1770 matches found
CVE-2006-5419
PHP remote file inclusion vulnerability in client.php in University of Glasgow Specimen Image Database SID, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the dir parameter...
CVE-2006-5416
Cross-site scripting XSS vulnerability in my.acctab.php3 in F5 Networks FirePass 1000 SSL VPN 5.5, and possibly earlier, allows remote attackers to inject arbitrary web script or HTML via the sid parameter...
CVE-2006-5419
The CVE-2006-5419 entry describes a PHP remote file inclusion in University of Glasgow SID (client.php) when register_globals is enabled. An attacker can cause arbitrary PHP code execution via a URL placed in the dir parameter, enabling network-based exploitation. The vulnerability affects SID’s ...
F5 Firepass crossite scripting
my.acctab.php3 sid parameter crossite scripting...
Specimen Image Database - client.php Remote File Inclusion
Specimen Image Database - client.php Remote File Inclusion --------------------------------------------------------------------------- SID - dir Remote File Include Vulnerability --------------------------------------------------------------------------- Discovered By Kw3RLn Romanian Security Tea...
Specimen Image Database - 'client.php' Remote File Inclusion
--------------------------------------------------------------------------- SID - dir Remote File Include Vulnerability --------------------------------------------------------------------------- Discovered By Kw3RLn Romanian Security Team : hTTp://RST-CREW.net : Remote : Yes Critical Level :...
Debian DSA-875-1 : openssl094 - cryptographic weakness
Yutaka Oiwa discovered a vulnerability in the Open Secure Socket Layer OpenSSL library that can allow an attacker to perform active protocol-version rollback attacks that could lead to the use of the weaker SSL 2.0 protocol even though both ends support SSL 3.0 or TLS 1.0. The following matrix...
Debian DSA-882-1 : openssl095 - cryptographic weakness
Yutaka Oiwa discovered a vulnerability in the Open Secure Socket Layer OpenSSL library that can allow an attacker to perform active protocol-version rollback attacks that could lead to the use of the weaker SSL 2.0 protocol even though both ends support SSL 3.0 or TLS 1.0. The following matrix...
[SECURITY] [DSA 1194-1] New libwmf packages fix arbitrary code execution
-------------------------------------------------------------------------- Debian Security Advisory DSA 1194-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff October 9th, 2006 http://www.debian.org/security/faq -...
[Full-disclosure] [SECURITY] [DSA 1187-1] New migrationtools packages fix denial of service
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- Debian Security Advisory DSA 1187-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff September 30th, 2006 http://www.debian.org/security/faq -...
[SECURITY] [DSA 1170-1] New fastjar packages fix directory traversal
-------------------------------------------------------------------------- Debian Security Advisory DSA 1170-1 [email protected] http://www.debian.org/security/ Martin Schulze September 6th, 2006 http://www.debian.org/security/faq -...
[Full-disclosure] [SECURITY] [DSA 1165-1] New capi4hylafax packages fix arbitrary command execution
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- Debian Security Advisory DSA 1165-1 [email protected] http://www.debian.org/security/ Martin Schulze September 1st, 2006 http://www.debian.org/security/faq -...
DSA-1163 gtetrinet - programming error
Bulletin has no description...
[SECURITY] [DSA 1158-1] New streamripper packages fix arbitrary code execution
-------------------------------------------------------------------------- Debian Security Advisory DSA 1158-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff August 25th, 2006 http://www.debian.org/security/faq -...
[SECURITY] [DSA 1156-1] New kdebase packages fix information disclosure
-------------------------------------------------------------------------- Debian Security Advisory DSA 1156-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff August 27th, 2006 http://www.debian.org/security/faq -...
[SECURITY] [DSA 1153-1] New ClamAV packages fix arbitrary code execution
-------------------------------------------------------------------------- Debian Security Advisory DSA 1153-1 [email protected] http://www.debian.org/security/ Martin Schulze August 18th, 2006 http://www.debian.org/security/faq -...
DSA-1141-1 gnupg2 - integer overflow
Bulletin has no description...
[SECURITY] [DSA 1140-1] New GnuPG packages fix denial of service
-------------------------------------------------------------------------- Debian Security Advisory DSA 1140-1 [email protected] http://www.debian.org/security/ Martin Schulze August 3rd, 2006 http://www.debian.org/security/faq -...
[SECURITY] [DSA 1129-1] New osiris packages fix arbitrary code execution
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- Debian Security Advisory DSA 1129-1 [email protected] http://www.debian.org/security/ Martin Schulze July 28th, 2006 http://www.debian.org/security/faq -...