4761 matches found
CVE-2007-4701
CVE-2007-4701 affects WebKit/Safari on Apple Mac OS X 10.4–10.4.10. When previewing a PDF, temporary files are not created securely, allowing local users to read the contents of the PDF. Mitigation via Mac OS X 10.4.11 Security Update (MacOSXUpdCombo10.4.11 for Intel/PPC) is available from Apple....
Ubuntu 6.10 : firefox vulnerabilities (USN-398-1)
Various flaws have been reported that allow an attacker to execute arbitrary code with user privileges by tricking the user into opening a malicious web page containing JavaScript or SVG. CVE-2006-6497, CVE-2006-6498, CVE-2006-6499, CVE-2006-6501, CVE-2006-6502, CVE-2006-6504 Various flaws have...
Out-of-bounds
Blizzard Entertainment StarCraft Brood War 1.15.1 and earlier allows remote attackers to cause a denial of service application crash via a malformed map, which triggers an out-of-bounds read during a minimap preview...
StarCraft memory corruption
Memory corruption on map preview received from server...
Blizzard Entertainment StarCraft Brood War 1.15.1 - Minimap Preview Remote Denial of Service
source: https://www.securityfocus.com/bid/25478/info StarCraft Brood War is prone to a remote denial-of-service vulnerability because the application fails to handle exceptional conditions. Attackers can exploit this issue to crash the affected application, denying service to legitimate users. Th...
CVE-2007-2405
Integer underflow in Preview in PDFKit on Apple Mac OS X 10.4.10 allows remote attackers to execute arbitrary code via a crafted PDF file...
CVE-2007-2405
CVE-2007-2405 describes an integer underflow in Preview (PDFKit) on Mac OS X 10.4.10 that can be triggered by a crafted PDF file to achieve remote code execution. The affected component is Preview/PDFKit in Mac OS X’s PDF handling. The CVSS metrics indicate network access, no authentication, and ...
Cross site scripting
Cross-site scripting XSS vulnerability in the preview form in Stephen Ostermiller Contact Form before 2.00.02 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors that contain an apostrophe...
Moderate: Red Hat Security Advisory: iscsi-initiator-utils security update
Updated iscsi-initiator-utils packages that fix a security flaw in open-iscsi are now available for Red Hat Enterprise Linux 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The iscsi package provides the server daemon for the iSCSI protocol,...
RHEL 5 : iscsi-initiator-utils (RHSA-2007:0497)
Updated iscsi-initiator-utils packages that fix a security flaw in open-iscsi are now available for Red Hat Enterprise Linux 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The iscsi package provides the server daemon for the iSCSI protocol,...
CVE-2007-2861
Multiple PHP remote file inclusion vulnerabilities in Simple Accessible XHTML Online News SAXON 4.6 allow remote attackers to execute arbitrary PHP code via a URL in the template parameter to 1 news.php, 2 preview.php, or 3 archive-display.php...
saxon-rfi.txt
""""""""""""""""""""""""""""""""""""""""""""""" """ :: :: ::::: :::: """ """ :: :: :: : :: """ """ :::: :: :: ::::: ::::: :::: """ """ :: :: ::: ::: :: :: :: :: :: """ """ :: :: :: : : ::::: :: :: :::: """ """ """ """"""""""""""""""""""""""""""""""""""""""""""" Xmor$ Security Vulnerability Resear...
postrev-rfi.txt
Post Revolution Remote File Inclusion Affected Software .: Post Revolution 6.6 / 7.0 Release Candidate 2 Download..: http://www.fabio.com.ar/postrev/ Risk ..............: high Date .........: 25/3/2007 Found by ..........: InyeXion Contact ...........: InyeXionatgmail.com Web .............:...
Post Revolution <= 0.7.0 RC 2 (dir) Remote File Inclusion Vulnerability
No description provided by source. Post Revolution Remote File Inclusion Affected Software .: Post Revolution 6.6 / 7.0 Release Candidate 2 Download..: http://www.fabio.com.ar/postrev/ Risk ..............: high Date .........: 25/3/2007 Found by ..........: InyeXion Contact ...........:...
Post Revolution <= 0.7.0 RC 2 (dir) Remote File Inclusion Vulnerability
Exploit for unknown platform in category web applications ======================================================================= Post Revolution = 0.7.0 RC 2 dir Remote File Inclusion Vulnerability ======================================================================= Post Revolution Remote Fil...
Sql injection
SQL injection vulnerability in the heme preview feature for default.asp in BP Blog 7.0 through 7.0.2 allows remote attackers to execute arbitrary SQL commands via the layout parameter...
CVE-2007-1445
SQL injection vulnerability in the heme preview feature for default.asp in BP Blog 7.0 through 7.0.2 allows remote attackers to execute arbitrary SQL commands via the layout parameter...
[Full-disclosure] TinyMCE_exp Remote File Include Vulnerability
TinyMCEexp Remote File Include Vulnerability Author: Arturo Z. Contact: [email protected] Website: www.diosdelared.com Date: 10/03/07 Risk: critical Vendor Url: http://www.joomlaya.com/index.php?option=comremository&func=fileinfo&filecatid=1868 Affected Software: TinyMCEexp search: allinurl:...
Microsoft Windows OLE files DoS
Crash on OLE file .DOC preview...
Information disclosure
include/auth/auth.php in Simple Invoices before 2007 03 05 does not use the login system to protect print preview pages for invoices, which might allow attackers to obtain sensitive information...