id Software id Tech 4 Engine - idGameLocal::GetGameStateObject() Remote Code Execution

id Software id Tech 4 Engine - idGameLocal::GetGameStateObject Remote Code Execution source: https://www.securityfocus.com/bid/41001/info id Tech 4 Engine is prone to a remote code-execution vulnerability. An attacker can exploit this issue to execute arbitrary code within the context of the...

OpenLDAP 'modrdn' Request Multiple Vulnerabilities

OpenLDAP is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Unreal Engine - ReceivedRawBunch() Denial of Service

Unreal Engine - ReceivedRawBunch Denial of Service source: https://www.securityfocus.com/bid/41737/info Unreal Engine is prone to a denial-of-service vulnerability. An attacker can exploit this issue to crash the affected server, resulting in denial-of-service conditions. The following games whic...

Sun Java System Application Server Local Vulnerability

Sun Java System Application Server is prone to a local vulnerability. The 'GUI' sub component is affected. This vulnerability affects the following supported versions: Sun Java System Application Server 8.0, 8.1, 8.2. OpenVAS Vulnerability Test $Id: gbsunjavasystemapplicationserver41638.nasl 5373...

FireStats Multiple Cross Site Scripting Vulnerabilities

FireStats is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Oracle Business Process Management 10.3.2 - Cross-Site Scripting

source: https://www.securityfocus.com/bid/41617/info Oracle Business Process Management is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspectin...

Podcast Generator 'download.php' Directory Traversal Vulnerability

Podcast Generator is prone to a directory-traversal vulnerability because it fails to sufficiently validate user-supplied input data. Exploiting the issue can allow an attacker to obtain sensitive information that may aid in further attacks. Podcast Generator 1.3 running on Windows is vulnerable;...

Xlight FTP Server Multiple Directory Traversal Vulnerabilities

Xlight FTP Server is prone to multiple directory-traversal vulnerabilities because it fails to sufficiently sanitize user- supplied input. Exploiting these issues may allow an attacker to obtain sensitive information which could aid in further attacks. Xlight FTP Server 3.5.5 is vulnerable; other...

XLight FTP Server 3.x SFTP Directory Traversal

According to its SSH banner, the version of XLight FTP server listening on the remote host is potentially affected by a directory traversal vulnerability in its SFTP service. A remote, authenticated attacker, exploiting this flaw, can read and modify arbitrary files on the remote host. Note that...

Panda AntiVirus Zoo Denial of Service Vulnerability

Panda Software Antivirus/Internet Security before 20070402 allows remote attackers to cause a denial of service infinite loop via a ZOO archive with a direntry structure that points to a previous file. SPDX-FileCopyrightText: 2010 LSS Some text descriptions might be excerpted from a referenced...

Panda Antivirus Buffer Overflow

Buffer overflow in Panda Antivirus before 20-07-2007 allows remote attackers to execute arbitrary code via a crafted EXE file, resulting from an Integer Cast Around. OpenVAS Vulnerability Test Panda Antivirus Buffer Overflow LSS-NVT-2010-041 Developed by LSS Security Team Copyright C 2010 LSS Thi...

Sun Java System Web Server Admin Interface DoS Vulnerability

Sun Java System Web Server is prone to a denial of service DoS vulnerability. Copyright C 2010 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program i...

Wiki Web Help 'uploadimage.php' Arbitrary File Upload Vulnerability

Wiki Web Help is prone to an arbitrary-file-upload vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to upload arbitrary files to the affected computer; this can result in arbitrary code execution within the context of the vulnerable...

Perl Archive::Tar Module Remote Directory Traversal Vulnerability

Perl Archive::Tar module is prone to a directory-traversal vulnerability because it fails to validate user-supplied data. Copyright C 2010 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Unreal Engine 2.5 - 'UpdateConnectingMessage()' Remote Stack Buffer Overflow (PoC)

source: https://www.securityfocus.com/bid/41424/info Unreal Engine is prone to a remote stack-based buffer-overflow vulnerability because it fails to properly bounds-check messages before copying them to an insufficiently sized memory buffer. Successful exploits can allow remote attackers to...

MoinMoin 'PageEditor.py' Cross-Site Scripting Vulnerability

MoinMoin is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied input data. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may help the attacker...

Mahara Multiple Vulnerabilities (Jul 2010)

Mahara is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mahara:mahara"; if description...

Splunk 4.x - 4.1.1 Multiple Vulnerabilities

Splunk is prone to multiple cross-site scripting XSS vulnerabilities and multiple directory traversal vulnerabilities because it fails to sufficiently sanitize user-supplied input. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and a...

MoinMoin 'PageEditor.py' Cross-Site Scripting Vulnerability

MoinMoin is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied input data. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Xplico 0.5.7 - add.ctp Cross-Site Scripting (2)

Xplico 0.5.7 - add.ctp Cross-Site Scripting 2 source: https://www.securityfocus.com/bid/41322/info Xplico is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser...