3859 matches found
DSA-696-1 perl - design flaw
Bulletin has no description...
DSA-690-1 bsmtpd - missing input sanitising
Bulletin has no description...
CVE-2004-1599
CVE-2004-1599 concerns a Cross-site Scripting (XSS) vulnerability in CoolPHP 1.0-stable, exploitable via index.php using the query or nick parameters. The underlying issue is insufficient input handling in the affected script, allowing an attacker to inject and execute arbitrary web scripts/HTML ...
Fedora Core 2 : xemacs-21.4.17-0.FC2 (2005-145)
Update to 21.4.17 stable release, which also fixes the CVE-2005-0100 movemail string format vulnerability. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as muc...
[SECURITY] [DSA 683-1] New postgresql packages fix arbitrary code execution
-------------------------------------------------------------------------- Debian Security Advisory DSA 683-1 [email protected] http://www.debian.org/security/ Martin Schulze February 15th, 2005 http://www.debian.org/security/faq -...
DSA-663-1 prozilla - buffer overflows
Bulletin has no description...
[SECURITY] [DSA 656-1] New vdr packages fix insecure file access
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- Debian Security Advisory DSA 656-1 [email protected] http://www.debian.org/security/ Martin Schulze January 25th, 2005 http://www.debian.org/security/faq -...
DSA-659-1 libpam-radius-auth - information leak, integer underflow
Bulletin has no description...
DEBIAN-CVE-2005-0096
Memory leak in the NTLM fakeauthauth helper for Squid 2.5.STABLE7 and earlier allows remote attackers to cause a denial of service memory consumption...
DSA-643-1 queue - buffer overflows
Bulletin has no description...
DSA-641-1 playmidi - buffer overflow
Bulletin has no description...
DSA-639-1 mc - several
Bulletin has no description...
DSA-627-1 namazu2 - unsanitised input
Bulletin has no description...
[SECURITY] [DSA 625-1] New pcal packages fix arbitrary code execution
-------------------------------------------------------------------------- Debian Security Advisory DSA 625-1 [email protected] http://www.debian.org/security/ Martin Schulze January 5th, 2004 http://www.debian.org/security/faq -...
DSA-623-1 nasm - buffer overflow
Bulletin has no description...
DEBIAN-CVE-2004-2654
The clientAbortBody function in clientside.c in Squid Web Proxy Cache before 2.6 STABLE6 allows remote attackers to cause a denial of service segmentation fault via unspecified vectors that trigger a null dereference. NOTE: in a followup advisory, a researcher claimed that the issue was a buffer...
[SECURITY] [DSA 611-1] New htget packages fix arbitrary code execution
-------------------------------------------------------------------------- Debian Security Advisory DSA 611-1 [email protected] http://www.debian.org/security/ Martin Schulze December 20th, 2004 http://www.debian.org/security/faq -...
DSA-610-1 cscope - insecure temporary file
Bulletin has no description...