CVE-2006-0605

Multiple cross-site scripting XSS vulnerabilities in Unknown Domain Shoutbox 2005.07.21 allow remote attackers to inject arbitrary web script or HTML, possibly via the 1 Handle or 2 Message fields...

Apache mod_python Handle Abuse Vulnerability

Apache modpython is prone to a handle abuse vulnerability. SPDX-FileCopyrightText: 2002 Thomas Reinke Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:apache:modpython";...

Super dove gray vip2005 detector detection principle of a simple analysis-vulnerability warning-the black bar safety net

The Preface of the new gray pigeons always give people everywhere the feeling, own it worked in the friend of the host met several times,each time can only be manually determined and clear. Looking at this detector for a little test. The effect is very good, it creates a want to know how she...

CVE-2005-2710

Format string vulnerability in Real HelixPlayer and RealPlayer 10 allows remote attackers to execute arbitrary code via the 1 image handle or 2 timeformat attribute in a RealPix .rp or RealText .rt file...

Security Flaw in pam_per_user Module

Summary/Impact: --------------- There is a security flaw in the pamperuser PAM module that can allow someone to authenticate as any user on the system, provided that they already have the proper credentials for one account. This security hole is fixed in pamperuser-0.4, which is available from:...

Microsoft Windows XP/2000/2003 - Keyboard Event Privilege Escalation

// source: https://www.securityfocus.com/bid/14743/info Microsoft Windows is prone to a privilege escalation weakness. This issue is due to a design error when desktop applications handle keyboard events sent through the keybdevent function. The specific issue is that programs may send keyboard...

CVE-2005-2080

Unknown vulnerability in Remote Agent for Windows Servers RAWS in VERITAS Backup Exec 9.0 through 10.0 for Windows, and 9.0.4019 through 9.1.307 for NetWare, allows remote attackers to gain privileges by copying the handle for the server...

CVE-2004-1174

direntry.c in Midnight Commander mc 4.5.55 and earlier allows attackers to cause a denial of service by "manipulating non-existing file handles."...

mod_python -- information leakage vulnerability

Mark J Cox reports: Graham Dumpleton discovered a flaw which can affect anyone using the publisher handle of the Apache Software Foundation modpython. The publisher handle lets you publish objects inside modules to make them callable via URL. The flaw allows a carefully crafted URL to obtain extr...

DEBIAN-CVE-2004-2387

Buffer overflow in the HandleCPCCommand function of sercd before 2.3.1 and sredird 2.2.1 and earlier allows remote attackers to execute arbitrary code...

CVE-2002-0867

CVE-2002-0867 affects Microsoft Virtual Machine up to build 5.0.3805, enabling remote attackers to crash Internet Explorer via invalid handle data in a Java applet (Handle Validation Flaw). OpenVAS and CVE records corroborate this as part of MS02-052/related issues, with proposed remediation: app...

Multiple ISA server bugs

ISA SP2 closes few security holes: buffer overflow during redirect from denied resource, basic credentials may be sent over an External HTTP connection when SSL is required for published server, FTP bounce attack, handles leak in message screener, etc...

Microsoft Windows - ListBox/ComboBox Control Local (MS03-045)

/ \ local ListBox/ComboBox exploit for Win32 / \ Created by xCrZx crazyeinstein yahoo com /11.11.03/ / \ Usage: MS03-045.exe -r return address / \ there is two targets: CBDIR for ComboBox, LBDIR for ListBox. / \ As to return address it should be such as 0x0000XXYY / and you should know that this...

DEBIAN-CVE-2003-0130

The handleimage function in mail-format.c for Ximian Evolution Mail User Agent 1.2.2 and earlier does not properly escape HTML characters, which allows remote attackers to inject arbitrary data and HTML via a MIME Content-ID header in a MIME-encoded image...

CVE-2003-0130

The handleimage function in mail-format.c for Ximian Evolution Mail User Agent 1.2.2 and earlier does not properly escape HTML characters, which allows remote attackers to inject arbitrary data and HTML via a MIME Content-ID header in a MIME-encoded image...

DEBIAN-CVE-2002-1170

The handlevarrequests function in snmpagent.c for the SNMP daemon in the Net-SNMP formerly ucd-snmp package 5.0.1 through 5.0.5 allows remote attackers to cause a denial of service crash via a NULL dereference...

CVE-2002-0867

Microsoft Virtual Machine VM up to and including build 5.0.3805 allows remote attackers to cause a denial of service crash in Internet Explorer via invalid handle data in a Java applet, aka "Handle Validation Flaw."...

CVE-1999-1360

Windows NT 4.0 is affected by CVE-1999-1360. A local user can cause a denial of service by a user-mode application closing a handle that was opened in kernel mode, leading to a kernel crash when the kernel closes the handle. The NVD data shows a low base score (2.1) with local attack vector and p...

CVE-2001-0346

Handle leak in Microsoft Windows 2000 telnet service allows attackers to cause a denial of service by starting a large number of sessions and terminating them...

Microsoft Windows 2000 Telnet Service contains handle leak

Overview The Microsoft Windows 2000 Telnet Service contains a denial-of-service vulnerability that allows remote attackers to disrupt the telnet service on affected servers. Description The Microsoft Windows 2000 Telnet Service contains a resource starvation vulnerability that prevents the server...