3396 matches found
CVE-2006-2839
Directory traversal vulnerability in PG Problem Editor module PGProblemEditor.pm in WeBWorK Online Homework Delivery System 2.2.0 and earlier allows remote attackers to read and write files outside of the templates directory...
CVE-2006-2839
CVE-2006-2839 affects WeBWorK Online Homework Delivery System (2.2.0 and earlier) via the PGProblemEditor.pm module. The vulnerability is a directory traversal that allows remote attackers to read and write files outside the templates directory. Exploitation details, affected versions, and precis...
MDKSA-2006:090 : shadow-utils
A potential security problem was found in the useradd tool when it creates a new user's mailbox due to a missing argument to the open call, resulting in the first permissions of the file being some random garbage found on the stack, which could possibly be held open for reading or writing before...
CVE-2006-2201
Unspecified vulnerability in CA Resource Initialization Manager CAIRIM 1.x before 20060502, as used in z/OS Common Services and the LMP component in multiple products, allows attackers to violate integrity via a certain "problem state program" that uses SVC to gain access to supervisor state, key...
Integer overflow
Integer signedness error in Opera before 8.54 allows remote attackers to execute arbitrary code via long values in a stylesheet attribute, which pass a length check. NOTE: a sign extension problem makes the attack easier with shorter strings...
CVE-2005-4778
The CVE-2005-4778 entry concerns SUSE Linux 10.0 (before 20051007). A configuration problem in the powersave daemon is described as allowing local users to suspend the computer and potentially perform other unauthorized actions. The available documents do not specify the underlying root cause, th...
fbida symbolic links problem
fbgs script insecure temporary files creation...
NotSoGenius.txt
Software Vulnerable Genius VideoCAM NB Driver http://download.geniusnet.com.tw/CAMERA/webnb.zip Other genius webcams with the same 'snapshot feature' might be affected with the same issue, if you have any of those please try to reproduce this issue. Affects: Windows XP / Windows 2000 Proof of...
Cross site scripting
DISPUTED Cross-site scripting XSS vulnerability in index.php in NZ Ecommerce allows remote attackers to inject arbitrary web script or HTML via the action parameter. NOTE: the vendor has disputed this issue in a comment on the researcher's blog, but research by CVE suggests that this might be a...
CVE-2006-1096
Cross-site scripting XSS vulnerability in index.php in NZ Ecommerce allows remote attackers to inject arbitrary web script or HTML via the action parameter. NOTE: the vendor has disputed this issue in a comment on the researcher's blog, but research by CVE suggests that this might be a legitimate...
CVE-2006-1096
Cross-site scripting XSS vulnerability in index.php in NZ Ecommerce allows remote attackers to inject arbitrary web script or HTML via the action parameter. NOTE: the vendor has disputed this issue in a comment on the researcher's blog, but research by CVE suggests that this might be a legitimate...
capi4hylafax hylafax addon symbolic links problem
Symbolic links problem on creation of debug and log files...
crypt_blowfish cryptographic problem
Salt generation algorithm has high probability of salt duplication...
bzip2 bzgrep and gzip zgrep shell characters problem
Unfiltered characters in filename allow code execution...
net-snmp SNMP package fixproc utility symbolic link problem
Symbolic links problem on temporary files creation...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in DCP-Portal 5.3 through 6.1.1 allow remote attackers to inject arbitrary web script or HTML via 1 the day parameter in calendar.php and 2 the input form in search.php. NOTE: the provenance of this information is unknown; the details are obtained...
Mandrake Linux Security Advisory : ethereal (MDKSA-2005:193-2)
Ethereal 0.10.13 is now available fixing a number of security vulnerabilities in various dissectors : - the ISAKMP dissector could exhaust system memory - the FC-FCS dissector could exhaust system memory - the RSVP dissector could exhaust system memory - the ISIS LSP dissector could exhaust syste...
[Full-disclosure] IronWall webserver remote file access.
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 IronWall webserver 7.41 directory traversal - Software App: IronWall Webserver Version: 7.41 estable others not tested Platform: win32 Background Ironwall webserver is a small web server for win32 systems. It can be downloaded totally free at...
[SECURITY] [DSA 935-1] New libapache2-mod-auth-pgsql packages fix arbitrary code execution
-------------------------------------------------------------------------- Debian Security Advisory DSA 935-1 [email protected] http://www.debian.org/security/ Michael Stone January 10, 2006 http://www.debian.org/security/faq -...