PHP < 4.4.5 Multiple Vulnerabilities

PHP is prone to multiple vulnerabilities in the Ovrimos extension. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:php:php";...

PHP Session Data Deserialization Arbitrary Code Execution Vulnerability

PHP is prone to an arbitrary code execution vulnerability. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:php:php"; ifdescriptio...

Microsoft Windows SMTP Server MX Record Denial of Service Vulnerability

The Microsoft Windows Simple Mail Transfer Protocol SMTP Server is prone to a denial-of-service vulnerability and to to an information-disclosure vulnerability. Successful exploits of the denial-of-service vulnerability will cause the affected SMTP server to stop responding, denying service to...

FlashCard 2.6.5 - id Cross-Site Scripting

FlashCard 2.6.5 - id Cross-Site Scripting source: https://www.securityfocus.com/bid/39648/info FlashCard is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in the brows...

Acritum Femitter Server <= 1.03 Directory Traversal Vulnerability

Acritum Femitter Server is prone to a directory traversal vulnerability because it fails to sufficiently sanitize user-supplied input. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Iomega smbwebclient.php Unauthenticated Filesystem Access

The remote host appears to be an Iomega device, perhaps a Home Media Network Hard Drive, a Network-attached storage NAS device intended for the home networks. Its web server hosts an unsecured install of smbwebclient, a PHP- based utility that grants full access to any visible shares on the devic...

WinMount 3.3.401 - .zip Remote Buffer Overflow

WinMount 3.3.401 - .zip Remote Buffer Overflow source: https://www.securityfocus.com/bid/39557/info WinMount is prone to a remote buffer-overflow vulnerability because the application fails to perform adequate boundary checks on user-supplied data. An attacker can exploit this issue to execute...

PHP 4.4.x < 4.4.9, 5.2.x < 5.2.8 DoS Vulnerability

PHP is prone to a denial of service DoS vulnerability because the application fails to handle certain file requests. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

VMware WebAccess 1.0 XSS Vulnerability - Linux

VMWare Server is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

AneCMS 1.0 - Multiple Local File Inclusions

source: https://www.securityfocus.com/bid/39416/info AneCMS is prone to multiple local file-include vulnerabilities because it fails to properly sanitize user-supplied input. An attacker can exploit these vulnerabilities to obtain potentially sensitive information and to execute arbitrary local...

Mozilla Firefox 'JavaScript' Security Bypass Vulnerability

firefox browser is prone to a security bypass vulnerability. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Joomla! Component com_weblinks - id SQL Injection

Joomla! Component comweblinks - id SQL Injection source: https://www.securityfocus.com/bid/39032/info The 'comweblinks' component for Joomla! is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this...

Design/Logic Flaw

The JavaScript implementation in WebKit allows remote attackers to send selected keystrokes to a form field in a hidden frame, instead of the intended form field in a visible frame, via certain calls to the focus method...

Design/Logic Flaw

The JavaScript implementation in Mozilla Firefox 3.x before 3.5.10 and 3.6.x before 3.6.4, and SeaMonkey before 2.0.5, allows remote attackers to send selected keystrokes to a form field in a hidden frame, instead of the intended form field in a visible frame, via certain calls to the focus metho...

CVE-2010-1125

The JavaScript implementation in Mozilla Firefox 3.x before 3.5.10 and 3.6.x before 3.6.4, and SeaMonkey before 2.0.5, allows remote attackers to send selected keystrokes to a form field in a hidden frame, instead of the intended form field in a visible frame, via certain calls to the focus metho...

Jenkins Software RakNet 3.72 - Remote Integer Underflow

Jenkins Software RakNet 3.72 - Remote Integer Underflow source: https://www.securityfocus.com/bid/38974/info RakNet is prone to a remote integer-underflow vulnerability because it fails to sufficiently validate an integer value. An attacker can exploit this issue to execute arbitrary code with th...

Joomla! Component com_jresearch - 'Controller' Local File Inclusion

source: https://www.securityfocus.com/bid/38917/info The 'comjresearch' component for Joomla! is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to obtain potentially sensitive information and execut...

Remote Help HTTP GET Request Format String Denial Of Service Vulnerability

Remote Help is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Lussumo Vanilla 1.1.10 - 'definitions.php' Multiple Remote File Inclusions

source: https://www.securityfocus.com/bid/38889/info Vanilla is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow an attacker to compromise the application and the computer; other attacks are also...

PHPAuthent 0.2.1 - useradd.php Multiple HTML Injection Vulnerabilities

PHPAuthent 0.2.1 - useradd.php Multiple HTML Injection Vulnerabilities source: https://www.securityfocus.com/bid/38908/info phpAuthent is prone to multiple HTML-injection vulnerabilities because it fails to properly sanitize user-supplied input. Successful exploits will allow attacker-supplied HT...