126 matches found
OpenJDK HttpURLConnection allows arbitrary request headers (6961084,6980004)
Unspecified vulnerability in the Networking component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 25, 1.4.227, and 1.3.128 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the...
OpenJDK HttpURLConnection allows arbitrary request headers (6961084,6980004)
Unspecified vulnerability in the Networking component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 25, 1.4.227, and 1.3.128 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the...
OpenJDK HttpURLConnection request splitting (6952017)
Unspecified vulnerability in the Networking component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 25, 1.4.227, and 1.3.128 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the...
OpenJDK HttpURLConnection allows arbitrary request headers (6961084,6980004)
Unspecified vulnerability in the Networking component in Oracle Java SE and Java for Business 6 Update 21 and 5.0 Update 25 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the October 2010 CPU...
CVE-2009-2966
avp.exe in Kaspersky Internet Security 9.0.0.459 and Anti-Virus 9.0.0.463 allows remote attackers to cause a denial of service CPU consumption and network connectivity loss via an HTTP URL request that contains a large number of dot "." characters...
CVE-2009-2966
CVE-2009-2966 affects Kaspersky Internet Security 9.0.0.459 and Anti-Virus 9.0.0.463. The vulnerability is in avp.exe, exploitable by remote attackers via an HTTP URL request containing a large number of dot characters, causing CPU consumption and loss of network connectivity (DoS). The provided ...
CVE-2009-2966
avp.exe in Kaspersky Internet Security 9.0.0.459 and Anti-Virus 9.0.0.463 allows remote attackers to cause a denial of service CPU consumption and network connectivity loss via an HTTP URL request that contains a large number of dot "." characters...
Unfixed XSS vulnerability at som1.umaryland.edu
Security researcher lljkrieg, has submitted on 24/07/2009 a cross-site-scripting XSS vulnerability affecting som1.umaryland.edu, which at the time of submission ranked 89672 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/12/2011. It is...
Orbit Downloader Connecting log message buffer overflow
Added: 03/04/2009 CVE: CVE-2009-0187 BID: 33894 OSVDB: 52294 Background Orbit Downloader is a download manager supporting various protocols. Problem A buffer overflow vulnerability when constructing "Connecting" log messages allows command execution when a user loads an HTTP URL with a long,...
Orbit Downloader Connecting log message buffer overflow
Added: 03/04/2009 CVE: CVE-2009-0187 BID: 33894 OSVDB: 52294 Background Orbit Downloader is a download manager supporting various protocols. Problem A buffer overflow vulnerability when constructing "Connecting" log messages allows command execution when a user loads an HTTP URL with a long,...
CVE-2009-0187
Stack-based buffer overflow in Orbit Downloader 2.8.2 and 2.8.3, and possibly other versions before 2.8.5, allows remote attackers to execute arbitrary code via a crafted HTTP URL with a long host name, which is not properly handled when constructing a "Connecting" log message...
CVE-2009-0187
Stack-based buffer overflow in Orbit Downloader 2.8.2 and 2.8.3, and possibly other versions before 2.8.5, allows remote attackers to execute arbitrary code via a crafted HTTP URL with a long host name, which is not properly handled when constructing a "Connecting" log message...
Buffer overflow
Buffer overflow in VUPlayer 2.49 and earlier allows user-assisted attackers to execute arbitrary code via a long URL in a File line in a .pls file, as demonstrated by an http URL on a File1 line...
Unfixed Script Insertion vulnerability at yondaimenaruto.frblogs.net
Security researcher 599eme Man, has submitted on 01/07/2009 a Script Insertion vulnerability affecting yondaimenaruto.frblogs.net, which at the time of submission ranked 4161638 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 16/12/2011. It is...
8e6 Technologies R3000 Internet Filter Bypass with Host Decoy
8e6 Technologies R3000 Internet Filter Bypass with Host Decoy Product: 8e6 Technologies R3000 Internet Filter http://www.8e6.com/network-security/internet-filtering/internet-filtering.html The HTTP URL filtering function provided by the 8e6 Technologies R3000 Internet Filter contains a...
CVE-2008-2665
Directory traversal vulnerability in the posixaccess function in PHP 5.2.6 and earlier allows remote attackers to bypass safemode restrictions via a .. dot dot in an http URL, which results in the URL being canonicalized to a local filename after the safemode check has successfully run...
Directory traversal
Multiple directory traversal vulnerabilities in PHP 5.2.6 and earlier allow context-dependent attackers to bypass safemode restrictions by creating a subdirectory named http: and then placing ../ dot dot slash sequences in an http URL argument to the 1 chdir or 2 ftok function...
8e6-bypass.txt
8e6 Technologies R3000 Internet Filter Bypass by Request Split Product: 8e6 Technologies R3000 Internet Filter http://www.8e6.com/network-security/internet-filtering/internet-filtering.html The HTTP URL filtering function provided by the 8e6 Technologies R3000 Internet Filter can be bypassed by...
Code injection
The web console in CA formerly Computer Associates eTrust ITM Threat Manager 8.1 allows remote attackers to redirect users to arbitrary web sites via a crafted HTTP URL on port 6689...