563 matches found
CVE-2014-2913
Incomplete blacklist vulnerability in nrpe.c in Nagios Remote Plugin Executor NRPE 2.15 and earlier allows remote attackers to execute arbitrary commands via a newline character in the -a option to libexec/checknrpe. NOTE: this issue is disputed by multiple parties. It has been reported that the...
A CISO's Guide To Application Security – Part 5: Justifying an Investment in AppSec
This post is the last in a 5-part series on Application Security, or “AppSec”. This blog post series has examined the growing threats to software, defined the components of a sound AppSec program, described an evolutionary path to AppSec maturity, and considered a number of tools and technologies...
A CISO's Guide To Application Security – Part 3: Toward an AppSec Center of Excellence
This post is the third in a 4-part series on Application Security, or “AppSec”. The series will define the components of a sound AppSec program, delineate the growing threats to software, weigh the costs of a data breach, and outline the CISO’s responsibility in managing software security risk...
CVE-2012-0808
as31 2.3.1-4 does not seed the random number generator and generates predictable temporary file names, which makes it easier for local users to create or truncate files via a symlink attack...
blender / gedit / gnumeric / vim / eog python scripts code execution
sys.path variable manipulation is possible to load arbitrary modules...
vim sandbox protection bypass
Potentially dangerous functions are allowed in modeline processing...
CVE-2004-2152
Cross-site scripting XSS vulnerability in 'raw' page output mode for MediaWiki 1.3.4 and earlier allows remote attackers to inject arbitrary web script or HTML...
HP-UX stmkfonts privilege escalation
External program is called with relative path...
Microsoft Excel code execution
Buffer overflow on oversized strings copying...
L2TPd buffer overflow
No description provided...
Microsoft HTML Help buffer overflow
Buffer overflow on CHM format parsing...
kon2 buffer overflow
Buffer overflow in /usr/bin/kon on oversized -Coding parameter...
Burning Board 1.1.1 - 'URL' Manipulation
source: https://www.securityfocus.com/bid/4512/info Burning Board is web forum software. It is written in PHP, back-ended by MySQL, and will run on most Unix and Linux variants as well as Microsoft Windows. An attacker may allegedly create a malicious link which is capable of causing actions to b...
Cleartext passphrase in PGP7 + Outlook
Passphrase is stored in memory in cleartext and presents in memory dump...
BSCW: Vulnerabilities and Problems
------------------------------------------------------------------------ -= BSCW Security Issues - Audit report 02 - 7. Sept. 2001 =- ------------------------------------------------------------------------ BSCW is a groupware system that runs on a webserver. For more information about BSCW visit...
CVE-2025-54843
Fortinet DNS Server vulnerability associated with CVE-2025-54843 is described in PT-2025-31611 as due to insufficient input validation. The connected PT document states Fortinet DNS Server with affected versions not specified and provides no remediation details. The NVD/NVD and EUVD records in th...
