6651 matches found
Concrete CMS 5.5.21 - Multiple Vulnerabilities
Concrete CMS 5.5.21 - Multiple Vulnerabilities source: https://www.securityfocus.com/bid/53640/info Concrete CMS is prone to following vulnerabilities because it fails to properly handle user-supplied input. 1. Multiple cross-site scripting vulnerabilities 2. An arbitrary-file-upload vulnerabilit...
CVE-2011-3364
Incomplete blacklist vulnerability in the svEscape function in settings/plugins/ifcfg-rh/shvar.c in the ifcfg-rh plug-in for GNOME NetworkManager 0.9.1, 0.9.0, 0.8.1, and possibly other versions, when PolicyKit is configured to allow users to create new connections, allows local users to execute...
WordPress Plugin Eventify - Simple Events 1.7.f SQL Injection
WordPress Plugin Eventify - Simple Events 1.7.f SQL Injection Exploit Title: WordPress Eventify - Simple Events plugin getresults$qry;...
WordPress Plugin MM Forms Community 1.2.3 - SQL Injection
WordPress Plugin MM Forms Community 1.2.3 - SQL Injection Exploit Title: WordPress MM Forms Community plugin 1,BENCHMARK5000000,MD5CHAR115,113,108,109,97,112,0--%20 --------------- Vulnerable code --------------- foreach $REQUEST as $key = $value $SQL="UPDATE wpcontactformsubmitdata SET...
Alice Modem 1111 - rulename Cross-Site Scripting Denial of Service
Alice Modem 1111 - rulename Cross-Site Scripting Denial of Service source: https://www.securityfocus.com/bid/48642/info The Alice Modem is prone to a cross-site scripting vulnerability and a denial-of-service vulnerability because the device fails to properly handle user-supplied input. An attack...
Android Update Adds Protections For Mobile Clickjacking
Google released the latest version of its Android mobile operating system on Monday, adding security features that it says will make it tougher for mobile device users to be subjected to “clickjacking” attacks that trick them into clicking on hidden or disguised user interface elements. The compa...
Mort Bay Jetty 6.0.0 - 7.0.0 Multiple Vulnerabilities - Active Check
Mort Bay Jetty is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:eclipse:jetty"; ifdescriptio...
SuSE 10 Security Update : Samba (ZYPP Patch Number 6518)
samba's makeconnectionsnum handles certain input incorrectly, which may lead to disclosure of the root directory. CVE-2009-2813 has been assigned to this issue. Additionally an information disclosure vulnerability in mount.cifs has been fixed CVE-2009-2948 as well as a DoS condition. CVE-2009-290...
Irokez CMS 0.7.1 Remote SQL Injection Vulnerability
No description provided by source. +--------------------------------------------------------------------------------------------------------------------+ +--------------------------------------------Irokez 0.7.1 SQL inlection--------------------------------------------+...
KDE Konqueror 4.1.3 link href Memory Leak Exploit
!/usr/bin/perl konqlhrefml.pl KDE Konqueror 4.1.3 'link href' Memory Leak Exploit Jeremy Brown [email protected]/jbrownsec.blogspot.com Software should be able to handle any kind of input and still perform correct operations. Webkit KHTML -- stability-wise, anyways $filename = $ARGV0;...
CVE-2008-5239
xine-lib 1.1.12, and other 1.1.15 and earlier versions, does not properly handle a negative and b zero values during unspecified read function calls in inputfile.c, inputnet.c, inputsmb.c, and inputhttp.c, which allows remote attackers to cause a denial of service crash or possibly execute...
DEBIAN-CVE-2008-4641
The DoCommand function in jhead.c in Matthias Wandel jhead 2.84 and earlier allows attackers to execute arbitrary commands via shell metacharacters in unspecified input...
CVE-2008-3910
dns2tcp before 0.4.1 does not properly handle negative values in a certain length field in the input argument to the 1 dnssimpledecode or 2 dnsdecode function, which allows remote attackers to overwrite a buffer and have unspecified other impact...
[Advisory] Invision Power Board <= 2.3.5 Multiple Vulnerabilities and Security Bypass
Title: Invision Power Board = 2.3.5 Multiple Vulnerabilities and Security Bypass Vendor: http://www.invisionpower.com/community/board/ Advisory: http://acid-root.new.fr/?0:18 Author: DarkFig gmdarkfig at gmail dot com Released on: 2008/08/29 Changelog: 2008/08/29 Summary: Introduction Blind SQL...
SWAT 4 - Multiple Denial of Service Vulnerabilities
SWAT 4 - Multiple Denial of Service Vulnerabilities // source: https://www.securityfocus.com/bid/30299/info SWAT 4 is prone to multiple remote denial-of-service vulnerabilities because the application fails to properly handle certain input. An attacker may exploit these issues to crash the affect...
Jupiter Cms Multiple Vulnerabilities
WwW.BugReport.ir AmnPardaz Security Research & Penetration Testing Group Title: Jupiter Cms Multiple Vulnerabilities Vendor: http://www.jupiterportal.com Bugs: Local File Inclusion, Privileges Escalation Vulnerable Version: 1.1.5ex prior versions also may be affected Exploitation: Remote with...
qemu -- Translation Block Local Denial of Service Vulnerability
SecurityFocus reports: QEMU is prone to a local denial-of-service vulnerability because it fails to perform adequate boundary checks when handling user-supplied input. Attackers can exploit this issue to cause denial-of-service conditions. Given the nature of the issue, attackers may also be able...
CVE-2007-5416
Drupal 5.2 and earlier does not properly unset variables when the input data includes a numeric parameter with a value matching an alphanumeric parameter's hash value, which allows remote attackers to execute arbitrary PHP code by invoking the drupaleval function through a callback parameter to t...
OWASP Stinger - Filter Bypass
source: https://www.securityfocus.com/bid/25294/info OWASP Stinger is prone to a filter-bypass weakness because the application fails to properly handle certain input. Since the OWASP Stinger project is a software module designed to be incorporated into other applications, this weakness may be...
