[SA14515] Drupal Unspecified Cross-Site Scripting Vulnerability

---------------------------------------------------------------------- Monitor, Filter, and Manage Security Information - Filtering and Management of Secunia advisories - Overview, documentation, and detailed reports - Alerting via email and SMS Request Trial: https://ca.secunia.com/?f=l...

report bug bug reporting application weak permissions

Per-user configuration file is world readable and may contain sensitive information, such as SMTP server password...

squid -- correct handling of oversized HTTP reply headers

The squid patches page notes: This patch addresses a HTTP protocol mismatch related to oversized reply headers. In addition it enhances the cache.log reporting on reply header parsing failures to make it easier to track down which sites are malfunctioning. It is believed that this bug may lead to...

Squid < 2.5.STABLE7 Report Information Disclosure

Binary data 2491.prm...

CVE-2004-2748

viewreport.pl in NetIQ WebTrends Reporting Center Enterprise Edition 6.1a allows remote attackers to determine the installation path via an invalid profileid parameter, which leaks the pathname in an error message...

Debian DSA-477-1 : xine-ui - insecure temporary file creation

Shaun Colley discovered a problem in xine-ui, the xine video player user interface. A script contained in the package to possibly remedy a problem or report a bug does not create temporary files in a secure fashion. This could allow a local attacker to overwrite files with the privileges of the...

Mozilla Firefox Error Reporting Version Check (deprecated)

Binary data 2285.prm...

RHEL 2.1 : rxvt (RHSA-2003:055)

Updated rxvt packages are available which fix a number of vulnerabilities in the handling of escape sequences. Updated 12 March 2003 Added packages for Red Hat Enterprise Linux ES and Red Hat Enterprise Linux WS Rxvt is a color VT102 terminal emulator for the X Window System. A number of issues...

CVE-2004-0518

CVE-2004-0518 affects AppleFileServer on Mac OS X 10.3.4. The vulnerability is associated with the use of SSH and reporting errors; impact and attack vectors are unknown. CVSS2 base score 7.5 (HIGH) with network attack vector, low complexity, no authentication required, and partial confidentialit...

[Full-Disclosure] Format String Vulnerability in Tripwire

SUMMARY ------- Tripwiretm is a Security, Intrusion Detection, Damage Assessment and Recovery, Forensics software. A vulnerability in the product allows a user on the local machine under certain circumstances to execute arbitrary code with the rights of the user running the program typically root...

DSA-477 xine-ui - insecure temporary file creation

Bulletin has no description...

WebTrends Reporting Center 6.1 Management Interface - Full Path Disclosure

WebTrends Reporting Center 6.1 Management Interface - Full Path Disclosure source: https://www.securityfocus.com/bid/9460/info The WebTrends Reporting Center management interface discloses installation path information when an invalid argument for an interface URI parameter is requested. This...

WebTrends Reporting Center 6.1 Management Interface - Full Path Disclosure

source: https://www.securityfocus.com/bid/9460/info The WebTrends Reporting Center management interface discloses installation path information when an invalid argument for an interface URI parameter is requested. This information may permit an attacker to enumerate the layout of the underlying...

MLdonkey 2.5-4 - Cross-Site Scripting

MLdonkey 2.5-4 - Cross-Site Scripting source: https://www.securityfocus.com/bid/8946/info It has been reported that the Mldonkey web interface is prone to cross-site scripting attacks when reporting errors. The problem occurs due to insufficient sanitization of script code within requests. This...

CERT Advisory CA-2003-17 Exploit available for for the Cisco IOS Interface

-----BEGIN PGP SIGNED MESSAGE----- CERT Advisory CA-2003-17 Exploit available for for the Cisco IOS Interface Blocked Vulnerabilities Original release date: July 18, 2003 Last revised: -- Source: CERT/CC A complete revision history can be found at the end of this file. Systems Affected All Cisco...

why i love xs4all + mediaplayer thingie

Why i love xs4all rant you'll probably wanna skip this but i need to get this out of my system: a few weeks back i was unpleasantly suprised by the fact that my internet wasn't working the support desk employee after making me reset my modem a dozen times and tripple checking my settings finaly...

Siemens Mobile Phone Buffer overflow

====================================== --- Product : Siemens Mobile Phone --- Version : All 45 series phones --- OffSite : www.siemens-mobile.com --- Problem : Buffer Overflow. ====================================== General Description В телефонах Siemens серии 45, мною была найдена еще одна...

Important: Red Hat Security Advisory: rxvt security update

Updated rxvt packages are available which fix a number of vulnerabilities in the handling of escape sequences. Updated 12 March 2003 Added packages for Red Hat Enterprise Linux ES and Red Hat Enterprise Linux WS Rxvt is a color VT102 terminal emulator for the X Window System. A number of issues...

CVE-2002-0896

The throttle capability in Swatch may fail to report certain events if 1 the same type of event occurs after the throttle period, or 2 when multiple events matching the same "watchfor" expression do not occur after the throttle period, which could allow attackers to avoid detection...

DEBIAN-CVE-2002-0896

The throttle capability in Swatch may fail to report certain events if 1 the same type of event occurs after the throttle period, or 2 when multiple events matching the same "watchfor" expression do not occur after the throttle period, which could allow attackers to avoid detection...