Hot Links SQL 3.2 - report.cgi SQL Injection

Hot Links SQL 3.2 - report.cgi SQL Injection source: https://www.securityfocus.com/bid/45000/info Hot Links SQL is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to...

FreeNAS Remote Shell Command Execution Vulnerability

FreeNAS is prone to a shell-command-execution vulnerability because the application fails to properly sanitize user-supplied input. An attacker can exploit the remote shell-command-execution issue to execute arbitrary shell commands in the context of the webserver process. FreeNAS versions prior ...

WebKit - Insufficient Entropy Random Number Generator (1)

WebKit - Insufficient Entropy Random Number Generator 1 source: https://www.securityfocus.com/bid/44952/info WebKit is prone to a random-number-generator weakness. Attackers can exploit this issue by enticing an unsuspecting user into visiting a malicious webpage. Successful attacks will allow...

GDL <= 4.2 SQLi Vulnerability - Active Check

GDL Ganesha Digital Library is prone to an SQL injection SQLi vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyrigh...

Project Jug Directory Traversal Vulnerability

This VT has been deprecated and replaced by the VT SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description...

Online Grades Multiple <= 3.2.5 LFi Vulnerabilities

Online Grades is prone to multiple local file-include vulnerabilities because it fails to properly sanitize user-supplied input. An attacker with admin access can exploit these vulnerabilities to obtain potentially sensitive nformation and to execute arbitrary local scripts in the context of the...

Symantec IM Manager Multiple SQL Injection Vulnerabilities

Symantec IM Manager is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. A successful exploit can allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities i...

W-Agora 4.2.1 - search.php?bn Cross-Site Scripting

W-Agora 4.2.1 - search.php?bn Cross-Site Scripting source: https://www.securityfocus.com/bid/44370/info w-Agora is prone to a local file-include vulnerability and a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit the local...

IBM Tivoli Access Manager for E-Business - '/ibm/wpm/webseal?method' Cross-Site Scripting

source: https://www.securityfocus.com/bid/44382/info IBM Tivoli Access Manager for e-business is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser ...

IBM Tivoli Access Manager for E-Business - ibmwpmgsogroup?method Cross-Site Scripting

IBM Tivoli Access Manager for E-Business - ibmwpmgsogroup?method Cross-Site Scripting source: https://www.securityfocus.com/bid/44382/info IBM Tivoli Access Manager for e-business is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. ...

Microsoft Office Excel RTD Topic String Buffer Overflow

Added: 10/20/2010 CVE: CVE-2010-1246 BID: 40524 OSVDB: 65238 Background Microsoft Excel, part of the Microsoft Office product suite, is a spreadsheet application for Windows platforms. Problem Microsoft Office Excel 2002 is vulnerable to a buffer overflow when parsing Real Time Data RTD Future...

Fedora 14 : rekonq-0.6.1-1.fc14 (2010-15874)

Mem leak fixed in the bars - Bookmarklets support - No more focus stealing on external url calls - Chinese sites right encoding - OpenSearch suggestions localized - Fixed urlbar crash in disconnected mode - AdBlock performance improvements - UrlBar Improvements - Suggestions - History Review -...

TWiki Multiple Cross Site Scripting Vulnerabilities

TWiki is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

eXV2 CMS - Multiple Cross-Site Scripting Vulnerabilities

eXV2 CMS - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/44169/info eXV2 CMS is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary...

TWiki 5.0 - '/bin/view?rev' Cross-Site Scripting

source: https://www.securityfocus.com/bid/44103/info TWiki is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the...

Torrent DVD Creator - quserex.dll DLL Loading Arbitrary Code Execution

Torrent DVD Creator - quserex.dll DLL Loading Arbitrary Code Execution // source: https://www.securityfocus.com/bid/44054/info Torrent DVD Creator is prone to a vulnerability that lets attackers execute arbitrary code. An attacker can exploit this issue by enticing a legitimate user to use the...

Torrent DVD Creator - 'quserex.dll' DLL Loading Arbitrary Code Execution

// source: https://www.securityfocus.com/bid/44054/info Torrent DVD Creator is prone to a vulnerability that lets attackers execute arbitrary code. An attacker can exploit this issue by enticing a legitimate user to use the vulnerable application to open a file from a network share location that...

SuSE 10 Security Update : Mozilla Firefox (ZYPP Patch Number 7083)

Mozilla Firefox has been updated to version 3.5.10, fixing various bugs and security issues. - Security researcher Amit Klein reported that it was possible to reverse engineer the value used to seed Math.random. Since the pseudo-random number generator was only seeded once per browsing session,...

NetStumbler 0.4 - 'mfc71esn.dll' DLL Loading Arbitrary Code Execution

// source: https://www.securityfocus.com/bid/43913/info NetStumbler is prone to a vulnerability that lets attackers execute arbitrary code. An attacker can exploit this issue by enticing a legitimate user to use the vulnerable application to open a file from a network share location that contains...

Adobe Dreamweaver CS4 - 'mfc80esn.dll' DLL Loading Arbitrary Code Execution

// source: https://www.securityfocus.com/bid/43911/info Adobe Dreamweaver CS4 is prone to a vulnerability that lets attackers execute arbitrary code. An attacker can exploit this issue by enticing a legitimate user to use the vulnerable application to open a file from a network share location tha...