3686 matches found
apache mod-ssl 2.0.50 拒绝服务漏洞
No description provided by source...
apache mod-include 1.3.29 缓冲区溢出漏洞
No description provided by source...
apache mod-proxy-ftp 2.2.14 mod-proxy-ftp 命令执行漏洞
No description provided by source...
apache mod-proxy-balance 2.2.6 balancer-handler 拒绝服务
No description provided by source...
apache mod-proxy-balancer 2.2.6 跨站脚本漏洞
No description provided by source...
apache mod-auth-mysql 1.9 Sql注入漏洞
No description provided by source...
apache mod-proxy-balancer 2.2.6 跨站脚本漏洞
No description provided by source...
apache mod-imagemap 2.2.6 跨站脚本漏洞
No description provided by source...
apache mod-proxy-ftp 2.2.13 拒绝服务漏洞
No description provided by source...
apache mod-deflate 2.2.11 拒绝服务漏洞
No description provided by source...
apache mod-alias 1.3.29 缓冲区溢出漏洞
No description provided by source...
CVE-2009-4382: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in module.php in PHPFABER CMS, possibly 1.3.36, allows remote attackers to inject arbitrary web script or HTML via the mod parameter...
CVE-2009-4299
mod/glossary/showentry.php in the Glossary module for Moodle 1.8 before 1.8.11 and 1.9 before 1.9.7 does not properly perform access control, which allows attackers to read unauthorized Glossary entries via unknown vectors...
CVE-2009-4249: Improper Neutralization of Input During Web Page Generation
Multiple cross-site scripting XSS vulnerabilities in CutePHP CuteNews 1.4.6, when registerglobals is enabled and magicquotesgpc is disabled, allow remote attackers to inject arbitrary web script or HTML via the 1 lastusername and 2 mod parameters to index.php; and 3 the title parameter to...
mod_jk: session information leak
The JK Connector aka modjk 1.2.0 through 1.2.26 in Apache Tomcat allows remote attackers to obtain sensitive information via an arbitrary request from an HTTP client, in opportunistic circumstances involving 1 a request from a different client that included a Content-Length header but no POST dat...
DEBIAN-CVE-2009-3890
Unrestricted file upload vulnerability in the wpcheckfiletype function in wp-includes/functions.php in WordPress before 2.8.6, when a certain configuration of the modmime module in the Apache HTTP Server is enabled, allows remote authenticated users to execute arbitrary code by posting an...
httpd: mod_proxy_ftp FTP command injection via Authorization HTTP header
The modproxyftp module in the Apache HTTP Server allows remote attackers to bypass intended access restrictions and send arbitrary commands to an FTP server via vectors related to the embedding of these commands in the Authorization HTTP header, as demonstrated by a certain module in VulnDisco Pa...
DEBIAN-CVE-2009-3555
The TLS protocol, and the SSL protocol 3.0 and possibly earlier, as used in Microsoft Internet Information Services IIS 7.0, modssl in the Apache HTTP Server 2.2.14 and earlier, OpenSSL before 0.9.8l, GnuTLS 2.8.5 and earlier, Mozilla Network Security Services NSS 3.12.4 and earlier, multiple Cis...
tomcat6 Denial-Of-Service with AJP connection
Apache Tomcat 4.1.0 through 4.1.39, 5.5.0 through 5.5.27, and 6.0.0 through 6.0.18, when the Java AJP connector and modjk load balancing are used, allows remote attackers to cause a denial of service application outage via a crafted request with invalid headers, related to temporary blocking of...
Sahana 'mod' Parameter Local File Disclosure Vulnerability
Sahana is prone to a local file-disclosure vulnerability because it fails to adequately validate user-supplied input. An attacker can exploit this vulnerability to obtain potentially sensitive information from local files on computers running the vulnerable application. This may aid in further...