8678 matches found
CVE-2001-0568
Digital Creations Zope 2.3.1 b1 and earlier allows a local attacker Zope user with through-the-web scripting capabilities to alter ZClasses class attributes...
NT drivers are potentially vulnerable to format string bug
Many NT drivers are potentially vulnerable to "format string bug". The problem is concerned with DbgPrint function that is used for debug messages. Some drivers instead of directly call of this function use additional intermediate functions. Those functions add a prefix to an outputted string,...
CVE-2000-1099
Java Runtime Environment in Java Development Kit JDK 1.2.205 and earlier can allow an untrusted Java class to call into a disallowed class, which could allow an attacker to escape the Java sandbox and conduct unauthorized activities...
CVE-2000-0530
The CVE-2000-0530 entry describes a vulnerability in KDE 1.1.2 where the KApplication-class creates configuration files without proper ownership checks or existence verification. The result is a local privilege-attack risk: a local user can exploit a symlink/ownership flaw to overwrite arbitrary ...
CVE-2000-0530
The KApplication class in the KDE 1.1.2 configuration file management capability allows local users to overwrite arbitrary files...
Sun JDK 1.1.x Sun JRE 1.1.x - Listening Socket
Sun JDK 1.1.x Sun JRE 1.1.x - Listening Socket source: https://www.securityfocus.com/bid/1545/info A set of flaws in multiple vendors' Java implementation allows a malicious applet to open a listening socket to accept network connections against the security policy. Java applications use the...
Очередная дырка в KDE
Класс KApplication некорректно работает с конфиуграционными файлами не проверяются символьные линки, что позволяет атаковать любое приложение, использующее данный класс например ktvision и ktuner...
Security bug in Apache project: Jakarta Tomcat
The Apache project: Jakarta Tomcat contains a serius security bug. Tomcat is used together with the Apache web server to serve Java Server Pages and Java servlets. Summary from the Tomcat development team advisory is posted below: Advisory: Delivered with Tomcat is an example jsp/source.jsp that...
TYPSoft FTP Server 0.7.x - FTP Server Remote Denial of Service
TYPSoft FTP Server 0.7.x - FTP Server Remote Denial of Service source: https://www.securityfocus.com/bid/1690/info Long commands ie., over 2048 bytes sent to TYPSoft FTP Server cab cause the server to hang, requiring a manual restart to restore the process. After the release of this advisory Noam...
CVE-1999-0952
Buffer overflow in Solaris lpstat via class argument allows local users to gain root access...
Driver Flighting Check for Graphics Partner Test
Evaluates to true if client machine is targeting to "Partner" Ring of Graphics device class...
Driver Flighting Check for System Ring1
Evaluates to true if client machine is targeting to Ring1 of System Generic device class...
CVE-2024-51736: Command execution hijack on Windows with Process class
More info at https://symfony.com/cve-2024-51736...
Class-Name Injection
Tested on 1.8.0-beta-5 In safe mode with html markup disabled, it is possible to insert any classname into a code block like this: \js any-class-name with spaces code \ renders as: code infostring needs some cleanup here:...
CVE-2024-51736: Command execution hijack on Windows with Process class
More info at https://symfony.com/cve-2024-51736...
Driver Flighting Check for System Ring2
Evaluates to true if client machine is targeting to Ring2 of System Generic device class...
