1068 matches found
w-CMS 2.0.1 - Remote Code Execution Vulnerability
No description provided by source...
CVE-2013-2145
The cpansign verify functionality in the Module::Signature module before 0.72 for Perl allows attackers to bypass the signature check and execute arbitrary code via a SIGNATURE file with a "special unknown cipher" that references an untrusted module in Digest/...
PHP-Charts 1.0 - Code Execution
PHP-Charts 1.0 - Code Execution Exploit Title: PHP-CHARTS v1.0 code execution vulnerability Date: 05/15/2013 Exploit Author: fizzle stick Vendor Homepage: http://php-charts.com/ Software Link: http://php-charts.com/downloads/php-chartv1.0.zip Version: v1.0 Tested on: Windows Summary: PHP-charts...
flash-player (important)
flash-player 11.1.102.63 fixes two security issues: - memory corruption vulnerability in Matrix3D could lead to code executionn CVE-2012-0768 - integer errors that could lead to information disclosure CVE-2012-0769...
CVE-2011-2648
Unspecified vulnerability in Kiwi before 3.74.2, as used in SUSE Studio 1.1 before 1.1.4, allows remote attackers to execute arbitrary code via a filter in a modified file...
CentOS Update for glibc CESA-2011:0412 centos5 i386
The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...
Google Chrome < 10.0.648.134 Code Execution Vulnerability
Binary data 800895.prm...
CVE-2009-4035
The FoFiType1::parse function in fofi/FoFiType1.cc in Xpdf 3.0.0, gpdf 2.8.2, kpdf in kdegraphics 3.3.1, and possibly other libraries and versions, does not check the return value of the getNextLine function, which allows context-dependent attackers to execute arbitrary code via a PDF file with a...
KDE KDELibs 'dtoa()'远程代码执行漏洞
Bugraq ID: 37080 CVE ID:CVE-2009-0689 KDE是一款UNIX工下开源图形桌面环境。 KDELibs是建立在Qt框架之上,它提供框架和众多功能来开发KDE程序。其中dtoa实现存在错误,处理特殊构建的浮点数可导致内存覆盖。由于Kmac定义为15,dtoa函数没有检查Kmac限制,可能调用大于等于16的freelist数组元素。 KDE 4.3.3 目前没有详细解决方案提供: http://www.kde.org/ - ----------------------- script var a=0.?php echo strrepeat"1",296450;...
CentOS Update for ed CESA-2008:0946 centos4 i386
Check for the Version of ed OpenVAS Vulnerability Test CentOS Update for ed CESA-2008:0946 centos4 i386 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...
DSA-1566-1 cpio - programming error
Bulletin has no description...
Design/Logic Flaw
Unspecified vulnerability in Dokeos 1.8.4 before SP3 allows attackers to execute arbitrary code via unspecified vectors...
DTSA-54-1 poppler - arbitrary code execution
Bulletin has no description...
EUVD-2006-5605
PHP remote file inclusion vulnerability in include/menubuilder.php in MiniBILL 2006-10-10 1.2.3 and earlier, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the configpagedir parameter, a different vector than CVE-2006-4489...
CVE-2005-4667
Buffer overflow in UnZip 5.50 and earlier allows user-assisted attackers to execute arbitrary code via a long filename command line argument. NOTE: since the overflow occurs in a non-setuid program, there are not many scenarios under which it poses a vulnerability, unless unzip is passed long...
CVE-2005-1965
CVE-2005-1965 is a PHP remote file inclusion in Siteframe’s siteframe.php (Broadpool Siteframe). The LOCAL_PATH parameter can be manipulated to cause the server to include arbitrary files and execute PHP code on the remote host. Affected component is siteframe.php; impact is remote code execution...
CVE-2005-0523
Format string vulnerability in ProZilla 1.3.7.3 and earlier allows remote attackers to execute arbitrary code via format string specifiers in the Location header...
CVE-2005-1187
Heap-based buffer overflow in WinHex 12.05 SR-14, and possibly other versions, may allow attackers to execute arbitrary code via a long file name argument. NOTE: since this overflow is in the command line of an unprivileged program, it is highly likely that this is not a vulnerability...
AWStats 5.7 - 6.2 Multiple Remote Exploit
No description provided by source. / AWStats v5.7 - v6.2 sileAWSxpl This exploit utilize three methods for exploiter the vulnerability found on AWStats software. an user can execute remote code on vulnerable machine, with httpd privileges. References: www.securityfocus.org/bid/12543 coded by:...
[SECURITY] [DSA 684-1] New typespeed packages fix arbitrary group games code execution
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- Debian Security Advisory DSA 684-1 [email protected] http://www.debian.org/security/ Martin Schulze February 16th, 2005 http://www.debian.org/security/faq -...