DEBIAN-CVE-2011-0722

FFmpeg before 0.5.4, as used in MPlayer and other products, allows remote attackers to cause a denial of service heap memory corruption and application crash or possibly execute arbitrary code via a malformed RealMedia file...

ZAPms 1.22 SQL Injection

1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site : 1337day.com 0 1 + Support e-mail :...

[SECURITY] [DSA 2231-1] otrs2 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2231-1 [email protected] http://www.debian.org/security/ Florian Weimer June 6, 2011 http://www.debian.org/security/faq -...

Squid WCCP Message Receive Buffer Overflow (CVE-2005-0211)

Squid is a caching proxy for the Web supporting HTTP, HTTPS, FTP, and more. An attacker can exploit this vulnerability to terminate the vulnerable product, creating a denial of service condition, or it can be exploited for code. A remote vulnerability was found in Squid web proxy/cache processes...

WordPress OPS Old Post Spinner Plugin 'ops_file' Parameter Directory Traversal Vulnerability

WordPress OPS Old Post Spinner Plugin is prone to a directory traversal vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

CRESUS SQL Injection

=================================================== CRESUS. =5 Demos: http://www.bestbrands.com.tn http://www.calembo.biz/ang =============================================================== | Explotation...

[SECURITY] [DSA 2215-1] gitolite security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2215-1 [email protected] http://www.debian.org/security/ Nico Golde April 9, 2011 http://www.debian.org/security/faq - -------------------------------------------------------------------------...

TutorialMS 1.4 SQL Injection

TutorialMS v1.4 show Remote SQL Injection Vulnerability . . --------------------------------------------------------------------------------- | | | Vendor: TutorialMS.com | | Product web page: http://www.tutorialms.com | | Affected version: 1.4 | | | | Summary: TutorialMS is a free content...

Andy's PHP Knowledgebase 's' Parameter SQL Injection Vulnerability

Andy SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:aphpkb:aphpkb"; ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.103135";...

Douran Portal <= 3.9.7.8 Arbitrary File Download Vulnerability

Douran Portal is prone to a vulnerability that lets attackers download arbitrary files. This issue occurs because the application fails to sufficiently sanitize user-supplied input. Copyright C 2011 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and a...

OpenJDK Java2D font-related system property leak (6985453)

Unspecified vulnerability in the Java Runtime Environment JRE in Oracle Java SE and Java for Business 6 Update 23 and earlier, and 5.0 Update 27 and earlier allows remote untrusted Java Web Start applications and untrusted Java applets to affect confidentiality via unknown vectors related to 2D...

JDK unspecified vulnerability in Sound component

Unspecified vulnerability in the Java Runtime Environment JRE in Oracle Java SE and Java for Business 6 Update 23 and earlier, 5.0 Update 27 and earlier, and 1.4.229 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Sound and...

JDK unspecified vulnerability in Deployment component

Unspecified vulnerability in the Java Runtime Environment JRE in Oracle Java SE and Java for Business 6 Update 10 through 6 Update 23 allows remote untrusted Java Web Start applications and untrusted Java applets to affect confidentiality, integrity, and availability via unknown vectors related t...

DEBIAN-CVE-2011-0715

The moddavsvn module for the Apache HTTP Server, as distributed in Apache Subversion before 1.6.16, allows remote attackers to cause a denial of service NULL pointer dereference and daemon crash via a request that contains a lock token...

PHP 5.3.x Intl Extension - NumberFormatter::setSymbol() Denial of Service

PHP 5.3.x Intl Extension - NumberFormatter::setSymbol Denial of Service source: https://www.securityfocus.com/bid/46968/info PHP is prone to a remote denial-of-service vulnerability that affects the 'Intl' extension. Successful attacks will cause the application to crash, creating a...

PT-2011-1078 · Suse +2 · Kernel-Kdumppae +2

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 2.6.38.5 kernel-kdumppae affected versions not specified Description: The issue is related to multiple integer overflows in the Linux kernel, specifically in the agp allocate memory and agp create user memory...

PT-2011-1083 · Suse +2 · Kernel-Kdumppae +2

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 2.6.39 kernel-kdumppae affected versions not specified Description: The issue is related to an integer overflow in the Linux kernel, specifically in the vma to resize function in mm/mremap.c, which can be...

Galilery 'index.php' Local File Include Vulnerability

Galilery is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

VicFTPS 'LIST' Command Remote Denial of Service Vulnerability

VicFTPS is prone to a remote denial-of-service vulnerability because it fails to handle specially crafted input. Successfully exploiting this issue will allow an attacker to crash the affected application, denying further service to legitimate users. Arbitrary code execution may also be possible;...

JDK unspecified vulnerability in Sound component

Unspecified vulnerability in the Java Runtime Environment JRE in Oracle Java SE and Java for Business 6 Update 23 and earlier, 5.0 Update 27 and earlier, and 1.4.229 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Sound and...