CVE-2009-1239

CVE-2009-1239 concerns IBM DB2 9.1 prior to Fix Pack 7. The issue arises from the order in which an INNER JOIN predicate and an OUTER JOIN predicate are applied, which could cause a crafted query to disclose sensitive information. Affected product/version: IBM DB2 9.1 before FP7. The primary root...

CVE-2009-1239: Exposure of Sensitive Information to an Unauthorized Actor

IBM DB2 9.1 before FP7 returns incorrect query results in certain situations related to the order of application of an INNER JOIN predicate and an OUTER JOIN predicate, which might allow attackers to obtain sensitive information via a crafted query...

kernel: local denial of service in keyctl_join_session_keyring

Memory leak in the keyctljoinsessionkeyring function security/keys/keyctl.c in Linux kernel 2.6.29-rc2 and earlier allows local users to cause a denial of service kernel memory consumption via unknown vectors related to a "missing kfree."...

kernel: local denial of service in keyctl_join_session_keyring

Memory leak in the keyctljoinsessionkeyring function security/keys/keyctl.c in Linux kernel 2.6.29-rc2 and earlier allows local users to cause a denial of service kernel memory consumption via unknown vectors related to a "missing kfree."...

samba security and bug fix update

3.0.28-1.el52.1 - Security fix for CVE-2008-1105 - Fix join verification - Fix smb signing - resolves: CVE-2008-1105 - resolves: 447380 - resolves: 444637...

Code injection

Cisco Unified Communications Manager CUCM 5.x before 5.12 and 6.x before 6.11 allows remote attackers to cause a denial of service service interruption via a SIP JOIN message with a malformed header, aka Bug ID CSCsi48115...

CVE-2008-1745

Cisco Unified Communications Manager (CUCM) is affected by CVE-2008-1745. A DoS can be triggered by receiving a malformed SIP JOIN header, impacting CUCM 5.x before 5.1(2) and 6.x before 6.1(1). The SIP processing path is a known vulnerability area; related advisories indicate this is a denial of...

CVE-2008-1745: Improper Input Validation

Cisco Unified Communications Manager CUCM 5.x before 5.12 and 6.x before 6.11 allows remote attackers to cause a denial of service service interruption via a SIP JOIN message with a malformed header, aka Bug ID CSCsi48115...

Unfixed XSS vulnerability at www.velocityclicks.com

Security researcher PaPPy, has submitted on 29/04/2008 a cross-site-scripting XSS vulnerability affecting www.velocityclicks.com, which at the time of submission ranked 32030 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 29/04/2008. It is...

Cisco IOS多播虚拟专用网MDT Data Join消息处理数据泄露漏洞

BUGTRAQ ID: 28464 CVECAN ID: CVE-2008-1156 Cisco IOS是思科网络设备所使用的互联网操作系统。 Cisco IOS在实现多播虚拟专用网（MVPN）时存在漏洞，允许攻击者发送特制的多播分布树（MDT）Data Join消息导致在核心路由器上创建额外的多播状态。 这个漏洞还允许泄露其他MPLS VPN的多播通讯，可以接收连接到同一供应商边界（PE）路由器的VPN的多播通讯。如果要成功利用这个漏洞，攻击者必须知道或猜测到远程PE路由器的边界网管协议（BGP）同层IP地址，以及其他MPLS VPN所使用的多播组的地址。 Cisco IOS 12.4...

CVE-2008-1156: Exposure of Sensitive Information to an Unauthorized Actor

Unspecified vulnerability in the Multicast Virtual Private Network MVPN implementation in Cisco IOS 12.0, 12.2, 12.3, and 12.4 allows remote attackers to create "extra multicast states on the core routers" via a crafted Multicast Distribution Tree MDT Data Join message...

PYSEC-2008-14

Multiple cross-site request forgery CSRF vulnerabilities in Plone CMS 3.0.5 and 3.0.6 allow remote attackers to 1 add arbitrary accounts via the joinform page and 2 change the privileges of arbitrary groups via the prefsgroupsoverview page...

Command injection

irc-channel.c in ngIRCd before 0.10.3 allows remote attackers to cause a denial of service crash via a JOIN command without a channel argument...

CVE-2007-6062

irc-channel.c in ngIRCd before 0.10.3 allows remote attackers to cause a denial of service crash via a JOIN command without a channel argument...

CVE-2007-6062

irc-channel.c in ngIRCd before 0.10.3 allows remote attackers to cause a denial of service crash via a JOIN command without a channel argument...

CVE-2007-6062

irc-channel.c in ngIRCd before 0.10.3 allows remote attackers to cause a denial of service crash via a JOIN command without a channel argument...

DEBIAN-CVE-2007-6062

irc-channel.c in ngIRCd before 0.10.3 allows remote attackers to cause a denial of service crash via a JOIN command without a channel argument...

CVE-2007-6062

irc-channel.c in ngIRCd before 0.10.3 allows remote attackers to cause a denial of service crash via a JOIN command without a channel argument...

CVE-2007-6062

irc-channel.c in ngIRCd before 0.10.3 allows remote attackers to cause a denial of service crash via a JOIN command without a channel argument...

CVE-2007-6062: Improper Input Validation

irc-channel.c in ngIRCd before 0.10.3 allows remote attackers to cause a denial of service crash via a JOIN command without a channel argument...