TinyPHPForum 3.6 - error.php Information Disclosure

TinyPHPForum 3.6 - error.php Information Disclosure source: https://www.securityfocus.com/bid/19278/info TinyPHPForum is prone to an information-disclosure vulnerability. This issue arises when a script allows a remote untrusted source to change a victim user's email address, and have their login...

Multiple MySQL database vulnerabilities

Symbolic links problem during tamporary database tables creation, loading dynamic library from untrusted source, buffer overflows, DoS...

O3Read 0.0.3 - HTML Parser Buffer Overflow

source: https://www.securityfocus.com/bid/12000/info o3read is prone to a buffer overflow vulnerability. This issue is exposed when the program parses HTML content during file format conversion. This issue is considered to be remote in nature since it is possible that files may originate from an...

ABC2MTEX 1.6.1 - Process ABC Key Field Buffer Overflow

ABC2MTEX 1.6.1 - Process ABC Key Field Buffer Overflow source: https://www.securityfocus.com/bid/12018/info abc2mtex is prone to a buffer overflow vulnerability. This issue is exposed when the program is used to convert ABC music notation files to MTEX format. In particular, the issue is due to...

PCAL 4.x - Calendar File get_holiday Remote Buffer Overflow

PCAL 4.x - Calendar File getholiday Remote Buffer Overflow source: https://www.securityfocus.com/bid/12036/info PCAL is prone to a buffer overflow vulnerability. This issue is exposed when the application handles a calendar file that contains excessively long holiday data. Since calendar files ma...

PCAL 4.x - Calendar File 'getline' Remote Buffer Overflow

source: https://www.securityfocus.com/bid/12035/info PCAL is prone to a buffer overflow vulnerability. This issue is exposed when the application handles a calendar file that contains excessively long lines. Since calendar files may originate from an external or untrusted source, this vulnerabili...

ABCPP 1.3 - Directive Handler Buffer Overflow

source: https://www.securityfocus.com/bid/12021/info abcpp is prone to a buffer overflow vulnerability. This issue is exposed when the program is used to handle directives in ABC music notation files. Since the ABC files may originate from an external or untrusted source, this issue is considered...

ABC2PSJCABC2PS 1.2 - Voice Field Buffer Overflow

ABC2PSJCABC2PS 1.2 - Voice Field Buffer Overflow source: https://www.securityfocus.com/bid/12024/info abc2ps and jcabc2ps are prone to a buffer overflow vulnerability. This issue is exposed when the program is used to process the voice field in ABC music notation files. Since the ABC files may...

PCAL 4.x - Calendar File 'get_holiday' Remote Buffer Overflow

source: https://www.securityfocus.com/bid/12036/info PCAL is prone to a buffer overflow vulnerability. This issue is exposed when the application handles a calendar file that contains excessively long holiday data. Since calendar files may originate from an external or untrusted source, this...

NASM 0.98.x - Error Preprocessor Directive Buffer Overflow

source: https://www.securityfocus.com/bid/11991/info NASM is prone to a buffer overflow. This condition is exposed when the application attempts to assemble a source file that contains malformed '%error' preprocessor directive arguments. Since the source file may originate from an external or...

ASP2PHP 0.76.23 - Preparse Token Variable Buffer Overflow

source: https://www.securityfocus.com/bid/12014/info asp2php is prone to a buffer overflow vulnerability. This issue is exposed when the application is used to convert an ASP file to PHP. The particular issue is related to parsing of tokens in ASP files. Since ASP files may originate from an...

HTML2HDML 1.0.3 - File Conversion Buffer Overflow

source: https://www.securityfocus.com/bid/12003/info html2hdml is prone to a buffer overflow vulnerability. This issue is exposed when converting HTML files to HDML Handheld Device Markup Language. Since HTML files may originate from an external or untrusted source, this vulnerability is consider...

JPegToAvi 1.5 - File List Buffer Overflow

source: https://www.securityfocus.com/bid/11976/info jpegtoavi is prone to a buffer overflow. This issue is exposed when the software handles a malformed file list. As the list originates from an external or untrusted source, this issue is considered remote in nature. If this vulnerability is...

gaim -- malicious smiley themes

The Gaim Security Issues page documents a problem with installing smiley themes from an untrusted source: To install a new smiley theme, a user can drag a tarball from a graphical file manager, or a hypertext link to one from a web browser. When a tarball is dragged, Gaim executes a shell command...

Python 1.5.2 Pickle - Unsafe eval() Code Execution

Python 1.5.2 Pickle - Unsafe eval Code Execution source: https://www.securityfocus.com/bid/5255/info Python is an open source, object oriented programming language. The Python Pickle module is provided to convert object variables into a serialized form "pickling", and later recover the data back...

Python 1.5/1.6/2.0/2.1.x - Pickle Class Constructor Arbitrary Code Execution

source: https://www.securityfocus.com/bid/5257/info Python is an open source, object oriented programming language. The Python Pickle module is provided to convert object variables into a serialized form "pickling", and later recover the data back into an object hierarchy "unpickling". A...