2881 matches found
CVE-2006-2462
BEA WebLogic Server 8.1 before Service Pack 4 and 7.0 before Service Pack 6, may send sensitive data over non-secure channels when using JTA transactions, which allows remote attackers to read potentially sensitive network traffic...
Code injection
BEA WebLogic Server 8.1 before Service Pack 4 and 7.0 before Service Pack 6, may send sensitive data over non-secure channels when using JTA transactions, which allows remote attackers to read potentially sensitive network traffic...
CVE-2006-2462
BEA WebLogic Server 8.1 before Service Pack 4 and 7.0 before Service Pack 6, may send sensitive data over non-secure channels when using JTA transactions, which allows remote attackers to read potentially sensitive network traffic...
RealVNC Remote Authentication Bypass Vulnerability
Description RealVNC is susceptible to an authentication-bypass vulnerability. This issue is due to a flaw in the authentication process of the affected package. Exploiting this issue allows attackers to gain unauthenticated, remote access to the VNC servers. RealVNC 4.1.1 is vulnerable to this...
With a TV card encryption on the TV can also want to see-a vulnerability warning-the black bar safety net
Now in many areas opened a surcharge of encrypted television program, to watch these encrypted program, the need for additional purchase of a decoder and pay the appropriate fee to the opening, but for most PC users, really a bit uneconomical, now you just prepare a piece of TV card, can watch th...
libpng PNG processing library buffer overflow
Alpha-channels processing buffer overflow in pngsetstripalpha...
CVE-2006-0481
Heap-based buffer overflow in the alpha strip capability in libpng 1.2.7 allows context-dependent attackers to cause a denial of service crash when the pngdostripfiller function is used to strip alpha channels out of the image...
security flaw
Hyper-Threading technology, as used in FreeBSD and other operating systems that are run on Intel Pentium and other processors, allows local users to use a malicious thread to create covert channels, monitor the execution of other threads, and obtain sensitive information such as cryptographic key...
security flaw
Hyper-Threading technology, as used in FreeBSD and other operating systems that are run on Intel Pentium and other processors, allows local users to use a malicious thread to create covert channels, monitor the execution of other threads, and obtain sensitive information such as cryptographic key...
CVE-2004-2451
Roger Wilco 1.4.1.6 and earlier, or Roger Wilco Base Station 0.30a or earlier, allows remote attackers to send audio to arbitrary channels, aka the "Voices from the deep" bug...
ignitionServer < 0.3.6-P1 Multiple Vulnerabilities
The remote host is running a version of the IgnitionServer IRC service which contains a bug in the way it handles locked channels, as well as a design error regarding the access validation checks. An attacker may use this flaw to block an IRC operator out of a protected channel. A host may use th...
CVE-2005-0109
Hyper-Threading technology, as used in FreeBSD and other operating systems that are run on Intel Pentium and other processors, allows local users to use a malicious thread to create covert channels, monitor the execution of other threads, and obtain sensitive information such as cryptographic key...
CVE-2005-0109
Technical details for CVE-2005-0109 are not provided in the supplied documents. The set includes historical references and later OpenSSL advisories, but no specific product, root cause, impact, or fix details here. Monitor for updates.
CVE-2005-0109: Undefined Security Weakness
Hyper-Threading technology, as used in FreeBSD and other operating systems that are run on Intel Pentium and other processors, allows local users to use a malicious thread to create covert channels, monitor the execution of other threads, and obtain sensitive information such as cryptographic key...
CVE-2004-0869
Internet Explorer does not prevent cookies that are sent over an insecure channel HTTP from also being sent over a secure channel HTTPS/SSL in the same domain, which could allow remote attackers to steal cookies and conduct unauthorized activities, aka "Cross Security Boundary Cookie Injection."...
CVE-2005-0130
Certain Perl scripts in Konversation 0.15 allow remote attackers to execute arbitrary commands via shell metacharacters in 1 channel names or 2 song names that are not properly quoted when the user runs IRC scripts...
Mandrake Linux Security Advisory : squid (MDKSA-2002:044)
Numerous security problems were fixed in squid-2.4.STABLE7. This releases has several bugfixes to the Gopher client to correct some security issues. Security fixes to how squid parses FTP directory listings into HTML have been implemented. A security fix to how squid forwards proxy authentication...
SIRCD Server 0.5.20.5.3 - Operator Privilege Escalation
SIRCD Server 0.5.20.5.3 - Operator Privilege Escalation source: https://www.securityfocus.com/bid/9097/info sircd has been reported prone to a privilege escalation vulnerability. It has been reported that any user logged on to the sircd server, may set their usermode to +o, or operator mode. An...
Вставка символов в шифрованные каналы psyBNC (protection bypass)
Зашифрованными считаются все строки начинающиеся с B...
Visual Studio 2022 version 17.12.4 update
This security update applies to all editions of Visual Studio 2022, and will update client machines on either the Current or LTSC channels to version 17.12.4. The client machines must be enabled to receive this administrator update, and by default Visual Studio must be closed on the client in ord...