PT-2020-2609 · Mysql Server +9 · Mysql Client +9

Name of the Vulnerable Software and Affected Versions: MySQL Client versions 5.6.47 and prior MySQL Client versions 5.7.27 and prior MySQL Client versions 8.0.17 and prior Description: The issue is related to the C API component of the MySQL Client product, which has inadequate access control. Th...

Amazon Linux AMI : java-1.6.0-openjdk (ALAS-2014-326)

An input validation flaw was discovered in the medialib library in the 2D component. A specially crafted image could trigger Java Virtual Machine memory corruption when processed. A remote attacker, or an untrusted Java application or applet, could possibly use this flaw to execute arbitrary code...

Important: Red Hat Security Advisory: Red Hat Enterprise MRG Messaging and Grid security update

Updated Red Hat Enterprise MRG Messaging and Grid packages that fix one security issue and several bugs are now available for Red Hat Enterprise Linux 4. The Red Hat Security Response Team has rated this update as having important security impact. A Common Vulnerability Scoring System CVSS base...

Improper access control

ZeusCMS 0.2 stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain sensitive information via a direct request for admin/backup.sql...

CVE-2010-0681

ZeusCMS 0.2 stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain sensitive information via a direct request for admin/backup.sql...

CVE-2010-0298

The x86 emulator in KVM 83 does not use the Current Privilege Level CPL and I/O Privilege Level IOPL in determining the memory access available to CPL3 code, which allows guest OS users to cause a denial of service guest OS crash or gain privileges on the guest OS by leveraging access to a 1 IO...

CVE-2008-5002

CVE-2008-5002 affects Chilkat Crypt ActiveX Control (ChilkatCrypt2.dll 4.3.2.1). The Insecure method vulnerability allows remote creation/overwrite of arbitrary files via the WriteFile method, with potential code execution through startup-folder DLLs or hcp:// URLs. Public PoCs/exploits exist (e....

Debian DSA-042-1 : gnuserv

Klaus Frank has found a vulnerability in the way gnuserv handled remote connections. Gnuserv is a remote control facility for Emacsen which is available as standalone program as well as included in XEmacs21. Gnuserv has a buffer for which insufficient boundary checks were made. Unfortunately this...

[Squid 2004-Nuke-001] Inadequate Security Checking in PHPNuke v7.3 and earlier

=========================================================================== =========================================================================== Advisory: 2004-Nuke-001 Affected Software: PHPNuke Affected Versions: Version 7.3 and earlier Main Developer: Francisco Burzi...

[Squid 2004-betaNC-001] Inadequate Security Checking in NukeCops betaNC Bundle

=========================================================================== =========================================================================== Advisory: 2004-betaNC-001 Affected Software: Nuke Cops betaNC PHP-Nuke Bundle w/ PHPNuke 6.5 and later Affected Versions: all cvs versions Main...

BNCweb File Disclosure Vulnerability

BNCweb is a set of CGI scripts developed at the University of Zьrich as a user-friendly query interface to the British National Corpus. It allows linguists to retrieve lexical, grammatical and textual data from this 100 million word collection of english texts using a web browser. For more...

PHPPass 2 - 'AccessControl.php' SQL Injection

source: https://www.securityfocus.com/bid/6594/info A problem with phpPass may allow an attacker to launch a SQL injection attack. The vulnerability exists in the accesscontrol.php script included with phpPass. Due to insufficient sanitization of user-supplied input, it is possible for a remote...

Taskpads ActiveX Control incorrectly marked safe-for-scripting

Overview The taskpads ActiveX control included with some resource kit products circa February 1999 was incorrectly marked safe-for-scripting. Description The taskpads ActiveX control included with the Microsoft Windows 98 resource kit, the Microsoft Windows 98 resource kit sampler, and the Back...

CVE-2002-0045

slapd in OpenLDAP 2.0 through 2.0.19 allows local users, and anonymous users before 2.0.8, to conduct a "replace" action on access controls without any values, which causes OpenLDAP to delete non-mandatory attributes that would otherwise be protected by ACLs...

PhpMyExplorer index.php chemin Parameter Encoded Traversal Arbitrary File Access

phpMyExplorer is vulnerable to a directory traversal attack that allows anyone to make the remote web server read and display arbitrary directories. For example: GET /index.php?chemin=..%2F..%2F..%2F..%2F%2Fetc will return the contents of the remote /etc directory. %NASLMINLEVEL 70300 C Tenable...

Microsoft MSN Messenger Service 1.0 Setup BBS - ActiveX Control Buffer Overflow

source: https://www.securityfocus.com/bid/668/info There is a buffer overflow in the 4.71.0.10 version of the MSN Setup BBS ActiveX control setupbbs.ocx.. This ActiveX control is marked 'Safe for Scripting' . Arbitrary commands may be executed if the ActiveX control is run in a malicious manner...

yahoo-pager-chat-control.txt

Date: Mon, 4 Jan 1999 01:50:53 GMT From: anonymous To: [email protected] Subject: Yahoo Pager Flaw In Chat Control = Yahoo Pager Chat Flaw In Chat Control Yahoo's Pager is very sloppy.. Yahoo's Pager doesn't have message control.. therefore it does not have chat request control.. so this...