4699 matches found
Integer overflow
Integer signedness error in Opera before 8.54 allows remote attackers to execute arbitrary code via long values in a stylesheet attribute, which pass a length check. NOTE: a sign extension problem makes the attack easier with shorter strings...
mod_pubcookie -- cross site scripting vulnerability
Nathan Dors of the Pubcookie Project reports: Non-persistent XSS vulnerabilities were found in the Pubcookie Apache module modpubcookie and ISAPI filter. These components mishandle untrusted data when printing responses to the browser. This makes them vulnerable to carefully crafted requests...
Perl contains an integer sign error in format string processing
Overview The Perl interpreter contains a flaw that may increase the impact of format string vulnerabilities in programs written in Perl. Description Perl is a programming language used in many applications and commonly used for web applications. The Perl interpreter, which interprets and executes...
Fedora Core 2 : kernel-2.6.10-1.771_FC2 (2005-262)
Sun Mar 27 2005 Dave Jones - Catch up with all recent security issues. - CVE-2005-0210 : dst leak - CVE-2005-0384 : ppp dos - CVE-2005-0531 : Sign handling issues. - CVE-2005-0400 : EXT2 information leak. - CVE-2005-0449 : Remote oops. - CVE-2005-0736 : Epoll overflow - CVE-2005-0749 : ELF loader...
CVE-2004-1877
The CVE-2004-1877 issue is documented in connected sources as a phishing vulnerability in Oracle 9iAS Single Sign-On. Specifically, the p_submit_url value in the sample login form for Oracle SSO (9iAS, Release 2/9.0.2) can be exploited by remote attackers to spoof the login page, potentially caus...
DEBIAN-CVE-2004-0982
Buffer overflow in the getauthfromURL function in httpget.c in mpg123 pre0.59s and mpg123 0.59r could allow remote attackers or local users to execute arbitrary code via an mp3 file that contains a long string before the @ at sign in a URL...
IBM WebSphere Application Server < 6.1.0.25 Multiple Vulnerabilities
Binary data 5077.prm...
FreeBSD : ElGamal sign+encrypt keys created by GnuPG can be compromised (61)
The following package needs to be updated: gnupg %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated by freebsdpkg813136472d0311d893550020ed76ef5a.nasl. Disabled on 2011/10/02. C Tenable Network Security, Inc. This script contains information extracted from VuXML : Copyright 2003-20...
CVE-2004-1877
The psubmiturl value in the sample login form in the Oracle 9i Application Server 9iAS Single Sign-on Administrators Guide, Release 29.0.2 for Oracle SSO allows remote attackers to spoof the login page, which could allow users to inadvertently reveal their username and password...
XSS vulnerability in Mojo Mail Sign-Up Form
Heya, this is my first post here so go easy on me plz. I posted about this on the Mojo Bug Tracker ages ago and it's just been ignored, and besides, Im losing faith in reporting to the vendor, PHP Arena took the credit for an XSS bug I found in their paFileDB. But anyway, Mojo Mail doesn't filter...
Security Issue in Icewarp
Icewarp is one the world's most used web mail software. It's another product of Merak Mail developers. There is an seccurity issue in Icewarp. It's like this: When you create a new user , icewarp gives him a static number. If this user does not logout after checking his inbox you can access his...
Update Rollup for Microsoft Online Services Sign-In Assistant (KB2630976)
Microsoft Online Services Sign-In Assistant Update...
Microsoft Online Services Sign In Assistant Upgrade Version Applicability
Microsoft Online Services Sign In Assistant Upgrade Version Applicability Check...
Security update 1970-01-01
...
Security update 1970-01-01
...
Security update 1970-01-01
...
Security update 1970-01-01
...