Microsoft Windows DNS server security vulnerabilities

Memory corruption on NAPTR record handling, uninitialized memory access on non-existent domain lookup...

DEBIAN-CVE-2011-1925

nbd-server.c in Network Block Device nbd-server 2.9.21 allows remote attackers to cause a denial of service NULL pointer dereference and crash by causing a negotiation failure, as demonstrated by specifying a name for a non-existent export...

CVE-2011-1925

nbd-server.c in Network Block Device nbd-server 2.9.21 allows remote attackers to cause a denial of service NULL pointer dereference and crash by causing a negotiation failure, as demonstrated by specifying a name for a non-existent export...

Cetera eCommerce - Multiple Cross-Site Scripting / SQL Injections

source: https://www.securityfocus.com/bid/47044/info Cetera eCommerce is prone to multiple cross-site scripting and SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues could allow an attacker to steal cookie-based authentication...

pam_krb5: Password prompt varies for existent and non-existent users

pamkrb5 2.2.14 through 2.3.4, as used in Red Hat Enterprise Linux RHEL 5, generates different password prompts depending on whether the user account exists, which allows remote attackers to enumerate valid usernames...

Code injection

Geo++ GNCASTER 1.4.0.7 and earlier allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via multiple requests for a non-existent file using a long URI...

Mandriva Update for pdksh MDVA-2008:037 (pdksh)

Check for the Version of pdksh OpenVAS Vulnerability Test Mandriva Update for pdksh MDVA-2008:037 pdksh Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

CVE-2009-0242

Rejected reason: gmetad in Ganglia 3.1.1, when supporting multiple requests per connection on an interactive port, allows remote attackers to cause a denial of service via a request to the gmetad service with a path that does not exist, which causes Ganglia to 1 perform excessive CPU computation...

libicu poor back reference validation

libicu in International Components for Unicode ICU 3.8.1 and earlier attempts to process backreferences to the nonexistent capture group zero aka \0, which might allow context-dependent attackers to read from, or write to, out-of-bounds memory locations, related to corruption of REStackFrames...

Apache AXIS Non-Existent WSDL路径信息泄露漏洞

Apache AXIS是一款Apache WebService项目中的子项目，构造基于SOAP应用的解决方案。 Apache AXIS存在信息泄露问题，远程攻击者可以利用漏洞获得WEB服务目录路径信息。 当远程攻击者请求不存在的WSDLWeb服务定义语言文件时，可导致java.io.FileNotFoundException功能中出现错误，而返回软件的物理路径给攻击者，利用这些信息攻击者可对系统进行进一步攻击。 Apache AXIS 1.0 目前没有解决方案提供： http://ws.apache.org/axis/...

Gran Paradiso 3.0a3 - Non-Existent applet Denial of Service

Gran Paradiso 3.0a3 - Non-Existent applet Denial of Service milw0rm.com 2007-04-11...

Gran Paradiso 3.0a3 non-existent applet Denial of Service Exploit

No description provided by source. !-- Gran Paradiso is unable to handle a multiple request of non-existent applet so, after some page refresh, crashes or stops to answer. You can try this exploit here www.shinnai.altervista.org/nea.html but, if so, you need a little patience 'cause it's too slow...

Gran Paradiso 3.0a3 non-existent applet Denial of Service Exploit

Exploit for multiple platform in category dos / poc ================================================================= Gran Paradiso 3.0a3 non-existent applet Denial of Service Exploit ================================================================= 0day.today 2018-04-10...

Gran Paradiso 3.0a3 - Non-Existent applet Denial of Service

milw0rm.com 2007-04-11...

Sami HTTP Server DoS

Crash on large number of requests to non-existent files...

CVE-2006-6421

Cross-site scripting XSS vulnerability in the private message box implementation privmsg.php in phpBB 2.0.x allows remote authenticated users to inject arbitrary web script or HTML via the "Message body" field in a message to a non-existent user...

CVE-2006-2535

index.php in Destiney Links Script 2.1.2 allows remote attackers to obtain the installation path via an invalid show parameter referencing a non-existent file, which reveals the path in the resulting error message. NOTE: this issue might be resultant from a more serious issue such as directory...

Directory traversal

index.php in Destiney Links Script 2.1.2 allows remote attackers to obtain the installation path via an invalid show parameter referencing a non-existent file, which reveals the path in the resulting error message. NOTE: this issue might be resultant from a more serious issue such as directory...

IIS IDA/IDQ Path Disclosure

IIS 4.0 allows a remote attacker to obtain the real pathname of the document root by requesting non-existent files with .ida or .idq extensions. An attacker may use this flaw to gain more information about the remote host, and hence make more focused attacks. OpenVAS Vulnerability Test $Id:...

Non-Existent Page Physical Path Disclosure Vulnerability (HTTP)

The remote web server is prone to an information disclosure vulnerability. SPDX-FileCopyrightText: 2003 Michel Arboi SPDX-FileCopyrightText: Improved / extended code / detection routine since 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright ...