CVE-2008-5722

Buffer overflow in SAWStudio 3.9i allows user-assisted remote attackers to cause a denial of service application crash and possibly execute arbitrary code via a long SAWSTUDIO PREFERENCES STRUCT value in a .prf preferences file...

Buffer overflow

Buffer overflow in SAWStudio 3.9i allows user-assisted remote attackers to cause a denial of service application crash and possibly execute arbitrary code via a long SAWSTUDIO PREFERENCES STRUCT value in a .prf preferences file...

CVE-2008-5722

Buffer overflow in SAWStudio 3.9i allows user-assisted remote attackers to cause a denial of service application crash and possibly execute arbitrary code via a long SAWSTUDIO PREFERENCES STRUCT value in a .prf preferences file...

SAWStudio 3.9i - .prf Local Buffer Overflow (PoC)

SAWStudio 3.9i - .prf Local Buffer Overflow PoC SAWStudio 3.9i prf file Buffer overflow Poc By:Encrypt3d.M!nd Greetz:-=Mizo=-,L!0N,El Mariachi,MiNi SpIder,GGY,and all my friends when you import Prefernces File "prf file" contain long characters an overflow will occure,and the registers will be ju...

thunderbird security update

1.5.0.12-17.0.1 - Add thunderbird-oracle-default-prefs.js for errata rebuild and remove - thunderbird-redhat-default-prefs.js 1.5.0.12-17 - Update patchset to fix regression as per 1.8.1.18...

Mozilla Foundation Security Advisory 2008-40

Mozilla Foundation Security Advisory 2008-40 Title: Forced mouse drag Impact: Low Announced: September 23, 2008 Reporter: Paul Nickerson, Liu Die Yu Products: Firefox, SeaMonkey Fixed in: Firefox 3.0.2 Firefox 2.0.0.17 SeaMonkey 1.1.12 Description Mozilla developer Paul Nickerson reported a varia...

PHP iCalendar 2.24 - cookie_language Local File Inclusion Arbitrary File Upload

PHP iCalendar 2.24 - cookielanguage Local File Inclusion Arbitrary File Upload '.$lang'lcalfile'.' '.$filenumber.': '.$lang'lactionsuccess'.''; 84. el...

CVE-2008-2312

Network Preferences in Apple Mac OS X 10.4.11 stores PPP passwords in cleartext in a world-readable file, which allows local users to obtain sensitive information by reading this file...

Design/Logic Flaw

Network Preferences in Apple Mac OS X 10.4.11 stores PPP passwords in cleartext in a world-readable file, which allows local users to obtain sensitive information by reading this file...

CVE-2008-2312

CVE-2008-2312 affects Apple Mac OS X 10.4.11: Network Preferences stores PPP passwords in cleartext in a world-readable file, allowing local users to read sensitive credentials. Root cause: credentials stored insecurely. Impact: confidentiality of PPP passwords isCOMPLETE; exploitation is local. ...

CVE-2008-2312

Network Preferences in Apple Mac OS X 10.4.11 stores PPP passwords in cleartext in a world-readable file, which allows local users to obtain sensitive information by reading this file...

CVE-2008-3333

Directory traversal vulnerability in core/langapi.php in Mantis before 1.1.2 allows remote attackers to include and execute arbitrary files via the language parameter to the user preferences page accountprefsupdate.php...

Directory traversal

Directory traversal vulnerability in core/langapi.php in Mantis before 1.1.2 allows remote attackers to include and execute arbitrary files via the language parameter to the user preferences page accountprefsupdate.php...

CVE-2008-0165

Cross-site request forgery CSRF vulnerability in Ikiwiki before 2.42 allows remote attackers to modify user preferences, including passwords, via the 1 preferences and 2 edit forms...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in Ikiwiki before 2.42 allows remote attackers to modify user preferences, including passwords, via the 1 preferences and 2 edit forms...

CVE-2008-0165

Cross-site request forgery CSRF vulnerability in Ikiwiki before 2.42 allows remote attackers to modify user preferences, including passwords, via the 1 preferences and 2 edit forms...

DEBIAN-CVE-2008-0165

Cross-site request forgery CSRF vulnerability in Ikiwiki before 2.42 allows remote attackers to modify user preferences, including passwords, via the 1 preferences and 2 edit forms...

CVE-2008-0165

Cross-site request forgery CSRF vulnerability in Ikiwiki before 2.42 allows remote attackers to modify user preferences, including passwords, via the 1 preferences and 2 edit forms...

firefox security update

1.5.0.12-15.el51.0.1 - Add firefox-oracle-default-bookmarks.html and firefox-oracle-default-prefs.js 1.5.0.12-15 - Update patchset to fix regressions as per 1.8.1.14...

ikiwiki -- cross site request forging

The ikiwiki development team reports: Cross Site Request Forging could be used to construct a link that would change a logged-in user's password or other preferences if they clicked on the link. It could also be used to construct a link that would cause a wiki page to be modified by a logged-in...