2920 matches found
CVE-2006-4733
PHP remote file inclusion vulnerability in sipssys/code/box.inc.php in Haakon Nilsen simple, integrated publishing system SIPS 0.3.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the configsipssys parameter. NOTE: the product's documentation recommends placing the...
Multiple Sony Vaio Media Integrated Server security vulnerabilities
Buffer overflow, durectory traversal...
CA Integrated Threat Management, eTrust Antivirus, eTrust PestPatrol format string vulnerability
Format string bug in job description field...
[Full-disclosure] Layered Defense Advisory: Format String Vuln in CA eTrust
=============================================================== Layered Defense Advisory 27 June 2006 =============================================================== 1 Affected Software Computer Associates: eTrust Antivirus 8.0 Computer Associates: eTrust PestPatrol 8.0 Computer Associates:...
CVE-2006-3223
The CVE-2006-3223 issue affects CA ITM, eTrust Antivirus (eAV), and eTrust PestPatrol (ePP) version 8.0. It is a format string vulnerability in the scan job description field that can crash the process and potentially execute arbitrary code. The vulnerability arises from improper handling of form...
CVE-2006-3223
Format string vulnerability in CA Integrated Threat Management ITM, eTrust Antivirus eAV, and eTrust PestPatrol ePP r8 allows attackers to cause a denial of service crash and possibly execute arbitrary code via a scan job with format strings in the description field...
HP Integrated Lights-Out (iLO) Detection (HTTP)
HTTP based detection of HP Integrated Lights-Out iLO devices. SPDX-FileCopyrightText: 2006 David Maciejak Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Plexcor's(r) CMS XSS vuln.
Plexcor's® CMS XSS vuln. Vuln. discovered by : r0t Date: 21 dec. 2005 orginal advisory:http://pridels.blogspot.com/2005/12/plexcors-cms-xss-vuln.html vendor:http://www.plexcor.com/ affected version: 4.0 and prior Product Description: Integrated modular content, communications, calendar, commerce,...
HP Integrated Lights-Out (iLO) Detection
The remote host is an HP Integrated Lights-Out iLO server. These servers are embedded systems integrated into HP ProLiant servers for the purpose of out-of-band management. TRUSTED...
Vulnerability in Microsoft ISA Server 2000 H.323 Filter (816458)
A security vulnerability exists in the H.323 filter for Microsoft Internet Security and Acceleration Server 2000 that could allow an attacker to overflow a buffer in the Microsoft Firewall Service in Microsoft Internet Security and Acceleration Server 2000. SPDX-FileCopyrightText: 2004 Jeff Adams...
CVE-2005-3068
Unspecified vulnerability in Eric Integrated Development Environment eric3 before 3.7.2 has unknown impact and attack vectors related to a "potential security exploit."...
CVE-2005-3068
Summary : CVE-2005-3068 affects the Eric IDE (eric3). Debian security advisory DSA-869-1 states the vulnerability is caused by missing input sanitising in eric, which could lead to arbitrary code execution. Affected releases: eric before 3.7.2; the fix is in eric 3.7.2-1 (and 3.6.2-2 for the rele...
CVE-2005-2552
Unknown vulnerability in HP ProLiant DL585 servers running Integrated Lights Out ILO firmware before 1.81 allows attackers to access server controls when the server is "powered down."...
CVE-2005-2552
CVE-2005-2552 concerns HP ProLiant DL585 servers with Integrated Lights Out (ILO) firmware prior to 1.81. The issue is described as an unknown vulnerability that allows an attacker to access server controls when the server is powered down. Public details indicate a CVSS v2 base score of 7.5 (HIGH...
CVE-2002-1946
The CVE-2002-1946 entry applies to Videsh Sanchar Nigam Limited (VSNL) Integrated Dialer Software version 1.2.000. The issue is that when the Save Password option is used, the password is stored in the registry using a weak, one-to-one encryption scheme, allowing local users to obtain and decrypt...
CVE-2002-1946
Videsh Sanchar Nigam Limited VSNL Integrated Dialer Software 1.2.000, when the "Save Password" option is used, stores the password with a weak encryption scheme one-to-one mapping in a registry key, which allows local users to obtain and decrypt the password...
CVE-2005-1605
Cross-site scripting XSS vulnerability in the guestbook for SiteStudio 1.6 allows remote attackers to inject arbitrary web script or HTML via the name field to 1 psoft.guestbook.GuestBookServ in Standalone Site Studio or 2 E-Guestsign.pl in Integrated Site Studio with H-Sphere...
FreeBSD-SA-05:06.iir
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ============================================================================= FreeBSD-SA-05:06.iir Security Advisory The FreeBSD Project Topic: Incorrect permissions on /dev/iir Category: core Module: sysdev Announced: 2005-05-06 Credits: Christian...
