5662 matches found
Command injection
Unspecified "Command Injection" vulnerability in ZoneMinder 1.23.3 and earlier allows remote attackers to execute arbitrary commands via 1 the executeFilter function in zmhtmlviewevents.php and 2 the runstate parameter to zmhtmlviewstate.php...
CVE-2008-3283
CVE-2008-3283 affects Red Hat Directory Server 7.1 (before SP7), Red Hat Directory Server 8, and Fedora Directory Server 1.1.1 and earlier. The vulnerability is due to memory leaks that can be exploited remotely to cause a denial of service via the authentication/bind phase and via anonymous LDAP...
CVE-2008-3716
Cross-site request forgery CSRF vulnerability in Harmoni before 1.6.0 allows remote attackers to make administrative modifications via a 1 save or 2 delete action to an unspecified component...
CVE-2008-3349
Multiple unspecified vulnerabilities in NetApp Data ONTAP, as used on NetApp and IBM eServer platforms, allow remote attackers to execute arbitrary commands, cause a denial of service system crash, or obtain sensitive information, probably related to insufficient access control for HTTP requests...
CVE-2008-3186
Multiple cross-site scripting XSS vulnerabilities in Chipmunk Blog Blogger allow remote attackers to inject arbitrary web script or HTML via the membername parameter to 1 members.php, 2 comments.php, 3 photos.php, 4 archive.php, or 5 cat.php. NOTE: the provenance of this information is unknown; t...
DSA-1601-1 wordpress - several vulnerabilities
Bulletin has no description...
CVE-2008-2996
GBX 2.0 Beta (Gravity Board X) has multiple SQL injection vulnerabilities in index.php. Specifically, two parameters are exploitable: searchquery in getsearch and board_id in viewboard, and these issues occur when magic_quotes_gpc is disabled. The CVE-2008-2996 entry documents remote execution of...
CVE-2008-2957
The UPnP functionality in Pidgin 2.0.0, and possibly other versions, allows remote attackers to trigger the download of arbitrary files and cause a denial of service memory or disk consumption via a UDP packet that specifies an arbitrary URL...
Apple Mac OS X 2008-004更新修复多个安全漏洞
BUGTRAQ ID: 30018 CVECAN ID: CVE-2008-2308,CVE-2008-2309,CVE-2008-2310,CVE-2008-2314,CVE-2008-2311,CVE-2008-2313 Mac OS X是苹果家族机器所使用的操作系统。 Apple 2008-004安全更新修复了Mac OS X中的多个安全漏洞，本地或远程攻击者可能利用这些漏洞造成多种威胁。 CVE-2008-2308 在处理别名数据结构的AFP卷标加载信息时存在内存破坏漏洞，解析了包含有恶意卷标加载信息的别名会导致应用程序意外终止或执行任意指令。 CVE-2008-2309...
openssl get_shared_ciphers overflow
Buffer overflow in the SSLgetsharedciphers function in OpenSSL 0.9.7 before 0.9.7l, 0.9.8 before 0.9.8d, and earlier versions has unspecified impact and remote attack vectors involving a long list of ciphers...
CVE-2008-2897
SQL injection vulnerability in index.php in PageSquid CMS 0.3 Beta allows remote attackers to execute arbitrary SQL commands via the page parameter...
CVE-2008-2641
Unspecified vulnerability in Adobe Reader and Acrobat 7.0.9 and earlier, and 8.0 through 8.1.2, allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via unknown vectors, related to an "input validation issue in a JavaScript method."...
CVE-2008-2835
CVE-2008-2835 affects IGSuite 3.2.4 with a SQL injection in cgi-bin/igsuite via the formid parameter, enabling remote attackers to execute arbitrary SQL commands. Public exploit references exist (Exploit-DB), but the provided documents do not include a remediation or patch details.
openSUSE 10 Security Update : kernel (kernel-5336)
This kernel update fixes the following security problems : CVE-2008-1615: On x8664 a denial of service attack could be used by local attackers to immediately panic / crash the machine. CVE-2008-2358: A security problem in DCCP was fixed, which could be used by remote attackers to crash the machin...
CVE-2008-2694
Cross-site scripting XSS vulnerability in search.php in phpInv 0.8.0 allows remote attackers to inject arbitrary web script or HTML via the keyword parameter...
Directory traversal
Directory traversal vulnerability in inc/config.php in ProManager 0.73 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the language parameter...
CVE-2008-1582
Unspecified vulnerability in Apple QuickTime before 7.5 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted AAC-encoded file that triggers memory corruption...
CVE-2008-2566
Multiple cross-site scripting XSS vulnerabilities in PHP Address Book 3.1.5 and earlier allow remote attackers to inject arbitrary web script or HTML via the group parameter to 1 index.php or 2 the default URI...
CVE-2008-2518
Cross-site scripting XSS vulnerability in the advanced search mechanism webapps/search/advanced.jsp in Sun Java System Web Server 6.1 before SP9 and 7.0 before Update 3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, probably related to the next parameter...