5410 matches found
CVE-2004-1331: Undefined Security Weakness
The execCommand method in Microsoft Internet Explorer 6.0 SP2 allows remote attackers to bypass the "File Download - Security Warning" dialog and save arbitrary files with arbitrary extensions via the SaveAs command...
Microsoft Internet Explorer execCommand() method SaveAs command uses misleading "Save HTML Document" dialog
Overview Microsoft Internet Explorer contains a vulnerability in the way that it presents a Save As dialog. By invoking the SaveAs command with execCommand, an attacker could display a dialog that could trick a user into saving arbitrary content. Description Microsoft Internet Explorer IE support...
Microsoft Internet Explorer 6 - HREF Save As Denial of Service
Microsoft Internet Explorer 6 - HREF Save As Denial of Service source: https://www.securityfocus.com/bid/10552/info A vulnerability is reported to exist in Internet Explorer that may allow an attacker to cause the application to crash. The issue presents itself when a user attempts to invoke the...
CVE-2003-0399: Undefined Security Weakness
Vignette StoryServer 4 and 5, Vignette V/5, and possibly other versions allows remote attackers to perform unauthorized SELECT queries by setting the vgncreds cookie to an arbitrary value and directly accessing the save template...
Solaris KCMS + TTDB Arbitrary File Read
This module targets a directory traversal vulnerability in the kcmsserver component from the Kodak Color Management System. By utilizing the ToolTalk Database Server's TTISBUILD procedure, an attacker can bypass existing directory traversal validation and read arbitrary files. Vulnerable systems...
PT-2002-2667 · Videsh Sanchar Nigam Limited · Vsnl Integrated Dialer
Name of the Vulnerable Software and Affected Versions: Videsh Sanchar Nigam Limited VSNL Integrated Dialer Software version 1.2.000 Description: The issue concerns the storage of passwords using a weak encryption scheme, specifically a one-to-one mapping, in a registry key when the "Save Password...
PT-2002-2438 · Microsoft · Office Xp
Name of the Vulnerable Software and Affected Versions: Microsoft Office XP Description: The issue concerns the Host function in the Microsoft spreadsheet component, which allows remote attackers to create arbitrary files using the SaveAs capability. Recommendations: For Microsoft Office XP,...
CVE-2002-1192
Multiple buffer overflows in rogue on NetBSD 1.6 and earlier, FreeBSD 4.6, and possibly other operating systems, allows local users to gain "games" group privileges via malformed entries in a game save file...
Pirch/RusPirch баг
Уязвимые продукты: Pirch и RusPirch Уязвимость: Aux bug Разработчики программы: www.pirchat.com Обнаруживший уязвимость: j0k3r www.dhgroup.org Описание: Pirch – IRC клиент для Microsoft Windows. RusPirch - его русская версия. Если в клиенте включена функция авто-сохранения приватов, то достаточно...
CVE-2001-1387
The CVE-2001-1387 entry concerns the iptables package, specifically iptables-save in versions before 1.2.4. The issue is that iptables-save records the --reject-with icmp-host-prohibited rule as --reject-with tcp-reset, causing generated responses to diverge from the administrator’s configuration...
CVE-2001-1387: Observable Discrepancy
iptables-save in iptables before 1.2.4 records the "--reject-with icmp-host-prohibited" rule as "--reject-with tcp-reset," which causes iptables to generate different responses than specified by the administrator, possibly leading to an information leak...
CVE-2002-0476
Standalone Macromedia Flash Player 5.0 allows remote attackers to save arbitrary files and programs via a .SWF file containing the undocumented "save" FSCommand...
CVE-2002-0476
Standalone Macromedia Flash Player 5.0 allows remote attackers to save arbitrary files and programs via a .SWF file containing the undocumented "save" FSCommand...
CVE-2002-0476: Undefined Security Weakness
Standalone Macromedia Flash Player 5.0 allows remote attackers to save arbitrary files and programs via a .SWF file containing the undocumented "save" FSCommand...
Доступ к защищенным документам Adobe (protection bypass)
Можно скопировать содержимое защищенного документа используя функцию "Save As"...
CVE-1999-1545
Joe's Own Editor joe 2.8 sets the world-readable permission on its crash-save file, DEADJOE, which could allow local users to read files that were being edited by other users...
CVE-2000-0597: Undefined Security Weakness
Microsoft Office 2000 Excel and PowerPoint and PowerPoint 97 are marked as safe for scripting, which allows remote attackers to force Internet Explorer or some email clients to save files to arbitrary locations via the Visual Basic for Applications VBA SaveAs function, aka the "Office HTML Script...
mac-excel98.txt
Subject: MM Giant Excel security hole Date: Thu, 12 Nov 1998 16:09:22 -0500 x-sender: [email protected] From: Steve Klein To: "Mac Mgrs" Mime-Version: 1.0 Sender: [email protected] Status: Question short version: Does anyone know of a way to protect my Macs from Excel's confused pathname...
Microsoft Windows NT 4.0/4.0 SP1/4.0 SP2/4.0 SP3/4.0 SP4/4.0 SP5 - RAS Dial-up Networking Save Password
source: https://www.securityfocus.com/bid/232/info Windows NT allows users to save their RAS and/or RRAS credentials by using the 'Save Password' checkbox when making a dial-up connection. Credentials saved in this manner are stored in the...
