5345 matches found
SunGard Banner Student 7.3 - 'add1' Cross-Site Scripting
source: https://www.securityfocus.com/bid/27490/info Banner Student is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied input data. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in t...
CVE-2007-5252
Buffer overflow in NetSupport Manager NSM Client 10.00 and 10.20, and NetSupport School Student NSS 9.00, allows remote NSM servers to cause a denial of service or possibly execute arbitrary code via crafted data in the configuration exchange phase of an initial connection setup. NOTE: a vendor...
CVE-2007-5252
Buffer overflow in NetSupport Manager NSM Client 10.00 and 10.20, and NetSupport School Student NSS 9.00, allows remote NSM servers to cause a denial of service or possibly execute arbitrary code via crafted data in the configuration exchange phase of an initial connection setup. NOTE: a vendor...
CVE-2007-5252
CVE-2007-5252 is a buffer overflow in NetSupport Manager (NSM) Client 10.00/10.20 and NetSupport School Student (NSS) 9.00. The flaw allows an unauthenticated, remote attacker to cause a denial of service or possibly execute arbitrary code through crafted data in the configuration exchange phase ...
CVE-2007-5252: Improper Restriction of Operations within the Bounds of a Memory Buffer
Buffer overflow in NetSupport Manager NSM Client 10.00 and 10.20, and NetSupport School Student NSS 9.00, allows remote NSM servers to cause a denial of service or possibly execute arbitrary code via crafted data in the configuration exchange phase of an initial connection setup. NOTE: a vendor...
CVE-2007-4945
Multiple cross-site scripting XSS vulnerabilities in LetterGrade allow remote attackers to inject arbitrary web script or HTML via 1 a student's email address, 2 the year parameter to genbrws/Student/calmonth.php3, and other unspecified vectors related to the calendar. NOTE: the provenance of thi...
Grandstream Budge Tone-200 IP Phone - Digest domain Denial of Service
!/usr/bin/perl MADYNES Security Advisory http://madynes.loria.fr Title: Grandstream Budge Tone-200 denial of service vulnerability Release Date: 21/03/2007 Severity: High - Denial of Service Advisory ID:KIPH3 Hardware: Grandstream Budge Tone-200 IP Phone...
SynchronEyes Student Detection
The remote host is running SMART Technologies SynchronEyes Student. This software allows teacher to remotely control student desktops and/or allow students to join a class. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid21217; scriptversion "1.9"; scriptcvsdate"Date:...
SynchronEyes Teacher Detection
The remote host is running SMART Technologies SynchronEyes Teacher. This software allows teachers to remotely control student desktops. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid21218; scriptversion "1.10"; scriptcvsdate"Date: 2019/10/01 11:24:12";...
CVE-2006-1647
CVE-2006-1647 affects SMART SynchronEyes (Student and Teacher) version 6.0 and possibly earlier. The vulnerability arises from a logical programming mistake that permits remote denial of service via a large UDP packet sent to the Teacher discovery port 5496, causing a thread to terminate and halt...
CVE-2006-1648: Undefined Security Weakness
SMART SynchronEyes Student and Teacher 6.0, and possibly earlier versions, allows remote attackers to cause a denial of service memory consumption via a certain packet to the Teacher discovery port that causes SynchronEyes to connect to the attacker's machine and read a value that is used as a...
CVE-2006-1647: Undefined Security Weakness
An unspecified "logical programming mistake" in SMART SynchronEyes Student and Teacher 6.0, and possibly earlier versions, allows remote attackers to cause a denial of service via a large packet to the Teacher discovery port UDP port 5496, which causes a thread to terminate and prevents...
DJB's students release 44 *nix software vulnerability advisories
Widely deployed open source software is commonly believed to contain fewer security vulnerabilities than similar closed source software due to the possibility of unrestricted third party source code auditing. Predictably, most users of open source software do not invest a significant amount of ti...
centreVuln.txt
Summary: www.miller-group.net The Miller Group, Inc. announces the release of Centre, a free student information system for public and non-public schools. Centre is a web-based, open source, student management product with features that include scheduling, grade book, attendance, eligibility,...
CVE-2001-1094
NetOp School 1.5 allows local users to bypass access restrictions on the administration version by logging into the student version, closing the student version, then starting the administration version...
CVE-2001-1094: Undefined Security Weakness
NetOp School 1.5 allows local users to bypass access restrictions on the administration version by logging into the student version, closing the student version, then starting the administration version...
fingerd
I am new on the list so i dont know if you knew that. On Irix 6.4 with all patches installed the fingerd seems to like to display the shadow file to all users. ln -s /etc/shadow /path/user/.plan finger [email protected] This feature was found by a student -Zanikolas Serafim- while he was...
Security update 1970-01-01
...