6662 matches found
CVE-2006-5874
Clam AntiVirus ClamAV 0.88 and earlier allows remote attackers to cause a denial of service crash via a malformed base64-encoded MIME attachment that triggers a null pointer dereference...
Microsoft Windows Help存在多个漏洞
Microsoft Help WINHLP32.EXE处理.hlp文件存在多个远程代码执行和拒绝服务问题。 攻击者可以在WEB页上防止恶意帮助文件，或者通过EMAIL附件形式发送，诱使用户打开来触发此漏洞，成功利用此漏洞可以以进程权限执行任意指令。 Microsoft Windows XP Tablet PC Edition SP2 Microsoft Windows XP Tablet PC Edition SP1 Microsoft Windows XP Tablet PC Edition Microsoft Windows XP Professional x64 Edition...
FreeBSD : bugzilla -- multiple vulnerabilities (6d68618a-7199-11db-a2ad-000c6ec775d9)
A Bugzilla Security Advisory reports : - Sometimes the information put into the and tags in Bugzilla was not properly escaped, leading to a possible XSS vulnerability. - Bugzilla administrators were allowed to put raw, unfiltered HTML into many fields in Bugzilla, leading to a possible XSS...
CVE-2006-5902
viksoe GMail Drive shell extension allows remote attackers to perform virtual filesystem actions via e-mail messages with certain subject lines, as demonstrated by 1 a GMAILFS: 13;a;1 message with a new filename and a file attachment, which injects a new file into the filesystem; 2 a GMAILFS:...
CVE-2006-5790
Multiple format string vulnerabilities in elogd.c in ELOG 2.6.2 and earlier allow remote attackers to cause a denial of service crash and possibly execute arbitrary code via 1 an entry with an attachment whose name contains format string specifiers elsubmit function, and possibly other vectors in...
CVE-2006-5454
Bugzilla 2.18.x before 2.18.6, 2.20.x before 2.20.3, 2.22.x before 2.22.1, and 2.23.x before 2.23.3 allow remote attackers to obtain 1 the description of arbitrary attachments by viewing the attachment in "diff" mode in attachment.cgi, and 2 the deadline field by viewing the XML format of the bug...
Move-NewComment. asp injection vulnerability sql Edition using the program-vulnerability warning-the black bar safety net
! attachments/200610/222033341.jpg ! click for download "attachments/200610/22203429dongyi2006.rar"...
security flaw
Linux kernel 2.4.x and 2.6.x up to 2.6.16 allows local users to bypass IPC permissions and modify a readonly attachment of shared memory by using mprotect to give write permission to the attachment. NOTE: some original raw sources combined this issue with CVE-2006-1524, but they are different bug...
bugzilla -- multiple vulnerabilities
A Bugzilla Security Advisory reports: Sometimes the information put into the and tags in Bugzilla was not properly escaped, leading to a possible XSS vulnerability. Bugzilla administrators were allowed to put raw, unfiltered HTML into many fields in Bugzilla, leading to a possible XSS...
Debian DSA-887-1 : clamav - several vulnerabilities
Several vulnerabilities have been discovered in Clam AntiVirus, the antivirus scanner for Unix, designed for integration with mail servers to perform attachment scanning. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2005-3239 The OLE2 unpacker allows...
Debian DSA-1161-2 : mozilla-firefox - several vulnerabilities
The latest security updates of Mozilla Firefox introduced a regression that led to a dysfunctional attachment panel which warrants a correction to fix this issue. For reference please find below the original advisory text : Several security related problems have been discovered in Mozilla and...
Debian DSA-1159-2 : mozilla-thunderbird - several vulnerabilities
The latest security updates of Mozilla Thunderbird introduced a regression that led to a dysfunctional attachment panel which warrants a correction to fix this issue. For reference please find below the original advisory text : Several security related problems have been discovered in Mozilla and...
Debian DSA-1154-1 : squirrelmail - variable overwriting
James Bercegay of GulfTech Security Research discovered a vulnerability in SquirrelMail where an authenticated user could overwrite random variables in the compose script. This might be exploited to read or write the preferences or attachment files of other users. %NASLMINLEVEL 70300 C Tenable...
Debian DSA-1160-2 : mozilla - several vulnerabilities
The latest security updates of Mozilla introduced a regression that led to a dysfunctional attachment panel which warrants a correction to fix this issue. For reference please find below the original advisory text : Several security related problems have been discovered in Mozilla and derived...
Microsoft Security Advisory (925984) Vulnerability in PowerPoint Could Allow Remote Code Execution
Microsoft Security Advisory 925984 Vulnerability in PowerPoint Could Allow Remote Code Execution Published: September 27, 2006 Microsoft is investigating new public reports of limited “zero-day” attacks using a vulnerability in Microsoft PowerPoint 2000, Microsoft PowerPoint 2002, Microsoft Offic...
CVE-2006-4951
Neon WebMail for Java before 5.08 allows remote attackers to execute arbitrary Java JSP code by sending an e-mail message with a JSP file attachment, which is stored under the web root with a predictable filename...
CVE-2006-4951
Neon WebMail for Java before 5.08 is vulnerable to remote code execution: an attacker can send an email containing a JSP attachment that is stored under the web root with a predictable filename, allowing execution of arbitrary Java (JSP) code on the server. The affected component is Neon WebMail ...
Limbo CMS <= 1.0.4.2L (com_contact) Remote Code Execution Exploit
No description provided by source. !/usr/bin/php -q -d shortopentag=on ? printr' ----------------------------------------------------------------------------- Limbo = 1.0.4.2L "comcontact" remote commands execution exploit by rgod [email protected] site: http://retrogod.altervista.org dorks:...
[SECURITY] [DSA 1159-2] New Mozilla Thunderbird packages fix several problems
-------------------------------------------------------------------------- Debian Security Advisory DSA 1159-2 [email protected] http://www.debian.org/security/ Martin Schulze September 8th, 2006 http://www.debian.org/security/faq -...
