Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Oliver Library Management System allow remote attackers to inject arbitrary web script or HTML via the 1 updateform and 2 displayform parameter to a gateway/gateway.exe; the 3 TERMS, 4 database, 5 srchad, 6 SuggestedSearch, and 7 searchform...

CVE-2007-3569

Multiple cross-site scripting XSS vulnerabilities in Oliver Library Management System allow remote attackers to inject arbitrary web script or HTML via the 1 updateform and 2 displayform parameter to a gateway/gateway.exe; the 3 TERMS, 4 database, 5 srchad, 6 SuggestedSearch, and 7 searchform...

CVE-2007-3569

Multiple cross-site scripting XSS vulnerabilities in Oliver Library Management System allow remote attackers to inject arbitrary web script or HTML via the 1 updateform and 2 displayform parameter to a gateway/gateway.exe; the 3 TERMS, 4 database, 5 srchad, 6 SuggestedSearch, and 7 searchform...

Debian DSA-1314-1 : open-iscsi - several vulnerabilities

Several local and remote vulnerabilities have been discovered in open-iscsi, a transport-independent iSCSI implementation. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2007-3099 Olaf Kirch discovered that due to a programming error access to the...

[SECURITY] [DSA 1314-1] New open-iscsi packages fix several vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- Debian Security Advisory DSA 1314-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff June 19th, 2007 http://www.debian.org/security/faq -...

DSA-1314-1 open-iscsi

Bulletin has no description...

Mbedthis AppWeb 2.2.2 - URL Protocol Format String

Mbedthis AppWeb 2.2.2 - URL Protocol Format String source: https://www.securityfocus.com/bid/24454/info Mbedthis AppWeb is prone to a format-string vulnerability because the application fails to properly sanitize user-supplied input before passing it as the format specifier to a formatted-printin...

Mbedthis AppWeb 2.2.2 - URL Protocol Format String

source: https://www.securityfocus.com/bid/24454/info Mbedthis AppWeb is prone to a format-string vulnerability because the application fails to properly sanitize user-supplied input before passing it as the format specifier to a formatted-printing function. This issue affects only applications th...

Sun Solaris管理控制台认证和日志机制远程权限提升漏洞

Solaris是一款由Sun开发和维护的商业性质UNIX操作系统。 Solaris管理控制台（SMC）的日志机制和认证机制中存在安全漏洞，可能允许本地或远程非特权用户获得对Solaris系统的非授权root用户访问。 Sun Solaris 9.0x86 Sun Solaris 9.0 Sun Solaris 8.0x86 Sun Solaris 8.0 Sun Solaris 10x86 Sun Solaris 10.0 临时解决方法： 以root用户权限执行以下命令停止SMC服务器。 Solaris 8和9： /etc/init.d/init.wbem stop Solaris 10...

CVE-2007-3093

Unspecified vulnerability in the logging mechanism in Solaris Management Console SMC on Sun Solaris 8 through 10 before 20070605 allows remote attackers to execute arbitrary code via unspecified vectors, related to the WBEM server...

CVE-2007-3093

Unspecified vulnerability in the logging mechanism in Solaris Management Console SMC on Sun Solaris 8 through 10 before 20070605 allows remote attackers to execute arbitrary code via unspecified vectors, related to the WBEM server...

CVE-2007-1940

IBM Tivoli Business Service Manager TBSM 4.1 before Interim Fix 1 logs passwords in plaintext, which allows local users to obtain sensitive information by reading 1 ncisetup.db or 2 msi.log...

CVE-2007-1940

IBM Tivoli Business Service Manager TBSM 4.1 before Interim Fix 1 logs passwords in plaintext, which allows local users to obtain sensitive information by reading 1 ncisetup.db or 2 msi.log...

CVE-2007-1940

IBM Tivoli Business Service Manager (TBSM) 4.1 before Interim Fix 1 logs passwords in plaintext, enabling local users to read sensitive data from ncisetup.db or msi.log. Root cause: plaintext password storage during setup/logging. Affected component: TBSM 4.1 prior to Interim Fix 1. Impact: poten...

Debian DSA-1276-1 : krb5 - several vulnerabilities

Several remote vulnerabilities have been discovered in the MIT reference implementation of the Kerberos network authentication protocol suite, which may lead to the execution of arbitrary code. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2007-0956 It...

Linux backdoors and logging tools-vulnerability warning-the black bar safety net

After you finish editing, save the file in the/var/log will generate the tcplog file, note this file read-write properties, it should be only root has read and write permissions. Then ps-ef | grep syslogd, find the syslogd process ID, kill-HUP to restart syslogd process so that the changes take...

ulogd: Remote execution of arbitrary code

Background ulogd is a userspace daemon for netfilter related logging. Description SUSE reported unspecified buffer overflows in ulogd involving the calculation of string lengths. Impact A remote attacker could trigger a possible buffer overflow through unspecified vectors, potentially leading to...

New version fixes three different crash vulnerabilities

backend/tcop/postgres.c in PostgreSQL 8.1.x before 8.1.5 allows remote authenticated users to cause a denial of service daemon crash related to duration logging of V3-protocol Execute messages for 1 COMMIT and 2 ROLLBACK SQL statements...

Broiler erection of space to upload what the web server is not found-bug warning-the black bar safety net

I'm here to introduce two ultra-compactweb server. 1: a Small HTTP Server v3. 0 3 9 Operating environment: Win95/Win98/Win2000 Size: 93K, little was amazing!!!） Content Description: a compact WEB server, the footprint is very small, support CGI1. 1, SSI, AND PHP. 下载 地址...

CVE-2007-1225

The connection log file implementation in Grok Developments NetProxy 4.03 does not record requests that omit http:// in a URL, which might allow remote attackers to conduct unauthorized activities and avoid detection...