Design/Logic Flaw

Unspecified vulnerability in certain demonstration scripts in getID3 1.7.1, as used in the Mediafield and Audio modules for Drupal, allows remote attackers to read and delete arbitrary files, list arbitrary directories, and write to empty files or .mp3 files via unknown vectors...

PT-2007-2255 · Microsoft · Windows 2000 +2

Name of the Vulnerable Software and Affected Versions: Microsoft Internet Explorer version 6.0 SP1 on Windows 2000 Microsoft Internet Explorer version 6.0 SP2 on Windows XP Description: The issue allows remote attackers to cause a denial of service, resulting in a NULL pointer dereference and...

The system security of the empty password to enter the WINDOWS2000-vulnerability warning-the black bar safety net

WINDOWS200 where winnt\System32\Config under the SAM file that account password database file, it save the WINDOWS2000 of all the username and password when you log in, the system will put the username and password you enter with the SAM file in the encrypted data proofreading, and if they...

CVE-2006-6262

Directory traversal vulnerability in mboard.php in PHPJunkYard aka Klemen Stirn MBoard 1.22 and earlier allows remote attackers to create arbitrary empty files via a .. dot dot in the origid parameter...

CVE-2006-6239

webadmin in MailEnable NetWebAdmin Professional 2.32 and Enterprise 2.32 allows remote attackers to authenticate using an empty password...

CVE-2006-6239: Undefined Security Weakness

webadmin in MailEnable NetWebAdmin Professional 2.32 and Enterprise 2.32 allows remote attackers to authenticate using an empty password...

PT-2006-6440 · Rhadrix · Rhadrix If-Cms

Name of the Vulnerable Software and Affected Versions: Rhadrix If-CMS versions 1.01 through 2.07 Description: The issue allows remote attackers to obtain the full path of the web server. This is achieved by providing empty arguments, specifically rns or pag, which results in an error message that...

CVE-2006-5660: Undefined Security Weakness

Cisco Security Agent Management Center CSAMC 5.1 before 5.1.0.79 does not properly handle certain LDAP error messages, which allows remote attackers to bypass authentication requirements via an empty password when using an external LDAP server...

Heart empty Forum(CKong) v2. 5 SQL injection vulnerability-vulnerability warning-the black bar safety net

Program: heart empty ForumCKong Version:=2.5 Type: sql injection Vulnerability analysis 1, The post.php | ? requireonce"include/config.inc.php"; requireonce'include/functions.inc.php'; $fid=intval$fid; $tid=intval$tid; $pid=intval$pid; ......... if!$ Cerrormsg if$postid $sql='select...

Low: Red Hat Bug Fix Advisory: conga bug fix update

Updated conga packages that provide critical bug fixes are now available. The Conga package is a web-based administration tool for remote cluster and storage management. This erratum applies the following bug fixes: - The borrowed Zope packages used by Conga have been patched to eliminate a...

PT-2006-4420 · Microsoft · Internet Explorer

Name of the Vulnerable Software and Affected Versions: Microsoft Internet Explorer version 7.0 Beta Description: The issue allows remote attackers to cause a denial of service, resulting in an application crash, via a web page containing multiple empty APPLET start tags. A third party has dispute...

CVE-2006-3477: Undefined Security Weakness

Unspecified vulnerability in the POP service in Stalker CommuniGate Pro 5.1c1 and earlier allows remote attackers to cause a denial of service server crash via unspecified vectors involving opening an empty inbox...

Communigate Pro mail server DoS

Server crash on empty mailbox access with malformed client...

CVE-2006-2413

GNUnet before SVN revision 2781 allows remote attackers to cause a denial of service infinite loop and CPU consumption via an empty UDP datagram, possibly involving FIONREAD errors...

DEBIAN-CVE-2006-2413

GNUnet before SVN revision 2781 allows remote attackers to cause a denial of service infinite loop and CPU consumption via an empty UDP datagram, possibly involving FIONREAD errors...

GNUnet <= 0.7.0d (Empty UDP Packet) Remote Denial of Service Exploit

No description provided by source. GNUnet = 0.7.0d Empty UDP Packet Remote Denial of Service Exploit http://www.milw0rm.com/sploits/05152006-udpsz.zip milw0rm.com 2006-05-15...

GNUnet 0.7.0d - Empty UDP Packet Remote Denial of Service

GNUnet = 0.7.0d Empty UDP Packet Remote Denial of Service Exploit https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/1792.zip 05152006-udpsz.zip...

GNUnet 0.7.0d - Empty UDP Packet Remote Denial of Service

GNUnet 0.7.0d - Empty UDP Packet Remote Denial of Service GNUnet = 0.7.0d Empty UDP Packet Remote Denial of Service Exploit https://github.com/offensive-security/exploitdb-bin-sploits/raw/master/bin-sploits/1792.zip 05152006-udpsz.zip...

CVE-2006-1235

Directory traversal vulnerability in admin/deleteuser.php in HitHost 1.0.0 might allow remote attackers to delete directories possibly only empty directories via the $deleteuser variable. NOTE: the initial disclosure for this issue indicated that the researcher was unable to prove this issue;...

Cross site scripting

The cross-site scripting XSS countermeasures in class.inputfilter.php in Joomla! 1.0.7 allow remote attackers to cause a denial of service via a crafted mosmsg parameter to index.php with a malformed sequence of multiple tags, as demonstrated using "AAA", possibly due to nested or empty tags...