6436 matches found
CVE-2005-2550
Format string vulnerability in Evolution 1.4 through 2.3.6.1 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via the calendar entries such as task lists, which are not properly handled when the user selects the Calendars tab...
CVE-2005-2549
Multiple format string vulnerabilities in Evolution 1.5 through 2.3.6.1 allow remote attackers to cause a denial of service crash and possibly execute arbitrary code via 1 full vCard data, 2 contact data from remote LDAP servers, or 3 task list data from remote servers...
CVE-2005-2456
Array index overflow in the xfrmskpolicyinsert function in xfrmuser.c in Linux kernel 2.6 allows local users to cause a denial of service oops or deadlock and possibly execute arbitrary code via a p-dir value that is larger than XFRMPOLICYOUT, which is used as an index in the sock-skpolicy array...
CVE-2005-2410
Format string vulnerability in the nminfohandler function in Network Manager may allow remote attackers to execute arbitrary code via format string specifiers in a Wireless Access Point identifier, which is not properly handled in a syslog call...
CVE-2005-2410
Format string vulnerability in the nminfohandler function in Network Manager may allow remote attackers to execute arbitrary code via format string specifiers in a Wireless Access Point identifier, which is not properly handled in a syslog call...
CVE-2005-2369
Multiple integer signedness errors in libgadu, as used in ekg before 1.6rc2 and other packages, may allow remote attackers to cause a denial of service or execute arbitrary code...
CVE-2005-2369
CVE-2005-2369 is a libgadu issue (used by ekg and centericq) with multiple integer signedness errors that can lead to remote denial of service or arbitrary code execution. Connected advisories (Debian DSA-813-1; Ubuntu USN-162-1; CentOS/Nessus entries) confirm the vulnerability and reference libg...
Netquery 3.1 - nqports.php?step Cross-Site Scripting
Netquery 3.1 - nqports.php?step Cross-Site Scripting source: https://www.securityfocus.com/bid/14373/info Netquery is affected by multiple remote vulnerabilities. These issues can allow remote attackers to execute arbitrary commands, disclose sensitive information and carry out cross-site scripti...
Netquery 3.1 - 'nqgeoip2.php' Multiple Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/14373/info Netquery is affected by multiple remote vulnerabilities. These issues can allow remote attackers to execute arbitrary commands, disclose sensitive information and carry out cross-site scripting attacks. Netquery 3.1 is affected by these...
Netquery 3.1 - 'nqgeoip.php?step' Cross-Site Scripting
source: https://www.securityfocus.com/bid/14373/info Netquery is affected by multiple remote vulnerabilities. These issues can allow remote attackers to execute arbitrary commands, disclose sensitive information and carry out cross-site scripting attacks. Netquery 3.1 is affected by these...
Netquery 3.1 - 'nqports.php?step' Cross-Site Scripting
source: https://www.securityfocus.com/bid/14373/info Netquery is affected by multiple remote vulnerabilities. These issues can allow remote attackers to execute arbitrary commands, disclose sensitive information and carry out cross-site scripting attacks. Netquery 3.1 is affected by these...
MDaemon IMAP Server Multiple AUTHENTICATE Commands Remote Overflow
According to its banner, the remote version of MDaemon has multiple buffer overflow vulnerabilities. A remote attacker could exploit these issues to crash the service, or possibly execute arbitrary code. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc';...
CVE-2004-2239
Buffer overflow in vsybase.c in vpopmail 5.4.2 and earlier might allow attackers to cause a denial of service or execute arbitrary code...
CVE-2002-2060
CVE-2002-2060 affects Links 2.0 pre4. The vulnerability is a buffer overflow in the PNG gamma table handling (large 16-bit PNG images), allowing remote network-triggered crashes and potential arbitrary code execution in affected client browsers. Connected sources confirm the same description acro...
CVE-2005-2236
Format string vulnerability in the paginit command in IBM AIX 5.3, and possibly other versions, might allow local users to execute arbitrary code via format strings in command line arguments...
CVE-2004-2167
Multiple buffer overflows in LaTeX2rtf 1.9.15, and possibly other versions, allow remote attackers to execute arbitrary code via 1 the expandmacro function, and possibly 2 Environments and 3 TranslateCommand...
CVE-2004-2160
Format string vulnerability in xmlelem.c for XMLStarlet Command Line XML Toolkit 0.9.3 may allow attackers to cause a denial of service or execute arbitrary code...
CVE-2005-2082
imtrbbs.cgi in imTRSET 1.02 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the df parameter...
CVE-2002-1973
The CVE-2002-1973 entry describes a buffer overflow in CHttpServer::OnParseError of the ISAPI extension (Isapi.cpp) when built with MFC static libraries in Visual C++ 5.0 and 6.0 before SP3. This flaw, present in multiple products (including BadBlue), can be triggered by a long query string that ...