1293 matches found
Directory traversal
Multiple PHP remote file inclusion vulnerabilities in LookStrike Lan Manager 0.9 allow remote attackers to execute arbitrary PHP code via a URL in the sysconfpathreal parameter to 1 modules\class\Table.php; 2 dbadmins.php, 3 dbalert.php, 4 dbdouble.php, 5 dbgames.php, 6 dbmatches.php, 7...
Net: HTTP insufficient verification of SSL certificate
The connect method in lib/net/http.rb in the 1 Net::HTTP and 2 Net::HTTPS libraries in Ruby 1.8.5 and 1.8.6 does not verify that the commonName CN field in a server certificate matches the domain name in an HTTPS request, which makes it easier for remote attackers to intercept SSL transmissions v...
D-Bus denial of service
Unspecified vulnerability in the matchruleequal function in bus/signals.c in D-Bus before 1.0.2 allows local applications to remove match rules for other applications and cause a denial of service lost process messages...
CVE-2006-6107
Unspecified vulnerability in the matchruleequal function in bus/signals.c in D-Bus before 1.0.2 allows local applications to remove match rules for other applications and cause a denial of service lost process messages...
DEBIAN-CVE-2006-6107
Unspecified vulnerability in the matchruleequal function in bus/signals.c in D-Bus before 1.0.2 allows local applications to remove match rules for other applications and cause a denial of service lost process messages...
CVE-2006-6107
Unspecified vulnerability in the matchruleequal function in bus/signals.c in D-Bus before 1.0.2 allows local applications to remove match rules for other applications and cause a denial of service lost process messages...
CVE-2006-6107
Unspecified vulnerability in the matchruleequal function in bus/signals.c in D-Bus before 1.0.2 allows local applications to remove match rules for other applications and cause a denial of service lost process messages...
CVE-2004-0956
MySQL before 4.0.20 allows remote attackers to cause a denial of service application crash via a MATCH AGAINST query with an opening double quote but no closing double quote...
CVE-2004-0956
CVE-2004-0956 affects MySQL prior to 4.0.20. A remote attacker can cause an application crash/DoS via a MATCH AGAINST query with an opening double quote but no closing quote. Exploitation details are not provided in the documents; multiple advisories (e.g., SUSE, Ubuntu, FreeBSD/OpenVAS entries) ...
CVE-2004-0956
MySQL before 4.0.20 allows remote attackers to cause a denial of service application crash via a MATCH AGAINST query with an opening double quote but no closing double quote...
Bug in Linux 2.4 / iptables MAC match module
-- | | || |/ / -- -- | /o| /o| | | |/o| | -- -- ||||/|| / ||/ -- -- netservers security advisory 01-09-26 -- SUBJECT : Bug in Linux 2.4 / iptables MAC match module SUMMARY : MAC match module does not match small packets EFFECTS : Malicious users may bypass MAC-based DROP rules pcAnywhere does not...
microsoft.wildcard.matches.txt
Date: Mon, 14 Jun 1999 09:46:41 +0200 From: BROWN Nick Subject: Unwanted wildcard match I don't normally like to present individual bugs as RISKs, but this one just bit me and is so counter-intuitive that I felt I had to report it. It appears that when Windows NT and, I imagine, other...
