756 matches found
Yappa-ng 1.x/2.x - Cross-Site Scripting
source: https://www.securityfocus.com/bid/13372/info yappa-ng is prone to an unspecified cross-site scripting vulnerability. This issue may allow for theft of cookie-based authentication credentials or other attacks. The vendor has not published any specific details about this vulnerability other...
xpm -- image decoding vulnerabilities
Chris Evans discovered several vulnerabilities in the libXpm image decoder: A stack-based buffer overflow in xpmParseColors An integer overflow in xpmParseColors A stack-based buffer overflow in ParsePixels and ParseAndPutPixels The X11R6.8.1 release announcement reads: This version is purely a...
Security Release - Samba 3.0.5 and 2.2.10
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Summary: Potential Buffer Overruns in Samba 3.0 and Samba 2.2 CVE ID: CAN-2004-0600, CAN-2004-0686 http://cve.mitre.org/ - ------------- CAN-2004-0600 - ------------- Affected Versions: = v3.0.2 The internal routine used by the Samba Web Administratio...
Samba-TNG 0.3.1 Security Release (fwd)
---------- Forwarded message ---------- Date: Sat, 22 Mar 2003 21:03:11 +0100 CET From: Stephan Lauffer [email protected] To: [email protected] Subject: ANNOUNCE Samba-TNG 0.3.1 Security Release Samba-TNG-0.3.1 released ========================== Mar 22th 2003 Today the...
Samba TNG < 0.3.1 Multiple Remote Vulnerabilities
The remote Samba server, according to its version number, is vulnerable to multiple flaws that could let an attacker gain a root shell on this host. C Tenable Network Security, Inc. Ref: Date: Sat, 22 Mar 2003 21:03:11 +0100 CET From: Stephan Lauffer To: [email protected] Cc:...
liteserve.txt
Christopher Fillion's "Perception" web site hosts the LiteServe combination server for Win32. The server offers HTTP, FTP, SMTP, POP3, and Telnet services. Included in the HTTP service is a Common Gateway Interface CGI feature that allows you to specify a CGI alias, as well as "filters" that are...
bufferoverflow posadis m5pre2
Netric Security Team - http://www.netric.org by eSDee Posadis m5pre2 Type: Stackoverflow Priority: 2 01 Description 02 Proof of concept 03 Vendor response 01 Description Posadis is a DNS server for Unix and Windows, available at http://posadis.sourceforge.net. The m5pre2 was a security release fo...
Subject: [SECURITY] New version of kernel-image for sparc fixes DoS attack
As is widely known by now the Linux 2.2.x kernels had a problem with parsing IP options, which made them susceptible to a DoS attack. The Debian GNU/Linux 2.1 release for the Sun sparc architecture uses such a kernel. If you are using such a system and havent upgraded the kernel yourself, we...
SS-2018-015: Vulnerable dependency
More info at https://www.silverstripe.org/download/security-releases/ss-2018-015/...
Mautic core - Highly Critical - XSS vulnerability leveraged through referrers could allow un-authorized admin access
More info at https://www.mautic.org/blog/community/security-release-all-versions-mautic-prior-2-16-5-and-3-2-4...
Security update 1970-01-01
...
Exploit of encryption failure vulnerability
More info at https://medium.com/@taylorotwell/laravel-security-release-5-6-15-and-5-5-40-56f1257933a0...
CVE-2023-48714 Record titles for restricted records can be viewed if exposed by GridFieldAddExistingAutocompleter
More info at https://www.silverstripe.org/download/security-releases/CVE-2023-48714...
Security update 1970-01-01
...