1810 matches found
[Full-disclosure] [DRUPAL-SA-2006-011] Drupal 4.7.3 / 4.6.9 fixes XSS issue
---------------------------------------------------------------------------- Drupal security advisory DRUPAL-SA-2006-011 ---------------------------------------------------------------------------- Advisory ID: DRUPAL-SA-2006-011 Project: Drupal core Date: 2006-Aug-02 Security risk: less critical...
[SA21161] Novell Client Firewall Privilege Escalation Vulnerability
---------------------------------------------------------------------- Hardcore Disassembler / Reverse Engineer Wanted! Want to work with IDA and BinDiff? Want to write PoC's and Exploits? Your nationality is not important. We will get you a work permit, find an apartment, and offer a relocation...
jax.txt
Jax Guestbook Cross Site Scripting Vulnerability Risk: Less Critical Class: Remote Version: 3.50 ----------------------------------------------------------------- Example: http://target/path/guestbook.admin.php?action=list&guestbookid=0&language=german&gmtofs=0&page=code...
dir.txt
Directory Listing Script Cross Site Scripting Risk: Less critical Class: Remote Script: Directory Listing Script Version: not define ---------------------------------------------------------------------------- Example: http://target/path/index.php?dir=code...
Sql injection
SQL injection vulnerability in slides.php in Eric Gerdes Crafty Syntax Image Gallery CSIG aka PHP thumbnail Photo Gallery 3.1g and earlier allows remote authenticated users to execute arbitrary SQL commands via the limitquerys parameter when the $projectid variable is less than 1, which prevents...
CVE-2006-1248
Unspecified vulnerability in usermod in HP-UX B.11.00, B.11.11, and B.11.23, when run with certain options that involve a new home directory, might cause usermod to change the ownership of all directories and files under the new directory, which might result in less secure permissions than intend...
CVE-2006-1248
Unspecified vulnerability in usermod in HP-UX B.11.00, B.11.11, and B.11.23, when run with certain options that involve a new home directory, might cause usermod to change the ownership of all directories and files under the new directory, which might result in less secure permissions than intend...
[SA18751] DataparkSearch Unspecified Cross-Site Scripting Vulnerability
TITLE: DataparkSearch Unspecified Cross-Site Scripting Vulnerability SECUNIA ADVISORY ID: SA18751 VERIFY ADVISORY: http://secunia.com/advisories/18751/ CRITICAL: Less critical IMPACT: Cross Site Scripting WHERE: From remote SOFTWARE: DataparkSearch 4.x http://secunia.com/product/7889/ DESCRIPTION...
[DRUPAL-SA-2005-008] Drupal 4.6.4 / 4.5.6 fixes XSS and HTTP header injection issue
---------------------------------------------------------------------------- Drupal security advisory DRUPAL-SA-2005-008 ---------------------------------------------------------------------------- Advisory ID: DRUPAL-SA-2005-008 Project: Drupal core Date: 2005-11-30 Security risk: less critical...
CVE-2005-3177
CHKDSK in Microsoft Windows 2000 before Update Rollup 1 for SP4, Windows XP, and Windows Server 2003, when running in fix mode, does not properly handle security descriptors if the master file table contains a large number of files or if the descriptors do not satisfy certain NTFS conventions,...
CVE-2005-3168
The SECEDIT command on Microsoft Windows 2000 before Update Rollup 1 for SP4, when using a security template to set Access Control Lists ACLs on folders, does not apply ACLs on folders that are listed after a long folder entry, which could result in less secure permissions than specified by the...
CVE-2005-2510
CVE-2005-2510 affects Mac OS X 10.4–10.4.2: The Server Admin tool (servermgr_ipfilter) may fail to correctly write firewall rules to Active Rules when using multiple subnets and Address Groups, potentially resulting in policies that are less restrictive than intended. Impact is limited to local a...
CVE-2004-2264
GNU less versions 358–382 contain a format-string bug in the open_altfile function (filename.c) that may allow local users to cause a denial of service or possibly execute arbitrary code via the LESSOPEN environment variable. The PT-2004-3159 advisory notes this is not a vulnerability unless priv...
CVE-2004-2264
Format string bug in the openaltfile function in filename.c for GNU less 382, 381, and 358 might allow local users to cause a denial of service or possibly execute arbitrary code via format strings in the LESSOPEN environment variable. NOTE: since less is not setuid or setgid, then this is not a...
CVE-2004-2264
Format string bug in the openaltfile function in filename.c for GNU less 382, 381, and 358 might allow local users to cause a denial of service or possibly execute arbitrary code via format strings in the LESSOPEN environment variable. NOTE: since less is not setuid or setgid, then this is not a...
several vulnerabilities present in Belkin wireless routers
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Advisory name: several vulnerabilities present in Belkin wireless routers Overall severity rating: HIGH risk Devices affected: "belkin54g" family of wireless routers 4 main vulnerabilities are included in this advisory: - - default telnet backdoor - -...
Debian DSA-721-1 : squid - design flaw
Michael Bhola discovered a bug in Squid, the popular WWW proxy cache. Squid does not trigger a fatal error when it identifies missing or invalid ACLs in the httpaccess configuration, which could lead to less restrictive ACLs than intended by the administrator. %NASLMINLEVEL 70300 C Tenable Networ...
DEBIAN-CVE-2005-1345
Squid 2.5.STABLE9 and earlier does not trigger a fatal error when it identifies missing or invalid ACLs in the httpaccess configuration, which could lead to less restrictive ACLs than intended by the administrator...