195 matches found
CVE-2009-4975
Cross-site scripting XSS vulnerability in webview.cpp in QtDemoBrowser allows remote attackers to inject arbitrary web script or HTML via a URL associated with a nonexistent domain name, related to a "universal XSS" issue, a similar vulnerability to CVE-2010-2536...
CVE-2009-4976
Cross-site scripting XSS vulnerability in webkitpart.cpp in kwebkitpart allows remote attackers to inject arbitrary web script or HTML via a URL associated with a nonexistent domain name, related to a "universal XSS" issue, a similar vulnerability to CVE-2010-2536...
CVE-2010-2536
Multiple cross-site scripting XSS vulnerabilities in rekonq 0.5 and earlier allow remote attackers to inject arbitrary web script or HTML via 1 a URL associated with a nonexistent domain name, related to webpage.cpp, aka a "universal XSS" issue; 2 unspecified vectors related to webview.cpp; and t...
CVE-2009-4976
Removed by vendor...
BIND DNSSEC NSEC/NSEC3 validation code could cause bogus NXDOMAIN responses
ISC BIND 9.0.x through 9.3.x, 9.4 before 9.4.3-P5, 9.5 before 9.5.2-P2, 9.6 before 9.6.1-P3, and 9.7.0 beta does not properly validate DNSSEC 1 NSEC and 2 NSEC3 records, which allows remote attackers to add the Authenticated Data AD flag to a forged NXDOMAIN response for an existing domain...
CVE-2009-2304
index.php in Aardvark Topsites PHP 5.2.0 and earlier allows remote attackers to obtain sensitive information via a nonexistent account name in the u parameter in a rate action, which reveals the installation path in an error message...
CVE-2008-3350
dnsmasq 2.43 allows remote attackers to cause a denial of service daemon crash by 1 sending a DHCPINFORM while lacking a DHCP lease, or 2 attempting to renew a nonexistent DHCP lease for an invalid subnet as an "unknown client," a different vulnerability than CVE-2008-3214...
DEBIAN-CVE-2008-3350
dnsmasq 2.43 allows remote attackers to cause a denial of service daemon crash by 1 sending a DHCPINFORM while lacking a DHCP lease, or 2 attempting to renew a nonexistent DHCP lease for an invalid subnet as an "unknown client," a different vulnerability than CVE-2008-3214...
Code injection
Wiki Server in Apple Mac OS X 10.5 before 10.5.3 allows remote attackers to obtain sensitive information user names by reading the error message produced upon access to a nonexistent blog...
CVE-2007-4770
libicu in International Components for Unicode ICU 3.8.1 and earlier attempts to process backreferences to the nonexistent capture group zero aka \0, which might allow context-dependent attackers to read from, or write to, out-of-bounds memory locations, related to corruption of REStackFrames...
Code injection
LiteWEB 2.7 allows remote attackers to cause a denial of service hang via a large number of requests for nonexistent pages...
CVE-2007-3398
CVE-2007-3398 affects LiteWEB 2.7. The issue allows a remote attacker to cause a denial of service (hang) by issuing a large number of requests for pages that do not exist. The connected documents do not provide explicit exploit details, impact beyond the hang, or remediation/patch information. N...
CVE-2007-3398
LiteWEB 2.7 allows remote attackers to cause a denial of service hang via a large number of requests for nonexistent pages...
Null pointer dereference
BugHunter HTTP SERVER httpsv.exe 1.6.2 allows remote attackers to cause a denial of service application crash via a large number of requests for nonexistent pages...
CVE-2007-3340
BugHunter HTTP SERVER httpsv.exe 1.6.2 allows remote attackers to cause a denial of service application crash via a large number of requests for nonexistent pages...
CVE-2007-1545
The AddResource function in server/dia/resource.c in Network Audio System NAS before 1.8a SVN 237 allows remote attackers to cause a denial of service server crash via a nonexistent client ID...
DEBIAN-CVE-2007-1545
The AddResource function in server/dia/resource.c in Network Audio System NAS before 1.8a SVN 237 allows remote attackers to cause a denial of service server crash via a nonexistent client ID...
CVE-2007-1545
The AddResource function in server/dia/resource.c in Network Audio System NAS before 1.8a SVN 237 allows remote attackers to cause a denial of service server crash via a nonexistent client ID...
