Multipl NCP Secure Communications VPN / PKI client security vulnerabilities

Local buffer overflows and privilege escalations, remote DoS...

SSH.COM SFTP server -- format string vulnerability

SSH Communications Security Corp reports a format string vulnerability in their SFTP server. This vulnerability could cause a user with SCP/SFTP access only to get permission to execute also other commands. It could also allow user A to create a special file that when accessed by user B allows us...

Design/Logic Flaw

Multiple unspecified vulnerabilities in Oracle Database server 8.1.7.4, 9.0.1.5, 9.0.1.5 FIPS, 9.2.0.7, 10.1.0.5, and 10.2.0.1 have unspecified impact and attack vectors, as identified by Oracle Vuln 1 DB09 in the a Net Listener component; and 2 DB12 and 3 DB13 in the Network Communications RPC...

CVE-2006-0263

Multiple unspecified vulnerabilities in Oracle Database server 8.1.7.4, 9.0.1.5, 9.0.1.5 FIPS, 9.2.0.7, 10.1.0.5, and 10.2.0.1 have unspecified impact and attack vectors, as identified by Oracle Vuln 1 DB09 in the a Net Listener component; and 2 DB12 and 3 DB13 in the Network Communications RPC...

CVE-2006-0263

CVE-2006-0263 affects Oracle Database Server versions 8.1.7.4, 9.0.1.5, 9.0.1.5 FIPS, 9.2.0.7, 10.1.0.5, and 10.2.0.1. The Oracle CPU-Jan-2006 vulnerabilities DB09 (Net Listener) and DB12/DB13 (Network Communications RPC) are cited as the root issues. The described flaws are “unspecified” in impa...

CVE-2006-0263

Multiple unspecified vulnerabilities in Oracle Database server 8.1.7.4, 9.0.1.5, 9.0.1.5 FIPS, 9.2.0.7, 10.1.0.5, and 10.2.0.1 have unspecified impact and attack vectors, as identified by Oracle Vuln 1 DB09 in the a Net Listener component; and 2 DB12 and 3 DB13 in the Network Communications RPC...

CVE-2006-0263: Undefined Security Weakness

Multiple unspecified vulnerabilities in Oracle Database server 8.1.7.4, 9.0.1.5, 9.0.1.5 FIPS, 9.2.0.7, 10.1.0.5, and 10.2.0.1 have unspecified impact and attack vectors, as identified by Oracle Vuln 1 DB09 in the a Net Listener component; and 2 DB12 and 3 DB13 in the Network Communications RPC...

Plexcor's(r) CMS XSS vuln.

Plexcor's® CMS XSS vuln. Vuln. discovered by : r0t Date: 21 dec. 2005 orginal advisory:http://pridels.blogspot.com/2005/12/plexcors-cms-xss-vuln.html vendor:http://www.plexcor.com/ affected version: 4.0 and prior Product Description: Integrated modular content, communications, calendar, commerce,...

Microsoft Internet Explorer COM Object Instantiation Memory Corruption Vulnerability

Description Microsoft Internet Explorer is prone to a memory corruption vulnerability that is related to the instantiation of COM objects. COM objects may corrupt system memory and facilitate arbitrary code execution in the context of the currently logged in user on the affected computer...

Microsoft Internet Explorer HTTPS Proxy Information Disclosure Vulnerability

Description Microsoft Internet Explorer is prone to an information disclosure vulnerability when using an authenticating proxy server for HTTPS communications. Exploitation of this issue could result in an attacker gaining a user's authentication credentials. This issue only exists when the...

CVE-2005-4045

Technical details about CVE-2005-4045 are not provided in the supplied documents. The NVD entry mentions an unspecified vulnerability in Sun Java System Messaging Server 2005Q1 enabling TLA password exposure, but vectors, affected versions, and fixes are not disclosed here.

CVE-2005-4045

Unspecified vulnerability in System Communications Services 6 Delegated Administrator 2005Q1 in Sun Java System Messaging Server 2005Q1 allows remote attackers to obtain the Top-Level Administrator TLA default password via unknown vectors, possibly involving configuretopleveladmin.ldif...

CVE-2005-4045: Undefined Security Weakness

Unspecified vulnerability in System Communications Services 6 Delegated Administrator 2005Q1 in Sun Java System Messaging Server 2005Q1 allows remote attackers to obtain the Top-Level Administrator TLA default password via unknown vectors, possibly involving configuretopleveladmin.ldif...

CVE-2004-2629: Undefined Security Weakness

Multiple vulnerabilities in the H.323 protocol implementation for First Virtual Communications Click to Meet Express when used with H.323 conferencing endpoints, Click to Meet Premier, Conference Server, and V-Gate allow remote attackers to cause a denial of service, as demonstrated by the...

Microsoft Windows Graphics Rendering Engine WMF Format Code Execution Vulnerability

Description Microsoft Windows WMF graphics rendering engine is affected by a remote code execution vulnerability. The problem presents itself when a user views a malicious WMF formatted file, triggering the vulnerability when the engine attempts to parse the file. A malicious file can cause an...

Sun Java System Communications Express information leak

It's possible to access configuration file which contains sensitive information...

[SA17395] Sun Java System Communications Express Configuration File Disclosure

TITLE: Sun Java System Communications Express Configuration File Disclosure SECUNIA ADVISORY ID: SA17395 VERIFY ADVISORY: http://secunia.com/advisories/17395/ CRITICAL: Less critical IMPACT: Exposure of sensitive information WHERE: From remote SOFTWARE: Sun Java System Communications Express...

CVE-2005-3472

Unspecified vulnerability in Sun Java System Communications Express 2005Q1 and 2004Q2 allows local and remote attackers to read sensitive information from configuration files...

CVE-2005-3472

Unspecified vulnerability in Sun Java System Communications Express 2005Q1 and 2004Q2 allows local and remote attackers to read sensitive information from configuration files...

CVE-2005-3472

CVE-2005-3472 concerns Sun Java System Communications Express (2005Q1 and 2004Q2). The connected materials confirm the vulnerability allows local and remote attackers to read sensitive information from configuration files (impact: partial confidentiality). The documents do not provide specific ro...