WebLogic Server and WebLogic Express 7.0 through 7.0 Service Pack 4, and 8.1 through 8.1 Service Pack 2, allows attackers to obtain the username and password for booting the server by directly accessing certain internal methods...

Firefox < 0.9.3 Null Character MIME Type Spoofing Arbitrary Code Execution

The installed version of Firefox is earlier than 0.9.3. Such versions may allow arbitrary code execution. The security vulnerability is due to the fact that Firefox stores cached HTML documents with a known file name, and to the fact that it's possible to force Firefox to open cached files as HTM...

Horde IMP with MSIE MIME Viewer Email Message XSS

The remote server is running at least one instance of IMP whose version number is 3.2.4 or lower. Such versions are vulnerable to a cross-scripting attack whereby an attacker may be able to inject arbitrary content, including script, in a specially crafted MIME message. To have an effect, the...

Samba Mangling Method Hash Overflow

The remote Samba server, according to its version number, is vulnerable to a buffer overflow if the option 'mangling method' is set to 'hash' in smb.conf which is not the case by default. An attacker may exploit this flaw to execute arbitrary commands on the remote host. C Tenable Network Securit...

Opera Web Browser 7.5 - Resource Detection

Opera Web Browser 7.5 - Resource Detection source: https://www.securityfocus.com/bid/10961/info Opera Web Browser is prone to a security weakness that may permit an attacker to determine the existence of resources on a vulnerable computer. An attacker can use an IFRAME that is accessible within t...