CVE-2026-16987

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a local attacker to gain elevated privileges due to improper validation of the LANG environment variable...

Security Bulletin: IBM i is Affected By An Improper Validation Vulnerability in PASE [CVE-2026-16987]

Summary IBM i is vulnerable to elevated privileges due to improper validation CVE-2026-16987 in Portable Application Solutions Environment PASE as described in the vulnerability details section. Vulnerability Details CVEID:CVE-2026-16987 DESCRIPTION: IBM i could allow a local attacker to gain...

EUVD-2004-0074

Malware in sbrugna...

EUVD-2001-0423

Malware in sbrugna...

EUVD-2002-1982

Malware in sbrugna...

EUVD-2003-0085

Malware in sbrugna...

CVE-2011-4337: Improper Control of Generation of Code

Static code injection vulnerability in translate.php in Support Incident Tracker aka SiT! 3.45 through 3.65 allows remote attackers to inject arbitrary PHP code into an executable language file in the i18n directory via the lang variable...

Directory traversal

Directory traversal vulnerability in the NMS server in Alcatel-Lucent OmniVista 4760 R5.1.06.03 and earlier allows remote attackers to read arbitrary files via directory traversal sequences in HTTP GET requests, related to the lang variable...

CVE-2011-0345: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in the NMS server in Alcatel-Lucent OmniVista 4760 R5.1.06.03 and earlier allows remote attackers to read arbitrary files via directory traversal sequences in HTTP GET requests, related to the lang variable...

phpress 0.2.0 (adisplay.php lang) Local File Inclusion Vulnerability

No description provided by source. :::::::::::::::::::::::::::::::::::::::::::::::::::....................... ::| \ | | \ | | / | ::| | | | | | | | ::| . | |/ / \ | . |/ | ' \ / \ | | | '/ \ \ /\ / / ::| |\ | | | / | |\ | | | | | | | | / | || | | /\ V V / ::|| ||\| || |,|| || ||| || | //...

Sql injection

Multiple SQL injection vulnerabilities in Cisco CallManager and Unified Communications Manager CUCM before 3.35sr2b, 4.1 before 4.13sr5, 4.2 before 4.23sr2, and 4.3 before 4.31sr1 allow remote attackers to execute arbitrary SQL commands via the lang variable to the 1 user or 2 admin logon page, a...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Cisco CallManager and Unified Communications Manager CUCM before 3.35sr2b, 4.1 before 4.13sr5, 4.2 before 4.23sr2, and 4.3 before 4.31sr1 allow remote attackers to inject arbitrary web script or HTML via the lang variable to the 1 user or 2 adm...

CVE-2007-4634: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in Cisco CallManager and Unified Communications Manager CUCM before 3.35sr2b, 4.1 before 4.13sr5, 4.2 before 4.23sr2, and 4.3 before 4.31sr1 allow remote attackers to execute arbitrary SQL commands via the lang variable to the 1 user or 2 admin logon page, a...

CVE-2007-4633: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Cisco CallManager and Unified Communications Manager CUCM before 3.35sr2b, 4.1 before 4.13sr5, 4.2 before 4.23sr2, and 4.3 before 4.31sr1 allow remote attackers to inject arbitrary web script or HTML via the lang variable to the 1 user or 2 adm...

CVE-2006-6494

CVE-2006-6494 affects Sun Solaris 8, 9, and 10 where ld.so.1 is vulnerable to a directory traversal via a dot-dot sequence in the LANG environment variable that points to a locale file containing attacker-controlled format string specifiers. According to the provided records, this allows a local ...

CVE-2004-2256: Undefined Security Weakness

Directory traversal vulnerability in phpMyFAQ 1.4.0 alpha allows remote attackers to read arbitrary files, and possibly execute local PHP files, via .. sequences in the lang language variable...

CVE-2003-0089

Buffer overflow in the Software Distributor utilities for HP-UX B.11.00 and B.11.11 allows local users to execute arbitrary code via a long LANG environment variable to setuid programs such as 1 swinstall and 2 swmodify...

HP-UX Software Distributor buffer overflow

Buffer overflow on LANG variable parsing...

CVE-2001-0426

CVE-2001-0426 describes a buffer overflow in the dtsession component affecting Solaris (and possibly other OSes) that lets local users gain privileges when a long LANG environment variable is processed. The vulnerability is triggered by excessively long LANG values, leading to privilege escalatio...

SGI IRIX 6.5 Solaris 7.08 CDE - usrdtbindtsession Local Buffer Overflow

SGI IRIX 6.5 Solaris 7.08 CDE - usrdtbindtsession Local Buffer Overflow / source: https://www.securityfocus.com/bid/2603/info The CDE Session Manager 'dtsession' is vulnerable to a buffer overflow that could yield root privileges to an attacker. The bug exists in dtsession's LANG environment...