ActiveHelper LiveHelp Server 3.2.2 - server/import/status.php Multiple Parameter SQL Injection

The activehelper-livehelp WordPress plugin was affected by a server/import/status.php Multiple Parameter SQL Injection security vulnerability...

Apache 2.4.6 Remote DoS

According to its banner, the version of Apache 2.4.x running on the remote host is version 2.4.6. It is, therefore, affected by a flaw in the modcache module involving a NULL pointer dereference. An attacker may be able to specially craft a request designed to cause a denial of service. Note that...

CVE-2014-4683

The WebNavigator server in Siemens SIMATIC WinCC before 7.3, as used in PCS7 and other products, allows remote authenticated users to gain privileges via a 1 HTTP or 2 HTTPS request...

Heap overflow

Multiple heap-based buffer overflows in the parsenotify function in sgminer before 4.2.2, cgminer before 4.3.5, and BFGMiner before 4.1.0 allow remote pool servers to have unspecified impact via a 1 large or 2 negative value in the Extranonc2size parameter in a mining.subscribe response and a...

UBUNTU-CVE-2014-4240

Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.6.17 and earlier allows local users to affect confidentiality and integrity via vectors related to SRREP...

UBUNTU-CVE-2014-4207

Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.37 and earlier allows remote authenticated users to affect availability via vectors related to SROPTZR...

Mandriva Linux Security Advisory : iodine (MDVSA-2014:128)

Updated iodine packages fix security vulnerability : Oscar Reparaz discovered an authentication bypass vulnerability in iodine, a tool for tunneling IPv4 data through a DNS server. A remote attacker could provoke a server to accept the rest of the setup or also network traffic by exploiting this...

Trillian 0.74 IRC PART Message Denial of Service Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/5776/info A vulnerability has been reported for Trillian. Reportedly, Trillian is prone to a denial of service condition when certain it receives messages about a user leaving a non-specified channel or a channel that the...

mod_accounting Module 0.5 - Blind SQL Injection

No description provided by source. - Affected Vendor: http://sourceforge.net/projects/mod-acct/files/ - Affected Software: modaccounting - Affected Version: 0.5. Other earlier versions may be affected. - Issue type: Blind SQL injection - Release Date: 20 Sep 2013 - Discovered by: Eldar Wireghoul...

Macromedia ColdFusion MX 6.0 - Remote Development Service File Disclosure Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/8109/info A vulnerability has been reported for the RDS service that may allow an attacker to obtain unauthorized access to a data residing on a ColdFusion MX server. The vulnerability is due to the way that authenticatio...

Savant Web Server 3.1 CGITest.HTML Cross Site Scripting Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/8242/info cgitest.html has been reported prone to cross-site scripting attacks. The issue occurs due to a lack of sufficient sanitization performed on data supplied to the cgitest.html script. This issue could be exploite...

Perception LiteServe 2.0.1 DNS Wildcard Cross Site Scripting Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/6131/info A cross site scripting vulnerability has been discovered in Perception LiteServe. It should be noted that this vulnerability is limited to server configurations with Wildcard DNS enabled. It has been reported th...

PunkBuster < 1.229 (WebTool Service) Remote Buffer Overflow DoS

No description provided by source. Luigi Auriemma Application: PunkBuster http://www.punkbuster.com Versions: PunkBuster for servers, versions minor than v1.229: America's Army = v1.228 Battlefield 1942 = v1.158 Battlefield 2 = v1.184 Battlefield Vietnam = v1.150 Call of Duty = v1.173 Call of Dut...

Monkey HTTP Server 0.4/0.5 Invalid POST Request Denial of Service Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/6096/info A denial of service vulnerability has been reported for Monkey HTTP server. The vulnerability is due to inadequate checks being performed when decoding POST requests. An attacker can exploit this vulnerability b...

CVS Kit CVS Server 1.10 .8 Instructed File Create Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/1523/info The cvs client blindly trust paths returned to it by the server. Therefore, a cvs client could be tricked into creating a file anywhere on the system by a malicious server. This problem can be tested yourself as...

Plug and Play Web Server 1.0 002c Directory Traversal Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/8645/info It has been reported that Plug and Play Web Server is prone a directory traversal issue allowing a remote attacker to traverse outside the server root directory by using '../' or '..' character sequences...

XTux Server 2001.0 6.01 Garbage Denial of Service Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/4260/info XTux is a multiplayer network game for Linux. The server component June 01, 2001 version is vulnerable to a denial of service initiated by connecting to the server and sending unexpected characters. This causes...

Perl Web Server 0.x Path Traversal Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/2648/info Perl Web Server, an experimental cross-platform web server project, does not prevent a remote user from requesting documents outside the ServerRoot location of the virtual / directory. This means that if an...

Citrix Metaframe for Windows NT 4.0 TSE 1.8 Java ICA Environment DoS

No description provided by source. source: http://www.securityfocus.com/bid/5439/info Citrix Metaframe is a commercial available remote desktop application. This issue affects Metaframe on the Microsoft Windows platform. It has been discovered that Metaframe can be made to become unstable. By...

IIS 1.0,Netscape Server 1.0/1.12,OReilly WebSite Professional 1.1 b BAT/.CMD Remote Command Execution

No description provided by source. IIS 1.0,Netscape Commerce Server 1.0/Communications Server 1.12,OReilly Software WebSite Professional 1.1 b BAT/.CMD Remote Command Execution source: http://www.securityfocus.com/bid/2023/info Some web servers that allow batch files to be executed via CGI are...