709 matches found
Squid WCCP Message Receive Buffer Overflow (CVE-2005-0211)
Squid is a caching proxy for the Web supporting HTTP, HTTPS, FTP, and more. An attacker can exploit this vulnerability to terminate the vulnerable product, creating a denial of service condition, or it can be exploited for code. A remote vulnerability was found in Squid web proxy/cache processes...
CVE-2011-0846
Unspecified vulnerability in the Oracle Sun Java System Access Manager Policy Agent 2.2 allows remote attackers to affect availability via unknown vectors related to Web Proxy Agent...
Design/Logic Flaw
Unspecified vulnerability in the Oracle Sun Java System Access Manager Policy Agent 2.2 allows remote attackers to affect availability via unknown vectors related to Web Proxy Agent...
DSA-2111-1 squid3 - denial of service
Bulletin has no description...
iBoutique.MALL 1.2 XSS vuln.
Vuln. discovered by : r0t Date: 09 September 2010 vendor:http://www.netartmedia.net/mall/ orginal advisory:http://pridels-team.blogspot.com/2010/09/iboutiquemall-12-xss-vuln.html affected versions:iBoutique.MALL 1.2and other versions also can be affected. iBoutique.MALL 1.2 contains a flaw that...
NetArtMEDIA Real Estate Portal v2.0 XSS vuln. + NetArtMEDIA lfi.
Vuln. discovered by : r0t Date: 09 September 2010 vendor:http://www.netartmedia.net/realestate/ original advisory:http://pridels-team.blogspot.com/2010/09/netartmedia-real-estate-portal-v20-xss.html affected versions:NetArtMEDIA Real Estate Portal v2.0 and other versions also can be affected...
PowerStore™ 3 XSS vuln.
Vuln. discovered by : r0t Date: 09 September 2010 vendor:http://www.webassist.com/php-scripts-and-solutions/powerstore/ orginal advisory:http://pridels-team.blogspot.com/2010/09/powerstore-3-xss-vuln.html affected versions:PowerStore™ 3 and other versions also can be affected. PowerStore™ 3...
Open Classifieds version 1.7.0.2 XSS Vuln.
Vuln. discovered by : r0t Date: 12 September 2010 vendor:http://open-classifieds.com/ orginal advisory:http://pridels-team.blogspot.com/2010/09/open-classifieds-version-1702-xss-vuln.html affected versions:Open Classifieds version 1.7.0.2 Open Classifieds version 1.7.0 and other prior versions al...
NetArtMEDIA Car Portal v2.0 XSS vuln.
Vuln. discovered by : r0t Date: 09 September 2010 vendor:http://www.netartmedia.net/carsportal/ orginal advisory:http://pridels-team.blogspot.com/2010/09/netartmedia-car-portal-v20-xss-vuln.html affected versions:v2.0 and other versions also can be affected. NetArtMEDIA Car Portal contains a flaw...
Member Management System v 4.0 XSS vuln.
Vuln. discovered by : r0t Date: 09 September 2010 vendor:http://www.expinion.net/Applications/MMSoverview.asp orginal advisory:http://pridels-team.blogspot.com/2010/09/member-management-system-v-40-xss-vuln.html affected versions:v 4.0 and other versions also can be affected. Member Management...
Squid代理字符串处理空指针引用漏洞
BUGTRAQ ID: 42982 Squid是一个高效的Web缓存及代理程序，最初是为Unix平台开发的，现在也被移植到Linux和大多数的Unix类系统中，最新的Squid可以运行在Windows平台下。 某些Squid内部字符串处理例程没有正确地检查空指针，远程攻击者可以通过发送恶意请求导致拒绝服务。 Squid Web Proxy Cache 3.2 Squid Web Proxy Cache 3.1 Squid Web Proxy Cache 3.0 临时解决方法： 如果您不能立刻安装补丁或者升级，NSFOCUS建议您采取以下措施以降低威胁： 1 将ignoreexpect10...
CVE-2010-2385
Unspecified vulnerability in Oracle Sun Java System Web Proxy Server 4.0.13 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Administration Server...
Design/Logic Flaw
Unspecified vulnerability in Oracle Sun Java System Web Proxy Server 4.0.13 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Administration Server...
CVE-2010-2385
Unspecified vulnerability in Oracle Sun Java System Web Proxy Server 4.0.13 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Administration Server...
CVE-2010-2385
CVE-2010-2385 affects Sun Java System Web Proxy Server 4.0.13. The vulnerability is described as unspecified and exploitable remotely via the Administration Server (HTTP). The CVE is listed with a base score of 5.8 (Medium) and is included in the Oracle July 2010 Critical Patch Update advisory, w...
DirectAdmin <= v1.35.1 XSS vuln.
DirectAdmin = v1.35.1 XSS vuln. Vuln. discovered by : r0t Date: 15 March 2010 vendor:http://www.directadmin.com/ affected versions:v1.35.1 and other versions also can be affected. orginal advisory:http://pridels-team.blogspot.com/2010/03/directadmin-v1351-xss-vuln.html DirectAdmin contains a flaw...
Squid Web代理缓存HTCP请求远程拒绝服务漏洞
BUGTRAQ ID: 38212 CVE ID: CVE-2010-0639 Squid是一个高效的Web缓存及代理程序，最初是为Unix平台开发的，现在也被移植到Linux和大多数的Unix类系统中，最新的Squid可以运行在Windows平台下。 远程攻击者可以通过向Squid的HTCP端口发送畸形报文触发空指针引用，导致Squid崩溃。 Squid Web Proxy Cache 3.0 Squid Web Proxy Cache 2.x 临时解决方法： 如果您不能立刻安装补丁或者升级，NSFOCUS建议您采取以下措施以降低威胁： 对于Squid-2.x 明确配置htcpport...
Debian DSA-1991-1 : squid/squid3 - denial of service
Two denial of service vulnerabilities have been discovered in squid and squid3, a web proxy. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2009-2855 Bastian Blank discovered that it is possible to cause a denial of service via a crafted auth header wit...
Debian DSA-2002-1 : polipo - denial of service
Several denial of service vulnerabilities have been discovered in polipo, a small, caching web proxy. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2009-3305 A malicous remote server could cause polipo to crash by sending an invalid Cache-Control heade...