1088 matches found
USN-327-1: firefox vulnerabilities
Various flaws have been reported that allow an attacker to execute arbitrary code with user privileges by tricking the user into opening a malicious URL. CVE-2006-3113, CVE-2006-3677, CVE-2006-3801, CVE-2006-3803, CVE-2006-3805, CVE-2006-3806, CVE-2006-3807, CVE-2006-3809, CVE-2006-3811,...
GLSA-200607-01 : mpg123: Heap overflow
The remote host is affected by the vulnerability described in GLSA-200607-01 mpg123: Heap overflow In httpdget.c, a variable is assigned to the heap, and is supposed to receive a smaller allocation. As this variable was not terminated properly, strncpy will overwrite the data assigned next in...
CVE-2006-3289: Undefined Security Weakness
Cross-site scripting XSS vulnerability in the login page of the HTTP interface for the Cisco Wireless Control System WCS for Linux and Windows before 3.251 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors involving a "malicious URL"...
gravityBad.txt
4.22 07/08/2005 Gravity Board X v1.1 possibly prior versions Remote code execution, SQL Injection / Login Bypass, cross site scripting, path disclosure poc software: author site: http://www.gravityboardx.com/ a Sql Injection / Login Bypass: A user can bypass login check and grant administrator...
squirrelmail security update
CentOS Errata and Security Advisory CESA-2005:595-02 An updated squirrelmail package that fixes two security issues is now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Updated 04 Aug 2005 The previous SquirrelMail package released...
Mozilla Firefox < 1.7.6 Multiple Vulnerabilities
Binary data 2671.prm...
Mozilla Firefox < 1.0.1 Multiple Vulnerabilities
Binary data 2652.prm...
Windows Media Player does not properly handle PNG images with excessive width or height values
Overview Microsoft Windows Media Player fails to properly handle PNG images containing unexpected information. Remote attackers may be able to craft a malicious PNG image that would cause Media Player to execute arbitrary code. Description Microsoft Windows Media Player WMP is an application that...
DSA-611-1 htget - buffer overflow
Bulletin has no description...
MPlayer, xine-lib: vulnerabilities in RTSP stream handling
Background MPlayer is a movie player capable of handling multiple multimedia file formats. xine-lib is a multimedia player library used by several graphical user interfaces, including xine-ui. They both use the same code to handle Real-Time Streaming Protocol RTSP streams from RealNetworks server...
Apache mod_ssl Host: Header XSS
According to the web server banner, the version of modssl running on the remote host has a cross-site scripting vulnerability. A remote attacker could exploit this by tricking a user into requesting a maliciously crafted URL, resulting in stolen credentials. Note that several Linux distributions...
Microsoft BizTalk Server 2000/2002 DTA - 'RawCustomSearchField.asp' SQL Injection
source: https://www.securityfocus.com/bid/7470/info A vulnerability has been reported for BizTalk Server which may make it possible for remote users to modify database query logic. The vulnerability exists in some of the pages used by the DTA interface. This vulnerability may be the result of...
Microsoft BizTalk Server 20002002 DTA - RawCustomSearchField.asp SQL Injection
Microsoft BizTalk Server 20002002 DTA - RawCustomSearchField.asp SQL Injection source: https://www.securityfocus.com/bid/7470/info A vulnerability has been reported for BizTalk Server which may make it possible for remote users to modify database query logic. The vulnerability exists in some of t...
Basit 1.0 Submit Module - Cross-Site Scripting
source: https://www.securityfocus.com/bid/7139/info A cross-site scripting vulnerability has been reported for Basit. This vulnerability occurs due to insufficient sanitization of some user-supplied input. As a result of this deficiency an attacker may exploit the vulnerability by creating a...
RSA ClearTrust 4.6/4.7 - Login Page Cross-Site Scripting
source: https://www.securityfocus.com/bid/7108/info A cross-site scripting vulnerability has been discovered in ClearTrust. Specifically, the login page for the management application is not properly sanitized of some user-supplied values. An attacker can exploit this vulnerability by creating a...
CVE-2002-2234
NetScreen ScreenOS before 4.0.1 allows remote attackers to bypass the Malicious-URL blocking feature by splitting the URL into fragmented IP requests...
SSH Secure Shell for Workstations contains buffer overflow in URL-handling feature
Overview The Windows version of SSH Secure Shell for Workstations contains a buffer overflow vulnerability that may allow an attacker to execute arbitrary code. Description The SSH Secure Shell for Workstations client includes a URL-handling feature that allows users to launch URLs that appear in...
'Malicious-URL' Feature may be Circumvented Using IP Fragmentation
Title: NetScreen Security Alert 51929 Date: 25 November 2002 Impact: 'Malicious-URL' Feature may be Circumvented Using IP Fragmentation Affected Products: All firewall/VPN appliances and systems Affected Software Releases: ScreenOS 2.7.1, 2.8, 3.0, 3.1, 4.0 Max Risk: Low Summary: In response to t...
Netscreen Malicious URL feature can be bypassed by fragmenting the request
Netscreen Malicious URL feature can be bypassed by fragmenting the request http://www.cirt.net/advisories/netscreen.shtml Product Description: NetScreen Technologies Inc. is a leading developer of integrated network security solutions that offer the security, performance and total cost of ownersh...
Hosting Controller 1.x - 'Browse.asp' File Disclosure
source: https://www.securityfocus.com/bid/4778/info Hosting Controller is an application which consolidates all hosting tasks into one interface. Hosting Controller runs on Microsoft Windows operating systems. The 'browse.asp' script is prone to an issue which may allow a remote attacker to view...