Mozilla Firefox OS lockscreen Competitive Conditions Vulnerability

Mozilla Firefox is an open source web browser that uses the Gecko engine. A competitive condition vulnerability exists in the lockscreen feature of Mozilla Firefox OS prior to version 2.5, which can be exploited by an attacker in close physical proximity to bypass targeted cryptographic measures...

Mozilla Firefox OS lockscreen feature bypass vulnerability

Mozilla Firefox is an open source web browser that uses the Gecko engine. A security vulnerability exists in the lockscreen feature of Mozilla Firefox OS prior to version 2.5, which can be exploited by attackers in close physical proximity to gain access by brute-force password guessing, as the...

Cyrus IMAP index_urlfetch Information Disclosure Vulnerability

Cyrus IMAP Server is an e-mail server developed at Carnegie Mellon University. A security vulnerability exists in the function indexurlfetch in Cyrus IMAP versions 2.3.x-2.3.19, 2.4.x-2.4.18, 2.5.x-2.5.4 index.c. A remote attacker can exploit this vulnerability to obtain sensitive information by...

Multiple integer overflow vulnerabilities in hostapd/wpa_supplicant

hostapd is the user-space daemon for access points and authentication servers. wpasupplicant is the executable program for the WPA supplicant component the part that runs on the client side, which is responsible for coordinating communication between the WPA key and the WPA authentication side, a...

FreeType has multiple denial of service vulnerabilities

FreeType is the FreeType team developed a C-based , high-quality and portable open source font engine library , it can be used to rasterize the characters and mapped to bitmap and provide other font-related business support . Multiple denial of service vulnerabilities exist in versions of FreeTyp...

Infinite Automation Mango Automation File Upload Vulnerability

Infinite Automation Mango Automation is the United States Infinite Automation Systems, Inc. of a set of open source Web-based SCADA data acquisition and supervisory control, HMI and automation software. Infinite Automation Mango Automation 2.5.x and 2.6.x prior to 2.6.0, version 2.6.x, build 430,...

FFmpeg and Libav 'libavcodec/xface.h' Denial of Service Vulnerability

FFmpeg is a free program that performs recording, transferring and streaming of audio and video in various formats. FFmpeg versions prior to 2.5.2 libavcodec/xface.h establishes certain numeric and word array dimensions that do not conform to the required mathematical relationships, which can be...

UBUNTU-CVE-2014-8184

A vulnerability was found in liblouis, versions 2.5.x before 2.5.4. A stack-based buffer overflow was found in findTable in liblouis. An attacker could create a malicious file that would cause applications that use liblouis such as Orca to crash, or potentially execute arbitrary code when opened...

CVE-2010-4947

Cross-site scripting XSS vulnerability in advancedsearchresult.php in ALLPC 2.5 allows remote attackers to inject arbitrary web script or HTML via the keywords parameter...

CVE-2010-4946

SQL injection vulnerability in productinfo.php in ALLPC 2.5 allows remote attackers to execute arbitrary SQL commands via the productsid parameter...

python imageop module heap corruption

Multiple integer overflows in the imageop module in Python 2.5.1 and earlier allow context-dependent attackers to cause a denial of service application crash and possibly obtain sensitive information memory contents via crafted arguments to 1 the tovideo method, and unspecified other vectors...

pidgin PurpleCircBuffer corruption

The PurpleCircBuffer implementation in Pidgin formerly Gaim before 2.5.6 does not properly maintain a certain buffer, which allows remote attackers to cause a denial of service memory corruption and application crash via vectors involving the 1 XMPP or 2 Sametime protocol...

PYSEC-2006-9

Withdrawn as duplicate of PYSEC-2005-5. Unspecified vulnerability in the Password Reset Tool before 0.4.1 on Plone 2.5 and 2.5.1 Release Candidate allows attackers to reset the passwords of other users, related to "an erroneous security declaration."...

DEBIAN-CVE-2005-0194

Squid 2.5, when processing the configuration file, parses empty Access Control Lists ACLs, including proxyauth ACLs without defined auth schemes, in a way that effectively removes arguments, which could allow remote attackers to bypass intended ACLs if the administrator ignores the parser warning...

security flaw

Squid 2.5 up to 2.5.STABLE7 allows remote attackers to poison the cache via an HTTP response splitting attack...

DEBIAN-CVE-2005-0175

Squid 2.5 up to 2.5.STABLE7 allows remote attackers to poison the cache via an HTTP response splitting attack...

DEBIAN-CVE-2005-0094

Buffer overflow in the gopherToHTML function in the Gopher reply parser for Squid 2.5.STABLE7 and earlier allows remote malicious Gopher servers to cause a denial of service crash via crafted responses...

PT-2001-2571 · Imatix · Xitami

Name of the Vulnerable Software and Affected Versions: Xitami versions 2.4 through 2.5 b4 Description: The issue allows remote attackers to gain privileges due to the storage of the Administrator password in plaintext in the default.aut file. The default permissions of this file are world-readabl...

Solaris 2.5.0/2.5.1 ps & chkey Data Buffer Exploit

Exploit for solaris platform in category local exploits ================================================== Solaris 2.5.0/2.5.1 ps & chkey Data Buffer Exploit ================================================== cat psexpl.po psexpl.c include include include define BUFLENGTH 632 define EXTRA 256 int...