CVE-2003-1399

eject 2.0.10, when installed setuid on systems such as SuSE Linux 7.3, generates different error messages depending on whether a specified file exists or not, which allows local users to obtain sensitive information...

CVE-2003-1399

Removed by vendor...

CVE-2007-5280: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in messages.jsp in AppFuse before 2.0 Final allow remote attackers to inject arbitrary web script or HTML via unspecified input that is recorded in 1 success or 2 error messages...

CVE-2004-2706

The vulnerability CVE-2004-2706 affects Gyach Enhanced (Gyach-E) before 1.0.4. An remote attacker can trigger a denial of service (crash) by sending conference packets containing error messages. Mitigation: upgrade Gyach-E to version 1.0.4 or later, per referenced entries. The connected documents...

CVE-2004-2706: Improper Input Validation

Unspecified vulnerability in Gyach Enhanced Gyach-E before 1.0.4 allows remote attackers to cause a denial of service crash via conference packets with error messages...

Design/Logic Flaw

SimpGB 1.46.02 allows remote attackers to obtain sensitive information via 1 an invalid lang parameter to admin/index.php or 2 a direct request to admin/trailer.php, which reveals the path in various error messages...

Design/Logic Flaw

SimpNews 2.41.03 allows remote attackers to obtain sensitive information via 1 an invalid lang parameter to admin/index.php; or a direct request to 2 admin/dbginfos.php, 3 admin/heading.php, or 4 evsearch.php; which reveals the path in various error messages...

CVE-2007-5130

SimpGB 1.46.02 allows remote attackers to obtain sensitive information via 1 an invalid lang parameter to admin/index.php or 2 a direct request to admin/trailer.php, which reveals the path in various error messages...

Apache crossite scripting

Crossite scripting with UTF-7 characters on directories listing and error messages...

MDKA-2007:089 : proftpd

A bug in ProFTPD, when run on an IPv6-capable host, causes ProFTPD to generate an excessive number of error messages to syslog. As well, LDAP TLS support was incorrectly setup during compilation and as a result LDAP TLS support was disabled. The updated packages correct these issues. %NASLMINLEVE...

joekoe CMS 4.0 two vulnerabilities-vulnerability warning-the black bar safety net

Today is Ah bad sent me the software.. But just look at the software boring. in. So by looking for this vulnerability. in. Looked under beef cattle analysis of.. Read the inside meaning So by the way is also made up To put this belated vulnerability for everyone to see...

Design/Logic Flaw

Joomla! 1.0.12 allows remote attackers to obtain sensitive information via a direct request for 1 Stat.php 2 OutputFilter.php, 3 OutputCache.php, 4 Modifier.php, 5 Reader.php, and 6 TemplateCache.php in includes/patTemplate/patTemplate/; 7 includes/Cache/Lite/Output.php; and other unspecified...

CVE-2007-3384

Multiple cross-site scripting XSS vulnerabilities in examples/servlet/CookieExample in Apache Tomcat 3.3 through 3.3.2 allow remote attackers to inject arbitrary web script or HTML via the 1 Name or 2 Value field, related to error messages...

CVE-2007-4185

Joomla! 1.0.12 allows remote attackers to obtain sensitive information via a direct request for 1 Stat.php 2 OutputFilter.php, 3 OutputCache.php, 4 Modifier.php, 5 Reader.php, and 6 TemplateCache.php in includes/patTemplate/patTemplate/; 7 includes/Cache/Lite/Output.php; and other unspecified...

CVE-2007-4185: Undefined Security Weakness

Joomla! 1.0.12 allows remote attackers to obtain sensitive information via a direct request for 1 Stat.php 2 OutputFilter.php, 3 OutputCache.php, 4 Modifier.php, 5 Reader.php, and 6 TemplateCache.php in includes/patTemplate/patTemplate/; 7 includes/Cache/Lite/Output.php; and other unspecified...

CVE-2007-3384: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in examples/servlet/CookieExample in Apache Tomcat 3.3 through 3.3.2 allow remote attackers to inject arbitrary web script or HTML via the 1 Name or 2 Value field, related to error messages...

CVE-2007-3388

Multiple format string vulnerabilities in 1 qtextedit.cpp, 2 qdatatable.cpp, 3 qsqldatabase.cpp, 4 qsqlindex.cpp, 5 qsqlrecord.cpp, 6 qglobal.cpp, and 7 qsvgdevice.cpp in QTextEdit in Trolltech Qt 3 before 3.3.8 20070727 allow remote attackers to execute arbitrary code via format string specifier...

CVE-2007-3383

Cross-site scripting XSS vulnerability in SendMailServlet in the examples web application examples/jsp/mail/sendmail.jsp in Apache Tomcat 4.0.0 through 4.0.6 and 4.1.0 through 4.1.36 allows remote attackers to inject arbitrary web script or HTML via the From field and possibly other fields, relat...

Cross site scripting

Cross-site scripting XSS vulnerability in SendMailServlet in the examples web application examples/jsp/mail/sendmail.jsp in Apache Tomcat 4.0.0 through 4.0.6 and 4.1.0 through 4.1.36 allows remote attackers to inject arbitrary web script or HTML via the From field and possibly other fields, relat...

CVE-2007-3383: Undefined Security Weakness

Cross-site scripting XSS vulnerability in SendMailServlet in the examples web application examples/jsp/mail/sendmail.jsp in Apache Tomcat 4.0.0 through 4.0.6 and 4.1.0 through 4.1.36 allows remote attackers to inject arbitrary web script or HTML via the From field and possibly other fields, relat...