299 matches found
MGASA-2014-0380 Updated zarafa packages fix multiple vulnerabilities
Updated zarafa packages fix security vulnerabilities: Robert Scheck reported that Zarafa's WebAccess stored session information, including login credentials, on-disk in PHP session files. This session file would contain a user's username and password to the Zarafa IMAP server CVE-2014-0103. Rober...
kora Reinstall Admin Information Vulnerability
No description provided by source...
CVE-2013-6392
The genlockdevioctl function in genlock.c in the Genlock driver for the Linux kernel 3.x, as used in Qualcomm Innovation Center QuIC Android contributions for MSM devices and other products, does not properly initialize a certain data structure, which allows local users to obtain sensitive...
CVE-2013-3430
Cisco Video Surveillance Manager VSM before 7.0.0 allows remote attackers to obtain sensitive configuration, archive, and log information via unspecified vectors, related to the CiscoVSBWT aka Broadware sample code package, aka Bug ID CSCsv37288...
Winny node information processing vulnerability
Overview Winny contains a vulnerability in the processing of node information. Winny is a P2P file sharing software. Winny contains a vulnerability in the processing of node information, which can be used to launch Distributed Denial of Service DDoS attacks. Fuyumasa Takatsu of University of...
Null pointer dereference
Adobe ColdFusion 8.0.1 and earlier might allow attackers to obtain sensitive information via unspecified vectors, related to a "double-encoded null character vulnerability."...
CVE-2007-3650
myWebland myBloggie 2.1.6 allow remote attackers to obtain sensitive information via 1 an invalid year parameter to calendar.php, reached through index.php; 2 a direct request to common.php; and 3 a mode array parameter in the query string to login.php, which reveal the installation path in vario...
PHP 5.2.1 - substr_compare() Information Leak
PHP 5.2.1 - substrcompare Information Leak ?php //////////////////////////////////////////////////////////////////////// // // // | || | | | | | | | || || \ // // | |/ || '|/ |/ -| ' \ / -/ |||| /| || / // // ||||,||| ,|||||||,| || |||||| // // // // Proof of concept code from the...
fetchmail -- fetchmailconf local password exposure
The fetchmail team reports: The fetchmailconf program before and excluding version 1.49 opened the run control file, wrote the configuration to it, and only then changed the mode to 0600 rw-------. Writing the file, which usually contains passwords, before making it unreadable to other users, can...
ss11012005.txt
/ / / \ / / / / / \ \ \ \ / / / / / \ / / // / / / / / / / / / // // / / / // / / / / // , / // / /// // //// // ,/ // / // \ / / / // / / // / /// , / // Ref: SS11012005 SYSTEMSECURE.ORG - Advisory/Exploit PUBLIC ADVISORY Software: MPM Guestbook Pro 1.05 maybe all versions Link:...
CVE-2004-0355
Invision Power Board 1.3 Final allows remote attackers to gain sensitive information by selecting a file for "Personal Photo" that is not an image file, which displays the installation path in an error message...
Centrinity FirstClass HTTP Server 7.1 - Directory Disclosure
Centrinity FirstClass HTTP Server 7.1 - Directory Disclosure source: https://www.securityfocus.com/bid/8920/info It has been reported that Centrinity FirstClass HTTP server may be prone to an information disclosure vulnerability that may allow a remote attacker to disclose listings for server roo...
FileMaker Pro Client Request User Passwords Remote Disclosure
The remote host is running a FileMakerPro server. There is a flaw in the design of the FileMakerPro server which makes the database authentication occur on the client side. A remote attacker could exploit this flaw to gain access to databases by connecting to this port with a rogue client. C...
MondoSearch MsmMask.exe Arbitrary Script Source Disclosure
The msmmask.exe CGI is installed. Some versions allow an attacker to read the source of any file in your web server's directories by using the 'mask' parameter. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. Affected: MondoSearch 4.4.5147 and below. MondoSearch 4.4.5156 and above are NOT...
CyberPatrol - poor credit card protection
CyberPatrol - poor credit card protection SUMMARY Product: Cyber Patrol vunerable versions: 4.04.003 & 4.04.005 possibly all other versions non-vunerable versions: unknown Vendor: Microsys formerly owned by Mattel, now JSB Vendor Contacted: Fri, 18 Aug 2000 11:52:20 -0500 CDT Fixes: None availabl...