NVIDIA binary graphics driver: Privilege escalation vulnerability

Background The NVIDIA binary graphics driver from NVIDIA Corporation provides the kernel module and the GL modules for graphic acceleration on the NVIDIA based graphic cards. Description Rapid7 reported a boundary error in the NVIDIA binary graphics driver that leads to a buffer overflow in the...

[SA20781] GL-SH Deaf Forum show.php Cross-Site Scripting

---------------------------------------------------------------------- Want to join the Secunia Security Team? Secunia offers a position as a security specialist, where your daily work involves reverse engineering of software and exploit code, auditing of source code, and analysis of vulnerabilit...

CVE-2006-3247

Multiple cross-site scripting XSS vulnerabilities in show.php in GL-SH Deaf Forum 6.4.3 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 search, 2 page, and 3 action parameters. NOTE: the provenance of this information is unknown; the details are obtained solely...

CVE-2006-3246

Cross-site scripting XSS vulnerability in show.php in GL-SH Deaf Forum 6.4.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the sort parameter...

CVE-2006-3246

Cross-site scripting XSS vulnerability in show.php in GL-SH Deaf Forum 6.4.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the sort parameter...

CVE-2006-3246

CVE-2006-3246 describes a stored/reflected XSS in GL-SH Deaf Forum 6.4.3 and earlier, exploitable via the sort parameter in show.php. Impact: attacker can inject arbitrary script/HTML. Root cause: insufficient input sanitization for the sort parameter. Public remediation details are not provided ...

CVE-2006-3247

Multiple cross-site scripting XSS vulnerabilities in show.php in GL-SH Deaf Forum 6.4.3 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 search, 2 page, and 3 action parameters. NOTE: the provenance of this information is unknown; the details are obtained solely...

CVE-2006-3247

CVE-2006-3247 describes multiple cross-site scripting (XSS) vulnerabilities in the GL-SH Deaf Forum’s show.php (versions 6.4.3 and earlier). The flaws allow remote attackers to inject arbitrary script/HTML via the (1) search, (2) page, and (3) action parameters. The NVD entry lists a low base CVS...

CVE-2000-0893

The presence of the Distributed GL Daemon dgld service on port 5232 on SGI IRIX systems allows remote attackers to identify the target host as an SGI system...

CVE-2000-0893

The presence of the Distributed GL Daemon dgld service on port 5232 on SGI IRIX systems allows remote attackers to identify the target host as an SGI system...

[SECURITY] New version of xlockmore/xlockmore-gl released

Package: xlockmore, xlockmore-gl Vulnerability type: local exploit Debian-specific: no There is a format string bug in all versions of xlockmore/xlockmore-gl. Debian 2.1 slink installs xlock setgid by default, and this exploit can be used to gain read access to the shadow file. We recommend...