httpdx Multiple Commands Remote Buffer Overflow Vulnerabilities

The SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.100210";...

LibTIFF 3.8.2 - 'LZWDecodeCompat()' Remote Buffer Underflow

source: https://www.securityfocus.com/bid/35451/info LibTIFF is prone to a remote buffer-underflow vulnerability because it fails to perform adequate boundary checks on user-supplied data. An attacker can exploit this issue to execute arbitrary malicious code in the context of a user running an...

FreeBSD Ports: pango, linux-pango, linux-f8-pango

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

GrabIt Stack Based Buffer Overflow Vulnerability

GrabIt is prone to stack-based buffer overflow vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Eggdrop 'ctcpbuf' Remote Denial Of Service Vulnerability

Eggdrop is prone to a remote denial-of-service vulnerability because it fails to adequately validate user-supplied input. An attacker may exploit this issue to crash the application, resulting in a denial-of-service condition. This issue is related to the vulnerability described in BID 24070...

Cacti 'data_input.php' Cross Site Scripting Vulnerability

Cacti is prone to a cross-site scripting vulnerability because the application fails to sufficiently sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may let the...

Webmedia Explorer 5.0.9/5.10 - Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/35368/info Webmedia Explorer is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting...

Dokeos <= 1.8.5 Multiple Remote Input Validation Vulnerabilities

Dokeos is prone to multiple input-validation vulnerabilities, including SQL-injection, HTML-injection, cross-site scripting, and cross-site request-forgery issues. Copyright C 2009 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by...

TYPSoft FTP Server 'ABORT' Command Remote Denial of Service Vulnerability

TYPSoft FTP Server is prone to a remote denial-of-service vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Mozilla Firefox 3.0.10 / SeaMonkey 1.1.16 - Address Bar URI Spoofing

source: https://www.securityfocus.com/bid/35388/info Mozilla Firefox and SeaMonkey are affected by a URI-spoofing vulnerability because they fail to adequately handle user-supplied data. An attacker may leverage this issue by inserting arbitrary content to spoof a URI presented to an unsuspecting...

Realty Web-Base 'admin/admin.php' Multiple SQL Injection Vulnerabilities

Realty Web-Base is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in a SQL query. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

Nagios External Commands and Adaptive Commands Unspecified Vulnerability

Nagios is prone to an unspecified vulnerability related to the CGI submission of external commands and the processing of adaptive commands. The issue affects versions prior to Nagios 3.0.6. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced...

Nagios Web Interface < 3.0.5 Privilege Escalation Vulnerability

Nagios is prone to an unspecified privilege-escalation scripting vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

GlassFish Enterprise Server 2.1 - Admin Console configurationauditModuleEdit.jsf?name Cross-Site Scripting

GlassFish Enterprise Server 2.1 - Admin Console configurationauditModuleEdit.jsf?name Cross-Site Scripting source: https://www.securityfocus.com/bid/34824/info GlassFish Enterprise Server is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize...

GlassFish Enterprise Server 2.1 - Admin Console customMBeanscustomMBeans.jsf URI Cross-Site Scripting

GlassFish Enterprise Server 2.1 - Admin Console customMBeanscustomMBeans.jsf URI Cross-Site Scripting source: https://www.securityfocus.com/bid/34824/info GlassFish Enterprise Server is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied...

IceWarp Merak Mail Server 9.4.1 - 'cleanHTML()' Cross-Site Scripting

source: https://www.securityfocus.com/bid/34823/info IceWarp Merak Mail Server is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an...

GlassFish Enterprise Server 2.1 - Admin Console /sysnet/registration.jsf URI Cross-Site Scripting

source: https://www.securityfocus.com/bid/34824/info GlassFish Enterprise Server is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied input. Attacker-supplied HTML and script code would run in the context of the affected site, potential...

Jetty Cross Site Scripting and Information Disclosure Vulnerabilities

Jetty is prone to a cross-site scripting vulnerability and an information disclosure vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

Tiger DMS Login SQL Injection Vulnerability

Tiger DMS is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective...

GScripts.net DNS Tools 'dig.php' Remote Command Execution Vulnerability

GScripts.net DNS Tools is prone to a remote command-execution vulnerability because the software fails to adequately sanitize user-supplied input. Successful attacks can compromise the affected software and possibly the computer. OpenVAS Vulnerability Test $Id: GScriptscve20091361.nasl 5767...