Buffer overflow

Buffer overflow in Java Runtime Environment JRE for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; SDK and JRE 1.4.218 and earlier; and SDK and JRE 1.3.123 and earlier might allow remote attackers to execute arbitrary code, related to a ConvolveOp operation in the...

CVE-2008-5359

CVE-2008-5359 is a buffer overflow in the Sun Java Runtime Environment (JRE) affecting JRE/JDK versions up to: 6 Update 10 and earlier; 5.0 Update 16 and earlier; 1.4.2_18 and earlier; and 1.3.1_23 and earlier. Root cause involves a ConvolveOp operation in the AWT library, enabling a remote attac...

CVE-2008-5359

Buffer overflow in Java Runtime Environment JRE for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; SDK and JRE 1.4.218 and earlier; and SDK and JRE 1.3.123 and earlier might allow remote attackers to execute arbitrary code, related to a ConvolveOp operation in the...

CVE-2008-5359

Buffer overflow in Java Runtime Environment JRE for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; SDK and JRE 1.4.218 and earlier; and SDK and JRE 1.3.123 and earlier might allow remote attackers to execute arbitrary code, related to a ConvolveOp operation in the...

Sun Java AWT Library Sandbox Violation Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Sun Microsystems Java. User interaction is required in that a user must open a malicious file or visit a malicious web page. The specific flaw occurs within the Java AWT library. If a custom image...

CVE-2008-2968

SQL injection vulnerability in rating.php in Academic Web Tools AWT YEKTA 1.4.3.1, and 1.4.2.8 and earlier, allows remote attackers to execute arbitrary SQL commands via the bookid parameter...

CVE-2008-2967

The CVE-2008-2967 entry describes multiple XSS flaws in Academic Web Tools (AWT YEKTA) versions 1.4.3.1, 1.4.2.8 and earlier. The vulnerabilities allow arbitrary script/HTML injection via (1) the query string to login.php, (2) the glb_sid parameter to hta/htmlarea.js.php, and (3) an unspecified f...

CVE-2008-2967

Multiple cross-site scripting XSS vulnerabilities in Academic Web Tools AWT YEKTA 1.4.3.1, and 1.4.2.8 and earlier, allow remote attackers to inject arbitrary web script or HTML via the 1 query string to login.php and the 2 glbsid parameter to hta/htmlarea.js.php, and allow remote authenticated...

CVE-2008-2968

CVE-2008-2968 is a SQL injection vulnerability in rating.php of Academic Web Tools (AWT YEKTA) prior to or including version 1.4.3.1 and 1.4.2.8, exploitable via the book_id parameter to allow remote execution of arbitrary SQL commands. The vulnerability is documented with a CVSS v2 base score of...

CVE-2008-2969

The CVE-2008-2969 entry concerns a directory traversal vulnerability in Academic Web Tools (AWT YEKTA) versions 1.4.3.1 and 1.4.2.8 (and earlier). The underlying issue is that the dfile parameter can be manipulated with a .. (dot dot) path segment in download.php, allowing remote attackers to rea...

CVE-2008-2970

CVE-2008-2970 describes multiple session fixation vulnerabilities in Academic Web Tools (AWT YEKTA) versions 1.4.3.1 and 1.4.2.8 and earlier. The issue allows remote attackers to hijack user sessions by supplying a crafted PHPSESSID value targeted at index.php and login.php within the homepg/ dir...

CVE-2008-2878

Open redirect vulnerability in rssgetfile.php in Academic Web Tools AWT YEKTA 1.4.3.1, and 1.4.2.8 and earlier, allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the file parameter...

Open redirect

Open redirect vulnerability in rssgetfile.php in Academic Web Tools AWT YEKTA 1.4.3.1, and 1.4.2.8 and earlier, allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the file parameter...

CVE-2008-2878

Open redirect vulnerability in rssgetfile.php in Academic Web Tools AWT YEKTA 1.4.3.1, and 1.4.2.8 and earlier, allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the file parameter...

Moderate: Red Hat Security Advisory: IBMJava2 security update

IBMJava2-JRE and IBMJava2-SDK packages that correct several security issues are available for Red Hat Enterprise Linux 2.1. IBM's 1.3.1 Java release includes the IBM Java 2 Runtime Environment and the IBM Java 2 Software Development Kit. A buffer overflow was found in the Java Runtime Environment...

Code injection

Robocode before 1.6.0 allows user-assisted remote attackers to "access the internals of the Robocode game" via unspecified vectors related to the AWT Event Queue...

CVE-2008-2078

Robocode before 1.6.0 allows user-assisted remote attackers to "access the internals of the Robocode game" via unspecified vectors related to the AWT Event Queue...

CVE-2008-2078

Robocode before 1.6.0 allows user-assisted remote attackers to "access the internals of the Robocode game" via unspecified vectors related to the AWT Event Queue...

CVE-2008-2078

CVE-2008-2078 affects Robocode prior to 1.6.0. The vulnerability allows user‑assisted remote attackers to access the internals of the Robocode game via vectors related to the AWT Event Queue. Root cause and affected component: Robocode before 1.6.0, with the issue tied to the AWT Event Queue hand...

CVE-2008-2078

Robocode before 1.6.0 allows user-assisted remote attackers to "access the internals of the Robocode game" via unspecified vectors related to the AWT Event Queue...