9320 matches found
CVS < 1.11.17 / 1.12.9 Multiple Vulnerabilities
The remote CVS server, according to its version number, might allow an attacker to execute arbitrary commands on the remote system because of a flaw relating to malformed Entry lines which lead to a missing NULL terminator. Among the issues deemed likely to be exploitable were: - A double-free...
Linksys Web Camera directory traversal
No description provided...
Mac OS X < 10.3.4 Multiple Vulnerabilities
The remote host is running a version of Mac OS X that is older than 10.3.4. Such versions contain several flaws that may allow an attacker to execute arbitrary commands on the remote system with root privileges. C Tenable Network Security, Inc. include"compat.inc"; ifdescription scriptid12257;...
waraxe-2004-SA031.txt
================================================================================ waraxe-2004-SA031 ================================================================================ Multiple vulnerabilities in e107 version 0.615...
JPortal SQL Injects
Jportal is a portal system, quite commonly used: Google Results 1 - 10 of about 56,100 for "powered by jportal". 0.22 seconds Homepage: http://jportal2.com/ I've read its code and found: in module/print.inc.php: function artprint .... $query = "SELECT FROM $arttbl WHERE id=$id"; ... What to say? ...
[waraxe-2004-SA#030 - Multiple vulnerabilities in PhpNuke 6.x - 7.3]
================================================================================ waraxe-2004-SA030 ================================================================================ Multiple vulnerabilities in PhpNuke 6.x - 7.3...
[waraxe-2004-SA#028 - Multiple vulnerabilities in NukeJokes module for PhpNuke]
================================================================================ waraxe-2004-SA028 ================================================================================ Multiple vulnerabilities in NukeJokes module for PhpNuke...
[Full-Disclosure] [RHSA-2004:179-01] An updated LHA package fixes security vulnerabilities
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - --------------------------------------------------------------------- Red Hat Security Advisory Synopsis: An updated LHA package fixes security vulnerabilities Advisory ID: RHSA-2004:179-01 Issue date: 2004-04-30 Updated on: 2004-04-30 Product: Red...
OpenBB 1.0.x - 'post.php?TID' Cross-Site Scripting
source: https://www.securityfocus.com/bid/10214/info It has been reported that OpenBB is affected by multiple input validation vulnerabilities. These issues are due to a failure of the application to properly sanitize user supplied user input. The SQL issues may allow a remote attacker to...
systrace.txt
systrace silently patches full local bypass vulnerability on Linux Introductory Note: I will not be replying to any posts in response to this mail, no matter how many times you intentionally misspell my name or attack me personally. Annoying me in an attempt to get me to release vulnerability...
Multiple Vulnerabilities in Cloisterblog web blog/journal
Executive Overview ------------------ Cloisterblog, a general usage web blog written in perl suffers from multiple XSS and directory transversal issues as well as a design flaw in the admin section. Program Description -------------------- Cloisterblog...
Alan Ward A-CART 2.0 - category.asp?catcode SQL Injection (2)
Alan Ward A-CART 2.0 - category.asp?catcode SQL Injection 2 source: https://www.securityfocus.com/bid/9997/info Reportedly A-Cart is prone to multiple input validation vulnerabilities. These issues are due to a failure of the application to properly sanitize user supplied input prior to its use i...
cloisterblog.txt
Executive Overview ------------------ Cloisterblog, a general usage web blog written in perl suffers from multiple XSS and directory transversal issues as well as a design flaw in the admin section. Program Description -------------------- Cloisterblog...
Multiple Apache vulnerabilities
modssl memory leak, logfile terminal escape sequences injection...
R7-0018: OpenBSD isakmpd payload handling denial-of-service vulnerabilities
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Rapid7, Inc. Security Advisory Visit http://www.rapid7.com/ to download NeXpose, the world's most advanced vulnerability scanner. Linux and Windows 2000/XP versions are available now! Rapid7 Advisory R7-0018 OpenBSD isakmpd payload handling...
isakmpd payload handling denial-of-service vulnerabilities
Numerous errors in isakmpd's input packet validation lead to denial-of-service vulnerabilities. From the Rapid7 advisory: The ISAKMP packet processing functions in OpenBSD's isakmpd daemon contain multiple payload handling flaws that allow a remote attacker to launch a denial of service attack...
Multiple issues with Mac OS X AFP client
Multiple issues with Mac OS X AFP client Background The standard Apple Filing Protocol1 AFP does not use encryption to protect transfered data. Login credentials may be sent in cleartext or protected with one of several different hashed exchanges or Kerberos2. There does not appear to have been a...
[Full-Disclosure] EarlyImpact ProductCart shopping cart software multiple security vulnerabilities
S-Quadra Advisory 2004-02-16 Topic: EarlyImpact ProductCart shopping cart software multiple security vulnerabilities Severity: High Vendor URL: http://www.earlyimpact.com Advisory URL: http://www.s-quadra.com/advisories/Adv-20040216.txt Release date: 16 Feb 2004 1. DESCRIPTION ProductCart is a...
CGI bugs
No description provided...
Moderate: Red Hat Security Advisory: tcpdump security update
Updated tcpdump, libpcap, and arpwatch packages fix vulnerabilities in ISAKMP and RADIUS parsing. Updated 15 Jan 2004 Updated the text description to better describe the vulnerabilities found by Jonathan Heusser and give them CVE names. Tcpdump is a command-line tool for monitoring network traffi...