692 matches found
CVE-2007-0584
CVE-2007-0584 affects the PhP Generic Library & Framework for comm (G-neric) via the file membres/membreManager.php. The vulnerability is a remote file inclusion that allows an attacker to place a URL in the include_path parameter, leading to remote code execution on the affected system. Document...
CVE-2006-6114
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2006-5854. Reason: This candidate is a duplicate of CVE-2006-5854. Notes: All CVE users should reference CVE-2006-5854 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...
SoX Local Buffer Overflow Exploiter (Via Crafted WAV File)
No description provided by source. --------------------------------- Begin Code: sox-exploiter.c --------------------------------- / Copyright Rosiello Security 2004 http://www.rosiello.org CVE Reference: CAN-2004-0557 Bug Type: Stack Overflow Date: 01/08/2004 Ulf Harnhammar reported that there a...
[SA19697] warforge.NEWS Multiple Vulnerabilities
TITLE: warforge.NEWS Multiple Vulnerabilities SECUNIA ADVISORY ID: SA19697 VERIFY ADVISORY: http://secunia.com/advisories/19697/ CRITICAL: Moderately critical IMPACT: Cross Site Scripting, Manipulation of data WHERE: From remote REVISION: 1.1 originally posted 2006-04-19 SOFTWARE: warforge.NEWS 1...
[Full-disclosure] URL filter bypass in Fortinet
URL filter bypass in Fortinet Severity: Low Impact: Bypass Fortinet web filter Vulnerabilty type: Design error Affected products: FortiGate v2.8 CVE reference: CAN-2005-3058 Vulnerability Description: ------------------------- It is possible to bypass Fortinet URL blocker by making special HTTP...
CVE-2005-3011
The sortoffline function for texindex in texinfo 4.8 and earlier allows local users to overwrite arbitrary files via a symlink attack on temporary files...
CVE-2005-2069
pamldap and nssldap, when used with OpenLDAP and connecting to a slave using TLS, does not use TLS for the subsequent connection if the client is referred to a master, which may cause a password to be sent in cleartext and allows remote attackers to sniff the password...
security flaw
The patch for integer overflow vulnerabilities in Xpdf 2.0 and 3.0 CVE-2004-0888 is incomplete for 64-bit architectures on certain Linux distributions such as Red Hat, which could leave Xpdf users exposed to the original vulnerabilities...
CVE-2005-0249
Heap-based buffer overflow in the DEC2EXE module for Symantec AntiVirus Library allows remote attackers to execute arbitrary code via a UPX compressed file containing a negative virtual offset to a crafted PE header...
CVE-2004-1193
Prevx Home 1.0 allows local users with administrator privileges to bypass the intrusion prevention features by directly writing to \device\physicalmemory, which restores the running kernel's original SDT ServiceTable...
CVE-2002-1284
The wizard in KGPG 0.6 through 0.8.2 does not properly provide the passphrase to gpg when creating new keys, which causes secret keys to be created with an empty passphrase and allows local attackers to steal the keys if they can be read...
SoX Local Buffer Overflow Exploiter (Via Crafted WAV File)
Exploit for linux platform in category local exploits ========================================================== SoX Local Buffer Overflow Exploiter Via Crafted WAV File ========================================================== --------------------------------- Begin Code: sox-exploiter.c...
SoX - .wav Local Buffer Overflow
SoX - .wav Local Buffer Overflow //--------------------------------- Begin Code: sox-exploiter.c --------------------------------- / Copyright Rosiello Security 2004 http://www.rosiello.org CVE Reference: CAN-2004-0557 Bug Type: Stack Overflow Date: 01/08/2004 Ulf Harnhammar reported that there a...
SoX - '.wav' Local Buffer Overflow
//--------------------------------- Begin Code: sox-exploiter.c --------------------------------- / Copyright Rosiello Security 2004 http://www.rosiello.org CVE Reference: CAN-2004-0557 Bug Type: Stack Overflow Date: 01/08/2004 Ulf Harnhammar reported that there are two buffer overflows in the...
CVE-2003-0924
netpbm 9.25 and earlier does not properly create temporary files, which allows local users to overwrite arbitrary files...
CVE-2003-0925
Buffer overflow in Ethereal 0.9.15 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code via a malformed GTP MSISDN string...
CVE-2003-0788
Unknown vulnerability in the Internet Printing Protocol IPP implementation in CUPS before 1.1.19 allows remote attackers to cause a denial of service CPU consumption from a "busy loop" via certain inputs to the IPP port TCP 631...
CVE-2002-1381
Format string vulnerability in daemon.c for Exim 4.x through 4.10, and 3.x through 3.36, allows exim administrative users to execute arbitrary code by modifying the pidfilepath value...
CVE-2001-1387
iptables-save in iptables before 1.2.4 records the "--reject-with icmp-host-prohibited" rule as "--reject-with tcp-reset," which causes iptables to generate different responses than specified by the administrator, possibly leading to an information leak...