6330 matches found
Sql injection
Multiple SQL injection vulnerabilities in microcms-admin-login.php in Implied By Design IBD Micro CMS 3.5 aka 0.3.5 allow remote attackers to execute arbitrary SQL commands via 1 the administratorsusername parameter aka the Username field or 2 the administratorspass parameter aka the Password fie...
Sql injection
Multiple SQL injection vulnerabilities in the inserttopastebin function in php/cccp-admin/inc/functions.php in CCCP Community Clan Portal Pastebin before 2.80 allow remote attackers to execute arbitrary SQL commands via the 1 subject, 2 language, and 3 nickname parameters to...
CVE-2009-1245
Multiple SQL injection vulnerabilities in the inserttopastebin function in php/cccp-admin/inc/functions.php in CCCP Community Clan Portal Pastebin before 2.80 allow remote attackers to execute arbitrary SQL commands via the 1 subject, 2 language, and 3 nickname parameters to...
Stack overflow
Stack-based buffer overflow in mapserv.c in mapserv in MapServer 4.x before 4.10.4 and 5.x before 5.2.2, when the server has a map with a long IMAGEPATH or NAME attribute, allows remote attackers to execute arbitrary code via a crafted id parameter in a query action...
CVE-2009-1169
The txMozillaXSLTProcessor::TransformToDoc function in Mozilla Firefox before 3.0.8 and SeaMonkey before 1.1.16 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via an XML file with a crafted XSLT transform...
CVE-2009-1092
Use-after-free vulnerability in the LIVEAUDIO.LiveAudioCtrl.1 ActiveX control in LIVEAU1.OCX 7.0 for GeoVision DVR systems allows remote attackers to execute arbitrary code by calling the GetAudioPlayingTime method with certain arguments...
CVE-2009-1086
Heap-based buffer overflow in the ldnsrrnewfrmstrinternal function in ldns 1.4.x allows remote attackers to cause a denial of service memory corruption and possibly execute arbitrary code via a DNS resource record RR with a long 1 class field clas variable and possibly 2 TTL field...
CVE-2009-1086
Heap-based buffer overflow in the ldnsrrnewfrmstrinternal function in ldns 1.4.x allows remote attackers to cause a denial of service memory corruption and possibly execute arbitrary code via a DNS resource record RR with a long 1 class field clas variable and possibly 2 TTL field...
CVE-2009-1086
CVE-2009-1086 affects ldns: a heap-based buffer overflow in ldns_rr_new_frm_str_internal in ldns 1.4.x can be triggered by a DNS RR with a long class field (and possibly TTL), leading to denial of service and potential arbitrary code execution. Public docs indicate the issue arises during parsing...
Stack overflow
Stack-based buffer overflow in the GetXMLValue method in the IBM Access Support ActiveX control in IbmEgath.dll, as distributed on IBM and Lenovo computers, allows remote attackers to execute arbitrary code via unspecified vectors...
CVE-2009-1061
CVE-2009-1061 (and related CVEs: 0193, 1062, 0658, 0927, 0928) describe multiple input-validation flaws in Adobe Reader/Acrobat and the JBIG2 decoder that could allow remote code execution via specially crafted PDF files. Affected versions include Adobe Acrobat/Reader before 9.1 (and 8 before 8.1...
CVE-2009-0364
Removed by vendor...
CVE-2009-1060
Unspecified vulnerability in Apple Safari on Mac OS X 10.5.6 allows remote attackers to execute arbitrary code via unknown vectors triggered by clicking on a link, as demonstrated by Charlie Miller during a PWN2OWN competition at CanSecWest 2009...
CVE-2009-1057
MicroSmarts Enterprise ZipItFast! 3.0 allows remote attackers to execute arbitrary code via a crafted .zip file that triggers memory corruption, related to a "format string buffer overflow." NOTE: CVE has not investigated whether the specified file.zip file can be used for exploitation of this...
CVE-2009-0583
Multiple integer overflows in icc.c in the International Color Consortium ICC Format library aka icclib, as used in Ghostscript 8.64 and earlier and Argyll Color Management System CMS 1.0.3 and earlier, allow context-dependent attackers to cause a denial of service heap-based buffer overflow and...
Ubuntu Update for mozilla-thunderbird vulnerabilities USN-431-1
Ubuntu Update for Linux kernel vulnerabilities USN-431-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN4311.nasl 7969 2017-12-01 09:23:16Z santu $ Ubuntu Update for mozilla-thunderbird vulnerabilities USN-431-1 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH,...
Ubuntu Update for imlib2 vulnerability USN-683-1
Ubuntu Update for Linux kernel vulnerabilities USN-683-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN6831.nasl 7969 2017-12-01 09:23:16Z santu $ Ubuntu Update for imlib2 vulnerability USN-683-1 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH,...
Ubuntu Update for linux-restricted-modules-2.6.17 vulnerability USN-404-1
Ubuntu Update for Linux kernel vulnerabilities USN-404-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN4041.nasl 7969 2017-12-01 09:23:16Z santu $ Ubuntu Update for linux-restricted-modules-2.6.17 vulnerability USN-404-1 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks...
Ubuntu Update for mono vulnerability USN-553-1
Ubuntu Update for Linux kernel vulnerabilities USN-553-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN5531.nasl 7969 2017-12-01 09:23:16Z santu $ Ubuntu Update for mono vulnerability USN-553-1 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH,...
Ubuntu: Security Advisory (USN-626-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...