7748 matches found
Out-of-Bounds
Overview Affected versions of this package are vulnerable to Out-of-Bounds. Stack consumption vulnerability in validators/DTD/DTDScanner.cpp in Apache Xerces C++ 2.7.0 and 2.8.0 allows context-dependent attackers to cause a denial of service application crash via vectors involving nested...
Denial of Service (DoS)
Overview Affected versions of this package are vulnerable to Denial of Service DoS. The BigDecimal library in Ruby 1.8.6 before p369 and 1.8.7 before p173 allows context-dependent attackers to cause a denial of service application crash via a string argument that represents a large number, as...
IceWarp WebMail Mail Forgery
Advisory: IceWarp WebMail Server: Client-Side Specification of "Forgot Password" eMail Content During a penetration test, RedTeam Pentesting discovered that the emails sent by the IceWarp WebMail Server when using the "Forgot Password" function are generated on the client side. Furthermore, the...
[oCERT-2008-015] glib and glib-predecessor heap overflows
2008-015 glib and glib-predecessors heap overflows Description: Base64 encoding and decoding functions in glib suffer from vulnerabilities during memory allocation which may result in arbitrary code execution when processing large strings. A number of other GNOME-related applications which predat...
DSA-1732-1 squid3 - denial of service
Bulletin has no description...
DSA-1729-1 gst-plugins-bad0.10 - multiple vulnerabilities
Bulletin has no description...
Vinagre < 2.24.2 show_error() Remote Format String PoC
No description provided by source. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Core Security Technologies - CoreLabs Advisory http://www.coresecurity.com/corelabs/ Vinagre showerror format string vulnerability 1. Advisory Information Title: Vinagre showerror format string vulnerability Advisory...
Vinagre < 2.24.2 show_error() Remote Format String PoC
Exploit for unknown platform in category dos / poc ====================================================== Vinagre 2.24.2 showerror Remote Format String PoC ====================================================== -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Core Security Technologies - CoreLabs...
Vinagre < 2.24.2 - 'show_error()' Remote Format String (PoC)
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Core Security Technologies - CoreLabs Advisory http://www.coresecurity.com/corelabs/ Vinagre showerror format string vulnerability 1. Advisory Information Title: Vinagre showerror format string vulnerability Advisory ID: CORE-2008-1127 Advisory URL:...
Vinagre 2.24.2 - show_error() Remote Format String (PoC)
Vinagre 2.24.2 - showerror Remote Format String PoC -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Core Security Technologies - CoreLabs Advisory http://www.coresecurity.com/corelabs/ Vinagre showerror format string vulnerability 1. Advisory Information Title: Vinagre showerror format string...
Vinagre show_error() format string vulnerability
1. Advisory Information Title: Vinagre showerror format string vulnerability Advisory ID: CORE-2008-1127 Advisory URL:http://www.coresecurity.com/core-labs/advisories/vinagre-format-string Date published: 2008-12-09 Date of last update: 2008-12-09 Vendors contacted: Vinagre team Release mode:...
[SECURITY] [DSA 1668-1] New hf packages fix execution of arbitrary code
------------------------------------------------------------------------ Debian Security Advisory DSA-1668-1 [email protected] http://www.debian.org/security/ Steve Kemp November 22, 2008 http://www.debian.org/security/faq -...
smcFanControl 2.1.2 (OSX) - Multiple Buffer Overflow Vulnerabilities (PoC)
vnsecurity.net ADVISORY 2008-11 =============================== :Title: Buffer overflows in smcFanControl 2.1.2 for OSX :Severity: Critical :Reporter: KaiJern, Lau kjlau at vnsecurity.net :Products: smcFanControl 2.1.2 :OS: OSX :Fixed in: to be release smcFanControl 2.1.3 About smcFanControl...
Debian Security Advisory DSA 1655-1 (linux-2.6.24)
The remote host is missing an update to linux-2.6.24 announced via advisory DSA 1655-1. OpenVAS Vulnerability Test $Id: deb16551.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1655-1 linux-2.6.24 Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft In...
PT-2008-5010 · Oracle · Java
Name of the Vulnerable Software and Affected Versions: Java versions prior to the fixed version on Mac OS X 10.4.11, 10.5.4, and 10.5.5 Description: The issue is related to an error checking problem in the Hash-based Message Authentication Code HMAC provider in Java, which uses an uninitialized...
Gentoo Security Advisory GLSA 200311-07 (phpSysInfo)
The remote host is missing updates announced in advisory GLSA 200311-07. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
[oCERT-2008-012] Horde, Popoon frameworks common input sanitization errors (XSS)
2008-012 Horde, Popoon frameworks common input sanitization errors XSS Two cross-site scripting XSS vulnerabilities were reported in Horde Framework. The first of which is that the Horde framework fails to properly sanitize the filename of MIME attachments on received emails. The second...
Improper Input Validation
Overview Affected versions of this package are vulnerable to Improper Input Validation. Certain Red Hat Enterprise Linux RHEL 4 and 5 packages for OpenSSH, as signed in August 2008 using a legitimate Red Hat GPG key, contain an externally introduced modification Trojan Horse that allows the packa...
Secunia Research: Blue Coat K9 Web Protection Response Handling Buffer Overflows
====================================================================== Secunia Research 31/07/2008 - Blue Coat K9 Web Protection Response Handling Buffer Overflows - ====================================================================== Table of Contents Affected...
Security Vulnerability in xwork, need to update to fixed version
see http://cwiki.apache.org/confluence/display/WW/S2-003 confluence currently using v1.0.3. 1.0.x branch was not yet patched so we cannot upgrade straight away. Don B is working on releasing the fix...