4096 matches found
CVE-2007-3527
CVE-2007-3527 : Firebird 2.0.0 contains an integer overflow that can be triggered by certain multi-byte character set operations, allowing remote authenticated users to cause a denial of service via CPU consumption due to an infinite loop when a 16-bit integer is set to 65536. The vulnerability a...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in Movable Type MT before 3.34 allow remote attackers to inject arbitrary web script or HTML via comments that have 1 a malformed SGML numeric character reference with a '\0' 0x00 character in a javascript: URI or 2 an attribute in an element that...
CVE-2007-3342
Multiple cross-site scripting XSS vulnerabilities in Movable Type MT before 3.34 allow remote attackers to inject arbitrary web script or HTML via comments that have 1 a malformed SGML numeric character reference with a '\0' 0x00 character in a javascript: URI or 2 an attribute in an element that...
Cross site scripting
Centrinity FirstClass 8.3 and earlier, and Server and Internet Services 8.0 and earlier, do not properly handle a URL with a null "%00" character, which allows remote attackers to conduct cross-site scripting XSS attacks. NOTE: the provenance of this information is unknown; the details are obtain...
CVE-2007-2976
Centrinity FirstClass 8.3 and earlier, and Server and Internet Services 8.0 and earlier, do not properly handle a URL with a null "%00" character, which allows remote attackers to conduct cross-site scripting XSS attacks. NOTE: the provenance of this information is unknown; the details are obtain...
Breakthrough space limitations-vulnerability warning-the black bar safety net
About spaces, there are many alternatives, such as TAB spaces, SQL database//, but I found another alternative, has been published in the hacker manual 2006.7 period, here pick its essence, now! For the SQL statement, we also are accustomed to its spaces, such as select id from name, if no...
jsp vulnerabilities and solutions-vulnerability warning-the black bar safety net
Overview: The server vulnerability is a security Origin, a hacker on the site of the attack is also mostly from the Find each other's vulnerabilities. So only understand its own vulnerability, the site managers to take appropriate measures to prevent foreign attacks. The following describes some ...
Cross site request forgery (csrf)
The 3Com TippingPoint IPS do not properly handle certain full-width and half-width Unicode character encodings in an HTTP POST request, which might allow remote attackers to evade detection of HTTP traffic...
CVE-2007-2734
The CVE-2007-2734 entry concerns the 3Com TippingPoint IPS failing to properly handle certain full-width/half-width Unicode encodings in HTTP POST requests, which could allow remote attackers to evade detection of HTTP traffic. Affected product: 3Com TippingPoint IPS. Root cause: improper encodin...
CVE-2007-2688
The Cisco Intrusion Prevention System IPS and IOS with Firewall/IPS Feature Set do not properly handle certain full-width and half-width Unicode character encodings, which might allow remote attackers to evade detection of HTTP traffic...
CVE-2007-2690
Technical details (affected products, root cause, impacts, fixes) for CVE-2007-2690 are not provided in the connected documents. The initial description only notes Unicode handling issues in IBM ISS Proventia products. Monitor for official updates.
CVE-2007-1262
Multiple cross-site scripting XSS vulnerabilities in the HTML filter in SquirrelMail 1.4.0 through 1.4.9a allow remote attackers to inject arbitrary web script or HTML via the 1 data: URI in an HTML e-mail attachment or 2 various non-ASCII character sets that are not properly filtered when viewed...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in the HTML filter in SquirrelMail 1.4.0 through 1.4.9a allow remote attackers to inject arbitrary web script or HTML via the 1 data: URI in an HTML e-mail attachment or 2 various non-ASCII character sets that are not properly filtered when viewed...
CVE-2007-1262
Multiple cross-site scripting XSS vulnerabilities in the HTML filter in SquirrelMail 1.4.0 through 1.4.9a allow remote attackers to inject arbitrary web script or HTML via the 1 data: URI in an HTML e-mail attachment or 2 various non-ASCII character sets that are not properly filtered when viewed...
Microsoft Outlook Web Access远程脚本注入漏洞（MS07-026）
Outlook Web Access是Microsoft Exchange中用于通过Web浏览器读取和发送邮件的工具。 Outlook Web Access在处理特定的数据编码时存在漏洞，远程攻击者可能利用此漏洞控制用户机器。 Outlook Web Access没有正确地处理某些UTF字符集标签，因此可能未经正确地过滤便显示了基于脚本的附件。如果攻击者发送了带有特制UTF编码邮件附件的话，就可能导致在用户浏览器环境中执行任意代码或读取敏感信息。 Microsoft Exchange Server 2003 SP2 Microsoft Exchange Server 2003 SP1...
squirrelmail -- Cross site scripting in HTML filter
The SquirrelMail developers report: Multiple cross-site scripting XSS vulnerabilities in the HTML filter in SquirrelMail 1.4.0 through 1.4.9a allow remote attackers to inject arbitrary web script or HTML via the 1 data: URI in an HTML e-mail attachment or 2 various non-ASCII character sets that a...
Cross site scripting
Cross-site scripting XSS vulnerability in Outlook Web Access OWA in Microsoft Exchange Server 2000 SP3, and 2003 SP1 and SP2 allows remote attackers to execute arbitrary scripts, spoof content, or obtain sensitive information via certain UTF-encoded, script-based e-mail attachments, involving an...
Microsoft Exchange Outlook Web Access UTF character set label script injection vulnerability
Overview Microsoft Exchange Outlook Web Access OWA fails to properly handle the UTF character set label, which can allow a remote, unauthenticated attacker to execute script within the security context of the OWA user. Description OWA allows users to access their email accounts on a Microsoft...
GLSA-200705-03 : Tomcat: Information disclosure
The remote host is affected by the vulnerability described in GLSA-200705-03 Tomcat: Information disclosure Tomcat allows special characters like slash, backslash or URL-encoded backslash as a separator, while Apache does not. Impact : A remote attacker could send a specially crafted URL to the...
