3730 matches found
CVE-2006-4635
Unspecified vulnerability in MySource Classic 2.14.6, and possibly earlier, allows remote authenticated users, with superuser privileges, to inject arbitrary PHP code via unspecified vectors related to the Equation attribute in WebExtensions - Notitia I/II. NOTE: due to lack of details, it is not...
CVE-2006-4635: Undefined Security Weakness
Unspecified vulnerability in MySource Classic 2.14.6, and possibly earlier, allows remote authenticated users, with superuser privileges, to inject arbitrary PHP code via unspecified vectors related to the Equation attribute in WebExtensions - Notitia I/II. NOTE: due to lack of details, it is not...
CVE-2006-4619
The CVE-2006-4619 vulnerability affects Avira AntiVir PersonalEdition Classic 7.0 (build 151) in the start update window of update.exe. It allows local privilege escalation via a “Shatter” style attack targeting (1) IParam and the (2) PBM_GETRANGE and (3) PBM_SETRANGE messages in an unspecified p...
CVE-2006-4619: Undefined Security Weakness
The start update window in update.exe in Avira AntiVir PersonalEdition Classic 7.0 build 151 allows local users to gain system privileges via a "Shatter" style attack on the 1 IParam parameter, and the 2 PBMGETRANGE and 3 PBMSETRANGE messages in an unspecified progress bar. NOTE: some details are...
[SA21757] MySource Classic Equation Attribute PHP Code Injection
TITLE: MySource Classic Equation Attribute PHP Code Injection SECUNIA ADVISORY ID: SA21757 VERIFY ADVISORY: http://secunia.com/advisories/21757/ CRITICAL: Moderately critical IMPACT: System access WHERE: From remote SOFTWARE: MySource Classic 2.x http://secunia.com/product/5773/ DESCRIPTION: A...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in F@cile Interactive Web 0.8.5 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 lang parameter in index.php, and the 2 mytheme and 3 myskin parameters in multiple "p-themes" index.inc.php files including c...
CVE-2006-1274
Classic Planer in AntiVir PersonalEdition Classic 7 does not drop privileges before executing external programs, which allows local users to gain privileges via notepad.exe, which is used to display scan reports...
CVE-2006-1274
CVE-2006-1274 affects AntiVir PersonalEdition Classic 7, where Classic Planer does not drop privileges before executing external programs. This allows local users to escalate privileges via notepad.exe, which is used to display scan reports. The description is confirmed by multiple connected sour...
CVE-2006-1274: Undefined Security Weakness
Classic Planer in AntiVir PersonalEdition Classic 7 does not drop privileges before executing external programs, which allows local users to gain privileges via notepad.exe, which is used to display scan reports...
ofsatr 2.6 search for vulnerabilities simple analysis-vulnerability warning-the black bar safety net
Information source: cool-off heaven Article author: lanker See online have a similar tool, but the analysis of the articles but did not find, listen to small black say hackers Handbook, unfortunately even without the magazine, so you capture and then look at the code, generally analysis a bit. Th...
Buffer overflow
Buffer overflow in YGPPicFinder.DLL in AOL You've Got Pictures YGP Picture Finder Tool ActiveX Control, as used in AOL 8.0, 8.0 Plus, and 9.0 Classic, allows remote attackers to execute arbitrary code via unspecified vectors...
CVE-2006-0316
Buffer overflow in YGPPicFinder.DLL in AOL You've Got Pictures YGP Picture Finder Tool ActiveX Control, as used in AOL 8.0, 8.0 Plus, and 9.0 Classic, allows remote attackers to execute arbitrary code via unspecified vectors...
AOL You've Got Pictures ActiveX control buffer overflow
Overview The AOL You've Got Pictures service contains a buffer overflow that may allow a remote attacker to execute arbitrary code or cause a denial-of-service condition. Description AOL You've Got Pictures provides digital photography storage and manipulation services for AOL users. There is a...
CVE-2005-0316
WebWasher Classic 2.2.1 and 3.3 (server mode) are affected by CVE-2005-0316: the product fails to drop CONNECT requests to localhost from external hosts, enabling remote bypass of access restrictions. Affected component is WebWasher Server mode proxy handling CONNECT to 127.0.0.1. Impact is descr...
CVE-2005-0316
WebWasher Classic 2.2.1 and 3.3, when running in server mode, does not properly drop CONNECT requests to the localhost from external systems, which could allow remote attackers to bypass intended access restrictions...
CVE-2005-0316: Undefined Security Weakness
WebWasher Classic 2.2.1 and 3.3, when running in server mode, does not properly drop CONNECT requests to the localhost from external systems, which could allow remote attackers to bypass intended access restrictions...
WebWasher Classic - HTTP CONNECT weakness
WebWasher Classic - HTTP CONNECT weakness ========================================= WebWasher Classic ================= WebWasher Classic is a well known HTTP-URL/Popup/Script filtering proxy which is free for non commercial use. WebWasher Classic supports two modes, a client mode, where it only...
WebWasherCONNECT.txt
WebWasher Classic - HTTP CONNECT weakness ========================================= WebWasher Classic ================= WebWasher Classic is a well known HTTP-URL/Popup/Script filtering proxy which is free for non commercial use. WebWasher Classic supports two modes, a client mode, where it only...
CVE-2005-0316
WebWasher Classic 2.2.1 and 3.3, when running in server mode, does not properly drop CONNECT requests to the localhost from external systems, which could allow remote attackers to bypass intended access restrictions...
WebWasher Classic 2.22.3 - HTTP CONNECT Unauthorized Access
WebWasher Classic 2.22.3 - HTTP CONNECT Unauthorized Access source: https://www.securityfocus.com/bid/12394/info It is reported that WebWasher Classic is prone to a weakness that may allow remote attackers to connect to arbitrary ports on a vulnerable computer. This weakness may be combined with...