Novell Groupwise 8.0 - Multiple Remote Vulnerabilities

source: https://www.securityfocus.com/bid/44732/info Novell GroupWise is prone to multiple security vulnerabilities, including multiple remote code-execution vulnerabilities, an information-disclosure issue, and a cross-site scripting issue. Exploiting these issues could allow an attacker to stea...

Apache Shiro - Directory Traversal

source: https://www.securityfocus.com/bid/44616/info Apache Shiro is prone to a directory-traversal vulnerability because it fails to sufficiently sanitize user-supplied input. Exploiting this issue may allow an attacker to obtain sensitive information that could aid in further attacks. Apache...

Play! Framework Directory Traversal Vulnerability

The Play! Framework is prone to a directory-traversal vulnerability because it fails to sufficiently sanitize user-supplied input. Remote attackers can use a specially crafted request with directory- traversal sequences to read arbitrary files in the context of the user running the affected...

PHP 5.x < 5.3.3 Information Disclosure Vulnerability

PHP is prone to an information disclosure vulnerability. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:php:php"; ifdescription...

QuickTalk v1.2 (Source code disclosure) Multiple Vulnerabilities

Exploit for php platform in category web applications ================================================================ QuickTalk v1.2 Source code disclosure Multiple Vulnerabilities ================================================================...

OneHTTPD 0.6 - Directory Traversal

OneHTTPD 0.6 - Directory Traversal source: https://www.securityfocus.com/bid/39757/info OneHTTPD is prone to a directory-traversal vulnerability because it fails to sufficiently sanitize user-supplied input data. Exploiting the issue may allow an attacker to obtain sensitive information that coul...

Ziggurat Farsi CMS - bck Directory Traversal

Ziggurat Farsi CMS - bck Directory Traversal source: https://www.securityfocus.com/bid/39534/info Ziggurat Farsi CMS is prone to a directory-traversal vulnerability because it fails to sufficiently sanitize user-supplied input. Exploiting this issue will allow an attacker to view arbitrary files...

Adobe Flash Player 10.1.51 - Local File Access Information Disclosure

Adobe Flash Player 10.1.51 - Local File Access Information Disclosure source: https://www.securityfocus.com/bid/38517/info Adobe Flash Player is prone to an information-disclosure vulnerability. Attackers can exploit this issue to obtain sensitive information that may aid in launching further...

Apple Safari 4.0.4 - Style Sheet redirection Information Disclosure

Apple Safari 4.0.4 - Style Sheet redirection Information Disclosure source: https://www.securityfocus.com/bid/37925/info Apple Safari is prone to a remote information-disclosure vulnerability. Attackers can exploit this issue to obtain potentially sensitive information that may lead to further...

phpShop shop/flypage SQL Injection

The version of phpShop running on the remote host has a SQL injection vulnerability. Input to the 'productid' parameter of 'shop/flypage' is not properly sanitized. A remote attacker could exploit this to issue arbitrary queries that could be used to control the database or mount further attacks...

CuteNews 1.4.6 - result Cross-Site Scripting

CuteNews 1.4.6 - result Cross-Site Scripting source: https://www.securityfocus.com/bid/36971/info CuteNews and UTF-8 CuteNews are prone to multiple vulnerabilities, including cross-site scripting, HTML-injection, information-disclosure, arbitrary-script-injection, and security-bypass issues. Note...

Interspire Knowledge Manager 5 - 'p' Directory Traversal

source: https://www.securityfocus.com/bid/36541/info Interspire Knowledge Manager is prone to a directory-traversal vulnerability because it fails to sufficiently sanitize user-supplied input data. Exploiting the issue may allow an attacker to obtain sensitive information that could aid in furthe...

PHP 5.2.105.3 - ini_restore() Memory Information Disclosure (2)

PHP 5.2.105.3 - inirestore Memory Information Disclosure 2 source: https://www.securityfocus.com/bid/36009/info PHP is prone to an information-disclosure vulnerability. Attackers can exploit this issue to obtain sensitive information that may lead to further attacks...

Afian - 'includer.php' Directory Traversal

source: https://www.securityfocus.com/bid/33943/info Afian is prone to a directory-traversal vulnerability because it fails to sufficiently sanitize user-supplied input data. Exploiting the issue may allow an attacker to obtain sensitive information that could aid in further attacks...

Swann DVR4 SecuraNet - Directory Traversal

source: https://www.securityfocus.com/bid/33716/info Swann DVR4 SecuraNet is prone to a directory-traversal vulnerability because it fails to sufficiently sanitize user-supplied input data. Exploiting the issue may allow an attacker to obtain sensitive information that could aid in further attack...

nagios -- web interface privilege escalation vulnerability

securityfocus reports: An attacker with low-level privileges may exploit this issue to bypass authorization and cause arbitrary commands to run within the context of the Nagios server. This may aid in further attacks...

No-IP DUC Client for Windows - Local Information Disclosure

No-IP DUC Client for Windows - Local Information Disclosure source: https://www.securityfocus.com/bid/29758/info The DUC application for No-IP is prone to a local information-disclosure vulnerability when it is running on Microsoft Windows. Successfully exploiting this issue allows attackers to...

WordPress 2.3.3 - cat Directory Traversal

WordPress 2.3.3 - cat Directory Traversal source: https://www.securityfocus.com/bid/28845/info WordPress is prone to a directory-traversal vulnerability because it fails to sufficiently sanitize user-supplied input data. Exploiting the issue may allow an attacker to access sensitive information...

Code injection

BEA WebLogic Server and WebLogic Express 9.0 and 9.1 exposes the web service's WSDL and security policies, which allows remote attackers to obtain sensitive information and potentially launch further attacks...

CVE-2008-0863

BEA WebLogic Server and WebLogic Express 9.0 and 9.1 exposes the web service's WSDL and security policies, which allows remote attackers to obtain sensitive information and potentially launch further attacks...