6417 matches found
CVE-2005-0417: Undefined Security Weakness
Unknown "high risk" vulnerability in DB2 Universal Database 8.1 and earlier has unknown impact and attack vectors. NOTE: due to the delayed disclosure of details for this issue, this candidate may be SPLIT in the future. In addition, this may be a duplicate of other issues as reported by the vend...
Microsoft Internet Explorer 5.0.1 - Mouse Event URI Status Bar Obfuscation
source: https://www.securityfocus.com/bid/12541/info Microsoft Internet Explorer is reported prone to a URI obfuscation weakness. The issue presents itself when a HREF tag contains certain mouse events. This issue may be leveraged by an attacker to display false information in the status bar or U...
GLSA-200501-21 : HylaFAX: hfaxd unauthorized login vulnerability
The remote host is affected by the vulnerability described in GLSA-200501-21 HylaFAX: hfaxd unauthorized login vulnerability The code used by hfaxd to match a given username and hostname with an entry in the hosts.hfaxd file is insufficiently protected against malicious entries. Impact : If the...
CVE-2004-1483: Undefined Security Weakness
Multiple unknown vulnerabilities in the ActiveX and HTML file browsers in Symantec Clientless VPN Gateway 4400 Series 5.0 have unknown attack vectors and unknown impact...
CVE-2003-1059: Undefined Security Weakness
Unknown vulnerability in the libraries for the PGX32 frame buffer in Solaris 2.5.1 and 2.6 through 9 allows local users to gain root access...
WebWasherCONNECT.txt
WebWasher Classic - HTTP CONNECT weakness ========================================= WebWasher Classic ================= WebWasher Classic is a well known HTTP-URL/Popup/Script filtering proxy which is free for non commercial use. WebWasher Classic supports two modes, a client mode, where it only...
CVE-2005-0148: Undefined Security Weakness
Thunderbird before 0.9, when running on Windows systems, uses the default handler when processing javascript: links, which invokes Internet Explorer and may expose the Thunderbird user to vulnerabilities in the version of Internet Explorer that is installed on the user's system. NOTE: since the...
WebWasher Classic 2.22.3 - HTTP CONNECT Unauthorized Access
WebWasher Classic 2.22.3 - HTTP CONNECT Unauthorized Access source: https://www.securityfocus.com/bid/12394/info It is reported that WebWasher Classic is prone to a weakness that may allow remote attackers to connect to arbitrary ports on a vulnerable computer. This weakness may be combined with...
SiteMinder smpwservicescgi.exe Arbitrary Site Redirect
The remote host is running Netegrity SiteMinder, an access management solution. The remote version of this software is vulnerable to a page injection flaw that may allow an attacker to trick users into sending him their credentials via a link to the 'smpwservicescgi.exe' program with a rogue TARG...
Microsoft Windows Media Player 9.0 - ActiveX Control File Enumeration
source: https://www.securityfocus.com/bid/12032/info The Windows Media Player ActiveX control is prone to a security weakness that may allow a malicious Web page to enumerate files that exist on the client computer. This could aid in further attacks. This issue is reported to affect Windows Media...
Microsoft Windows Media Player 9.0 - ActiveX Control Media File Attribute Corruption
source: https://www.securityfocus.com/bid/12031/info The Windows Media Player ActiveX control is prone to a security weakness. The issue is that the control may be abused by a Web page to change attributes of media files such as MP3. An attacker can influence attributes such as the artist, song...
Microsoft Windows Media Player 9.0 - ActiveX Control File Enumeration
Microsoft Windows Media Player 9.0 - ActiveX Control File Enumeration source: https://www.securityfocus.com/bid/12032/info The Windows Media Player ActiveX control is prone to a security weakness that may allow a malicious Web page to enumerate files that exist on the client computer. This could...
[SA13438] Winmail Server Installation Path Disclosure Weakness
TITLE: Winmail Server Installation Path Disclosure Weakness SECUNIA ADVISORY ID: SA13438 VERIFY ADVISORY: http://secunia.com/advisories/13438/ CRITICAL: Not critical IMPACT: Exposure of system information WHERE: From remote SOFTWARE: Winmail Server 4.x http://secunia.com/product/4370/ DESCRIPTION...
Cherokee Web Server Port Bind Privilege Drop Weakness
The remote host is running Cherokee - a fast and tiny web server. The remote version of this software is vulnerable to remote command execution due to a lack of web requests sanitization, especially shell metacharacters. Additionally, this version fails to drop root privileges after it binds to...
Apple Safari 1.2 Web Browser - TABLE Status Bar URI Obfuscation
Apple Safari 1.2 Web Browser - TABLE Status Bar URI Obfuscation source: https://www.securityfocus.com/bid/11573/info A URI obfuscation weakness reportedly affects the Apple Safari Web Browser. This issue may be leveraged by an attacker to display false information in the status bar of an...
Apple Safari 1.2 Web Browser - TABLE Status Bar URI Obfuscation
source: https://www.securityfocus.com/bid/11573/info A URI obfuscation weakness reportedly affects the Apple Safari Web Browser. This issue may be leveraged by an attacker to display false information in the status bar of an unsuspecting user, allowing an attacker to present web pages to users th...
Microsoft Internet Explorer 6 - HTML Form Tags URI Obfuscation
Microsoft Internet Explorer 6 - HTML Form Tags URI Obfuscation source: https://www.securityfocus.com/bid/11565/info Microsoft Internet Explorer is reported prone to a URI obfuscation weakness. The issue is due to a failure of the affected application to properly handle specially crafted HTML anch...
CVE-2004-0979: Undefined Security Weakness
Internet Explorer on Windows XP does not properly modify the "Drag and Drop or copy and paste files" setting when the user sets it to "Disable" or "Prompt," which may enable security-sensitive operations that are inconsistent with the user's intended configuration...
Microsoft Windows XP - Weak Default Configuration
Microsoft Windows XP - Weak Default Configuration // source: https://www.securityfocus.com/bid/11410/info Microsoft Windows XP Service Pack 2 is reported prone to a weak default configuration vulnerability. Internet Connection Firewall ICF includes functionality that controls what binaries are...