9993 matches found
Null pointer dereference
The sockfs module in the kernel in Sun Solaris 10 and OpenSolaris snv41 through snv122, when Network Cache Accelerator NCA logging is enabled, allows remote attackers to cause a denial of service panic via unspecified web-server traffic that triggers a NULL pointer dereference in the nl7chttplog...
CVE-2009-3000
The sockfs module in the kernel in Sun Solaris 10 and OpenSolaris snv41 through snv122, when Network Cache Accelerator NCA logging is enabled, allows remote attackers to cause a denial of service panic via unspecified web-server traffic that triggers a NULL pointer dereference in the nl7chttplog...
Directory traversal
Directory traversal vulnerability in logging/logviewer.jsp in the Management Console in Adobe JRun Application Server 4 Updater 7 allows remote authenticated users to read arbitrary files via a .. dot dot in the logfile parameter...
CVE-2009-1873: Improper Limitation of a Pathname to a Restricted Directory
Directory traversal vulnerability in logging/logviewer.jsp in the Management Console in Adobe JRun Application Server 4 Updater 7 allows remote authenticated users to read arbitrary files via a .. dot dot in the logfile parameter...
*nux how to create a backdoor-a vulnerability warning-the black bar safety net
Painstakingly（or ease of obtaining root after, Of course, want to long-term holding. To be later used to it. d0ing what u want t0 d0 : the traditional method is to build a back doorbackd00r. Even if the invasion is found, the better（advanced）back door still be able to make you again a relaxing...
Cross site scripting
Cross-site scripting XSS vulnerability in function.php in Zenphoto 1.1.7 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors in the "request logging" feature. NOTE: the provenance of this information is unknown; the details are obtained solely from third party...
CVE-2008-6925: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in function.php in Zenphoto 1.1.7 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors in the "request logging" feature. NOTE: the provenance of this information is unknown; the details are obtained solely from third party...
Fedora 9 : phpMyAdmin-3.2.0.1-1.fc9 (2009-7337)
The first security release for phpMyAdmin 3.2.0: - security XSS: Insufficient output sanitizing in bookmarks This version contains a number of small new features and some bug fixes: - core better support for vendor customisation based on what Debian needs - rfe warn when session.gcmaxlifetime is...
CVE-2009-2156
Multiple cross-site scripting XSS vulnerabilities in TorrentTrader Classic 1.09 allow remote authenticated users to inject arbitrary web script or HTML via 1 the Title field to requests.php, related to viewrequests.php; and 2 the Torrent Name field to torrents-upload.php, related to the logging o...
[SECURITY] Fedora 10 Update: prelude-manager-0.9.14.2-2.fc10
Prelude Manager is the main program of the Prelude Hybrid IDS suite. It is a multithreaded server which handles connections from the Prelude sensors. It is able to register local or remote sensors, let the operator configure them remotely, receive alerts, and store alerts in a database or any...
[SECURITY] Fedora 9 Update: prelude-manager-0.9.14.2-2.fc9
Prelude Manager is the main program of the Prelude Hybrid IDS suite. It is a multithreaded server which handles connections from the Prelude sensors. It is able to register local or remote sensors, let the operator configure them remotely, receive alerts, and store alerts in a database or any...
CVE-2009-1485
The logging feature in eMule Plus before 1.2e allows remote attackers to cause a denial of service infinite loop via unspecified attack vectors...
Security feature bypass
The logging feature in eMule Plus before 1.2e allows remote attackers to cause a denial of service infinite loop via unspecified attack vectors...
CVE-2009-1485
CVE-2009-1485 affects eMule Plus before version 1.2e. The vulnerability is related to the application's logging feature, which can be abused by remote attackers to trigger a denial-of-service condition (infinite loop) via unspecified attack vectors. The available sources confirm the issue and its...
CVE-2009-1485
The logging feature in eMule Plus before 1.2e allows remote attackers to cause a denial of service infinite loop via unspecified attack vectors...
CVE-2009-1485: Undefined Security Weakness
The logging feature in eMule Plus before 1.2e allows remote attackers to cause a denial of service infinite loop via unspecified attack vectors...
Mandriva Linux Security Advisory : tomcat5 (MDVSA-2008:188)
A number of vulnerabilities have been discovered in the Apache Tomcat server : The default catalina.policy in the JULI logging component did not restrict certain permissions for web applications which could allow a remote attacker to modify logging configuration options and overwrite arbitrary...
CVE-2008-1107
Multiple stack-based buffer overflows in the Danske Bank e-Sec Control Module ActiveX control DanskeSikker.ocx 3.1.0.48, and possibly earlier versions, allow remote attackers to execute arbitrary code via long arguments to unspecified methods, which are not properly handled by a logging function...
Stack overflow
Multiple stack-based buffer overflows in the Danske Bank e-Sec Control Module ActiveX control DanskeSikker.ocx 3.1.0.48, and possibly earlier versions, allow remote attackers to execute arbitrary code via long arguments to unspecified methods, which are not properly handled by a logging function...
