CVE-2008-1368

CVE-2008-1368 describes a CRLF injection vulnerability in Microsoft Internet Explorer 5 and 6. A remote attacker can supply an ftp:// URL containing a URL-encoded CRLF (%0D%0A) before the FTP command, causing the command to be injected into an authenticated FTP session established in the same bro...

CVE-2008-1145

CVE-2008-1145 is a directory traversal vulnerability in WEBrick for Ruby. Affected: Ruby 1.8 before 1.8.5-p115 and 1.8.6-p114, and 1.9 through 1.9.0-1, on systems with backslash path separators or case-insensitive filenames. Exploitation via encoded backslashes ("..\" sequences) or filenames matc...

Directory traversal vulnerability in WEBrick

Directory traversal vulnerability in WEBrick when running on systems that support backslash path separators or case-insensitive file names, allows remote attackers to access arbitrary files via 1 "..%5c" encoded backslash sequences or 2 filenames that match patterns in the :NondisclosureName opti...

Cross site scripting

Cross-site scripting XSS vulnerability in Livelink ECM 9.0.0 through 9.7.0 and possibly earlier does not set the charset, which allows remote attackers to inject arbitrary web script or HTML via UTF-7 encoded input...

CVE-2008-0769

Cross-site scripting XSS vulnerability in Livelink ECM 9.0.0 through 9.7.0 and possibly earlier does not set the charset, which allows remote attackers to inject arbitrary web script or HTML via UTF-7 encoded input...

CVE-2008-0769

CVE-2008-0769 affects EMC Livelink ECM versions 9.0.0 through 9.7.0 (possibly earlier). The root cause is that the application does not set the character set, enabling cross-site scripting (XSS) via UTF-7 encoded input. Documented in multiple sources (NVD entry, CVE lists), it indicates an input‑...

Fedora 7 : deluge-0.5.8.3-1.fc7 (2008-1288)

Version 0.5.8.3 of the Deluge BitTorrent client contains a security fix for a remote exploit which could cause Deluge to crash. It also fixes some high CPU usage spikes, loading issues with the BlocklistImport plugin, and lock-ups when the tracker returns data that is not properly UTF8-encoded...

Debian Security Advisory DSA 631-1 (kdelibs)

The remote host is missing an update to kdelibs announced via advisory DSA 631-1. OpenVAS Vulnerability Test $Id: deb6311.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 631-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

Debian Security Advisory DSA 459-1 (kdelibs, kdelibs-crypto)

The remote host is missing an update to kdelibs, kdelibs-crypto announced via advisory DSA 459-1. OpenVAS Vulnerability Test $Id: deb4591.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 459-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

CVE-2007-0012

Sun JRE 5.0 before update 14 allows remote attackers to cause a denial of service Internet Explorer crash via an object tag with an encoded applet and an undefined name attribute, which triggers a NULL pointer dereference in jpiexp32.dll when the applet is decoded and passed to the JVM...

Path traversal

Absolute path traversal vulnerability in index.php in Sys-Hotel on Line System allows remote attackers to read arbitrary files via an encoded "/" "%2F" in the file parameter...

CVE-2008-0184

CVE-2008-0184 affects Sys-Hotel on Line System. Affects the index.php file where an absolute path traversal can occur via an encoded slash (%2F) in the file parameter, enabling remote reading of arbitrary files. The NVD entry lists a Network attack vector with Low complexity and no authentication...

Path traversal

Absolute path traversal vulnerability in index.php in Million Dollar Script 2.0.14 allows remote attackers to read arbitrary files via encoded "/" %2F sequences in the link parameter...

CVE-2008-0156

Absolute path traversal vulnerability in index.php in Million Dollar Script 2.0.14 allows remote attackers to read arbitrary files via encoded "/" %2F sequences in the link parameter...

Directory traversal

Directory traversal vulnerability in DirHandler lib/mongrel/handlers.rb in Mongrel 1.0.4 and 1.1.x before 1.1.3 allows remote attackers to read arbitrary files via an HTTP request containing double-encoded sequences ".%252e"...

CVE-2007-6612

Directory traversal vulnerability in DirHandler lib/mongrel/handlers.rb in Mongrel 1.0.4 and 1.1.x before 1.1.3 allows remote attackers to read arbitrary files via an HTTP request containing double-encoded sequences ".%252e"...

DEBIAN-CVE-2007-6596

ClamAV 0.92 does not recognize Base64 UUEncoded archives, which allows remote attackers to bypass the scanner via a Base64-UUEncoded file...

CVE-2007-6458

SQL injection vulnerability in shop/mainfile.php in 123tkShop 0.9.1 allows remote attackers to execute arbitrary SQL commands via a base64-encoded value of the admin parameter to shop/admin.php...

CVE-2007-6468

Buffer overflow in the HuffDecode function in hwutils/hwrcon/huffman.c and hexenworld/Client/huffman.c in Hammer of Thyrion 1.4.2 allows remote attackers to execute arbitrary code or cause a denial of service via a crafted huffman encoded packet. NOTE: some of these details are obtained from thir...

CVE-2007-6458

SQL injection vulnerability in shop/mainfile.php in 123tkShop 0.9.1 allows remote attackers to execute arbitrary SQL commands via a base64-encoded value of the admin parameter to shop/admin.php...