CVE-2002-1276

CVE-2002-1276 concerns SquirrelMail XSS due to an incomplete fix in version 1.2.8 where strip_tags is applied to PHP_SELF but not saved back, leaving room for injection. OpenVAS notes the read_body.php path (SquirrelMail 1.2.9/1.2.10) as vulnerable to multiple parameter XSS. Debian security advis...

Buffalo access point DoS

Incomplete HTTP GET request causes device to reboot...

CVE-2002-0870

The original patch for the Cisco Content Service Switch 11000 Series authentication bypass vulnerability CVE-2001-0622 was incomplete, which still allows remote attackers to gain additional privileges by directly requesting the web management URL instead of navigating through the interface,...

CVE-2002-0794

The acceptfilter mechanism in FreeBSD 4 through 4.5 does not properly remove entries from the incomplete listen queue when adding a syncache, which allows remote attackers to cause a denial of service network service availability via a large number of connection attempts, which fills the queue...

CVE-2002-0460

Bitvise WinSSHD before 2002-03-16 allows remote attackers to cause a denial of service resource exhaustion via a large number of incomplete connections that are not properly terminated, which are not properly freed by SSHd...

Wolfram Research webMathematica 4.0 - File Disclosure

source: https://www.securityfocus.com/bid/5035/info Wolfram Research's webMathematica is a Java based product which allows the inclusion of Mathematica content in a web environment. It includes CGI programs which generate image content based on user supplied input. A file disclosure vulnerability...

CVE-2002-0460

Bitvise WinSSHD before 2002-03-16 allows remote attackers to cause a denial of service resource exhaustion via a large number of incomplete connections that are not properly terminated, which are not properly freed by SSHd...

CVE-2001-0716

Citrix MetaFrame 1.8 Server with Service Pack 3, and XP Server Service Pack 1 and earlier, allows remote attackers to cause a denial of service crash via a large number of incomplete connections to the server...

EUVD-2000-1096

Telnet Service for Windows 2000 Professional does not properly terminate incomplete connection attempts, which allows remote attackers to cause a denial of service by connecting to the server and not providing any input...

CVE-2001-0716

Citrix MetaFrame 1.8 Server with Service Pack 3, and XP Server Service Pack 1 and earlier, allows remote attackers to cause a denial of service crash via a large number of incomplete connections to the server...

Explanation Authentix Input Validation Error

Hi there, Yesterday I posted an advisory concerning a bug in Authentix that would allow users to bypass authentification. When I contacted the vendor about this they were very responsive and after some emails going here and there we agreed to postpone the bugtraq-posting for two weeks and give th...

nmap_cisco_dos.txt

From: "Lancashire, Andrew" This is to clarify what is being put out by Cisco and what we are being told by Cisco. Two e-mails below is what Cisco is telling us and makes alot more sense than what Cisco is telling Bugtraq. The last post to Bugtraq made mention that the arp cache was filling up and...

cisco_and_nmap_dos.txt

Subject: Re: Cisco and Nmap Dos To: [email protected] Hi all, I wanted to address the items listed here. We are still investigating this problem, and hope to have more information later on in the week. Item 1, OSPF is not an issue. According to the configuration information provided to us...

CVE-2023-1601

Removed by vendor...

`{% sandbox %}{% include %}` skips checkSecurity() on cached templates (incomplete fix for CVE-2024-45411)

More info at https://symfony.com/cve-2026-46638...