300 matches found
libgadu certificate check bypass
Server certificate is not checked...
Microsoft Windows win32k!xxxRealDrawMenuItem() Missing HBITMAP Bounds Checks
No description provided by source. Microsoft Windows win32k!xxxRealDrawMenuItem missing HBITMAP bounds checks ---------------------------------------------------------------------------- Microsoft produce two builds of each of thier supported operating system, a checked build and a free build. Th...
UBUNTU-CVE-2013-6825
1 movescu.cc and 2 storescp.cc in dcmnet/apps/, 3 dcmnet/libsrc/scp.cc, 4 dcmwlm/libsrc/wlmactmg.cc, 5 dcmprscp.cc and 6 dcmpsrcv.cc in dcmpstat/apps/, 7 dcmpstat/tests/msgserv.cc, and 8 dcmqrdb/apps/dcmqrscp.cc in DCMTK 3.6.1 and earlier does not check the return value of the setuid system call,...
Security: Ability to determine if username is valid via DaoAuthenticationProvider
DaoAuthenticationProvider in VMware SpringSource Spring Security before 2.0.8, 3.0.x before 3.0.8, and 3.1.x before 3.1.3 does not check the password if the user is not found, which makes the response delay shorter and might allow remote attackers to enumerate valid usernames via a series of logi...
CVE-2012-2122
sql/password.c in Oracle MySQL 5.1.x before 5.1.63, 5.5.x before 5.5.24, and 5.6.x before 5.6.6, and MariaDB 5.1.x before 5.1.62, 5.2.x before 5.2.12, 5.3.x before 5.3.6, and 5.5.x before 5.5.23, when running in certain environments with certain implementations of the memcmp function, allows remo...
Quake 3 / ioquake3 traffic amplification vulnerability
Source of getstatus UDP message is not checked...
Snail mail the drive
Not comfortable sticking your precious mobile device in the mail? Remove the hard drive from the device and snail mail that to your destination. If you’re flying, pack it in your checked bag. If necessary, you can travel with a second, blank hard drive in case you need access to the computer whil...
Apache Tomcat information leakage
Some security limitations are not checked for sendfile...
FreeBSD -- Integer overflow in bzip2 decompression
Problem Description: When decompressing data, the run-length encoded values are not adequately sanity-checked, allowing for an integer overflow...
Microsoft Windows win32k!xxxRealDrawMenuItem() Missing HBITMAP Bounds Checks
Microsoft Windows win32k!xxxRealDrawMenuItem missing HBITMAP bounds checks ---------------------------------------------------------------------------- Microsoft produce two builds of each of thier supported operating system, a checked build and a free build. The free build is intended for end...
Harris Stratex StarMAX crossite request forgery
Referer for GET request is not checked...
USN-693-1: LittleCMS vulnerability
It was discovered that certain gamma operations in lcms were not correctly bounds-checked. If a user or automated system were tricked into processing a malicious image, a remote attacker could crash applications linked against liblcms1, leading to a denial of service, or possibly execute arbitrar...
Absolute Form Processor 4.0 - Insecure Cookie Handling
| | / | \ \ / / / | / | | | | \ | | | | \ V / | | | | | | | | | | | | | || | | | | | | | | | | | | | | || | / || | || \ | Author : Hakxer Home : Www.educ-up.com Type Gap : Insecure Cookie Handling script : Absolute Form Processor see script http://www.xigla.com/absolutefpnet/demo.htm Team : EgY...
USN-652-1: LittleCMS vulnerability
Chris Evans discovered that certain ICC operations in lcms were not correctly bounds-checked. If a user or automated system were tricked into processing an image with malicious ICC tags, a remote attacker could crash applications linked against liblcms1, leading to a denial of service, or possibl...
Jscape Secure FTP Applet sessions spoofing
SSH key is not checked...
Ubuntu 5.04 / 5.10 / 6.06 LTS : mailman vulnerabilities (USN-345-1)
Steve Alexander discovered that mailman did not properly handle attachments with special filenames. A remote user could exploit that to stop mail delivery until the server administrator manually cleaned these posts. CVE-2006-2941 Various cross-site scripting vulnerabilities have been reported by...
Zyxel Zywall crossite request forgery
Referer is not chacked on data submission...
JavaMail directory traversal
Content-Disposition header filename is not checked...
