Sql injection

The weekpostpage function in the Weekly Archive by Node Type module 6.x before 6.x-2.7 for Drupal does not properly implement node access restrictions when constructing SQL queries, which allows remote attackers to read restricted node listings via unspecified vectors...

GLSA-201001-03 : PHP: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201001-03 PHP: Multiple vulnerabilities Multiple vulnerabilities have been discovered in PHP. Please review the CVE identifiers referenced below and the associated PHP release notes for details. Impact : A context-dependent attack...

CA Products AV Engine CHM File Handling Denial of Service (CVE-2007-3875)

CA provides an anti-virus engine that is shared among multiple applications and products. The anti-virus engine is capable of scanning files stored in numerous archive format. One of these archive formats is the Microsoft compiled help files, as known as CHM. There exists a denial of service...

Debian DSA-1974-1 : gzip - several vulnerabilities

Several vulnerabilities have been found in gzip, the GNU compression utilities. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2009-2624 Thiemo Nagel discovered a missing input sanitation flaw in the way gzip used to decompress data blocks for dynamic...

SA-CONTRIB-2010-019 - Weekly Archive by Node Type - Access Bypass

The Weekly Archive by Node Type module generates weekly archive pages and a block with links to the pages. You can specify the node types that will be included in the archive pages. In weekly summaries listings, the Weekly Archive by Node Type module does not construct its SQL query to respect no...

Apache Tomcat Manager Application Deployer Upload and Execute

$Id: tomcatmgrdeploy.rb 8552 2010-02-18 18:18:43Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framewor...

SphereCMS 1.1 Alpha Blind SQL Injection

www.BugReport.ir AmnPardaz Security Research Team Title: SphereCMS Blind SQL Injection Vulnerability Vendor: http://sphere.xlentprojects.se/ Vulnerable Version: 1.1 alpha Latest version till now Exploitation: Remote with browser Fix: N/A - Description: SphereCMS is a CMS which allow managing foru...

[security bulletin] HPSBMA02488 SSRT100013 rev.1 - HP ProLiant Support Pack 8.30 for Windows, Remote Code Execution, Information Disclosure

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c01997644 Version: 1 HPSBMA02488 SSRT100013 rev.1 - HP ProLiant Support Pack 8.30 for Windows, Remote Code Execution, Information Disclosure NOTICE: The information in this Security Bulletin shoul...

GZip 'huft_build()' in 'inflate.c' Input Validation Vulnerability (Linux)

This host is installed with GZip and is prone to Input Validation Vulnerability OpenVAS Vulnerability Test $Id: gbgzipinflatedosvulnlin.nasl 6664 2017-07-11 10:20:11Z cfischer $ GZip 'huftbuild' in 'inflate.c' Input Validation Vulnerability Linux Authors: Antu Sanadi Copyright: Copyright c 2010...

GZip 'huft_build()' in 'inflate.c' Input Validation Vulnerability - Linux

GZip is prone to an input validation vulnerability. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:gnu:gzip"; ifdescription...

GZip 'huft_build()' in 'inflate.c' Input Validation Vulnerability (Windows)

This host is installed with GZip and is prone to Input Validation Vulnerability OpenVAS Vulnerability Test $Id: gbgzipinflatedosvulnwin.nasl 5306 2017-02-16 09:00:16Z teissa $ GZip 'huftbuild' in 'inflate.c' Input Validation Vulnerability Windows Authors: Antu Sanadi Copyright: Copyright c 2010...

DEBIAN-CVE-2010-0001

Integer underflow in the unlzw function in unlzw.c in gzip before 1.4 on 64-bit platforms, as used in ncompress and probably others, allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted archive that uses LZW compression, leading t...

CVE-2010-0001

Integer underflow in the unlzw function in unlzw.c in gzip before 1.4 on 64-bit platforms, as used in ncompress and probably others, allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted archive that uses LZW compression, leading t...

Design/Logic Flaw

The huftbuild function in inflate.c in gzip before 1.3.13 creates a hufts aka huffman table that is too small, which allows remote attackers to cause a denial of service application crash or infinite loop or possibly execute arbitrary code via a crafted archive. NOTE: this issue is caused by a...

CVE-2010-0001

Integer underflow in the unlzw function in unlzw.c in gzip before 1.4 on 64-bit platforms, as used in ncompress and probably others, allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted archive that uses LZW compression, leading t...

CVE-2009-2624

CVE-2009-2624 affects the GNU gzip utility. The bug is in gzip’s huft_build function (inflate.c) where the Huffman table is allocated too small, enabling a crafted archive to cause a denial of service (crash or infinite loop) and possibly arbitrary code execution. Root cause is a regression from ...

CVE-2009-2624

The huftbuild function in inflate.c in gzip before 1.3.13 creates a hufts aka huffman table that is too small, which allows remote attackers to cause a denial of service application crash or infinite loop or possibly execute arbitrary code via a crafted archive. NOTE: this issue is caused by a...

gzip: (64 bit) Integer underflow by decompressing LZW format files

Integer underflow in the unlzw function in unlzw.c in gzip before 1.4 on 64-bit platforms, as used in ncompress and probably others, allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted archive that uses LZW compression, leading t...

DSA-1974-1 gzip - arbitrary code execution

Bulletin has no description...

CVE-2010-0001

Integer underflow in the unlzw function in unlzw.c in gzip before 1.4 on 64-bit platforms, as used in ncompress and probably others, allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted archive that uses LZW compression, leading t...