CVE-2010-2001

Cross-site scripting XSS vulnerability in the CiviRegister module before 6.x-1.1 for Drupal allows remote attackers to inject arbitrary web script or HTML via the URI...

Cross site scripting

Cross-site scripting XSS vulnerability in the CiviRegister module before 6.x-1.1 for Drupal allows remote attackers to inject arbitrary web script or HTML via the URI...

CVE-2010-0998

Multiple stack-based buffer overflows in Free Download Manager FDM before 3.0.852 allow remote attackers to execute arbitrary code via vectors involving 1 the folders feature in Site Explorer, 2 the websites feature in Site Explorer, 3 an FTP URI, or 4 a redirect...

Stack overflow

Multiple stack-based buffer overflows in Free Download Manager FDM before 3.0.852 allow remote attackers to execute arbitrary code via vectors involving 1 the folders feature in Site Explorer, 2 the websites feature in Site Explorer, 3 an FTP URI, or 4 a redirect...

CVE-2010-0998

Multiple stack-based buffer overflows in Free Download Manager FDM before 3.0.852 allow remote attackers to execute arbitrary code via vectors involving 1 the folders feature in Site Explorer, 2 the websites feature in Site Explorer, 3 an FTP URI, or 4 a redirect...

RHEL 5 : squid (RHSA-2010:0221)

An updated squid package that fixes two security issues and several bugs is now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having low security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity...

CVE-2009-4844

ToutVirtual VirtualIQ Pro 3.2 build 7882 does not restrict access to the /status URI on port 9080, which allows remote attackers to obtain sensitive Tomcat information via a direct request...

CVE-2009-4844

ToutVirtual VirtualIQ Pro 3.2 build 7882 does not restrict access to the /status URI on port 9080, which allows remote attackers to obtain sensitive Tomcat information via a direct request...

CVE-2010-0995

Stack-based buffer overflow in Internet Download Manager IDM before 5.19 allows remote attackers to execute arbitrary code via a crafted FTP URI that causes unspecified "test sequences" to be sent from client to server...

Stack overflow

Stack-based buffer overflow in Internet Download Manager IDM before 5.19 allows remote attackers to execute arbitrary code via a crafted FTP URI that causes unspecified "test sequences" to be sent from client to server...

CVE-2010-0995

Stack-based buffer overflow in Internet Download Manager IDM before 5.19 allows remote attackers to execute arbitrary code via a crafted FTP URI that causes unspecified "test sequences" to be sent from client to server...

CVE-2010-0995

The CVE-2010-0995 entry concerns Internet Download Manager (IDM) prior to 5.19. The vulnerability is a stack-based buffer overflow triggered while IDM processes certain FTP URIs, by sending crafted test sequences from client to server, allowing remote code execution. Public sources in the connect...

WordPress Plugin Cimy Counter 0.9.4 - HTTP Response Splitting / Cross-Site Scripting

source: https://www.securityfocus.com/bid/41132/info Cimy Counter for WordPress is prone to an HTTP response-splitting vulnerability and a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary scrip...

Tonec Internet Download Manager 5.18 超长FTP URI栈溢出漏洞

BUGTRAQ ID: 39822 CVE ID: CVE-2010-0995 Internet Download Manager是一款下载加速工具。 Internet Download Manager在向FTP服务器发送某些测试序列时存在栈溢出漏洞，用户受骗从特制的FTP URI下载了特制文件就可以触发这个溢出，导致执行任意代码。 Tonec Internet Download Manager 5.18 厂商补丁： Tonec ----- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.internetdownloadmanager.com/...

Mozilla Firefox Code Execution Vulnerability (May 2010) - Windows

Mozilla Firefox is prone to a code execution vulnerability. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Mozilla Firefox Code Execution Vulnerability (Windows) - May10

The host is installed with Mozilla Firefox browser and is prone to code execution vulnerability OpenVAS Vulnerability Test $Id: gbfirefoxcodeexevulnwinmay10.nasl 5306 2017-02-16 09:00:16Z teissa $ Mozilla Firefox Code Execution Vulnerability Windows - May10 Authors: Antu Sanadi Copyright: Copyrig...

Vulnerabilities in t3m_cumulus_tagcloud for TYPO3

Здравствуйте 3APA3A! Сообщаю вам о Cross-Site Scripting и Full path disclosure уязвимостях в плагине t3mcumulustagcloud для TYPO3. Данная XSS уязвимость идентична XSS уязвимости в Tagcloud для DLE http://websecurity.com.ua/3927/. Про миллионы флешек tagcloud.swf уязвимых к XSS атакам я упоминал в...

Internet Download Manager buffer overflow

Buffer overflow on ftp:// URI processing...

Cross site scripting

Cross-site scripting XSS vulnerability in Wolfram Research webMathematica allows remote attackers to inject arbitrary web script or HTML via the URI to the MSP script...

CVE-2009-4814

CVE-2009-4814 describes a cross-site scripting (XSS) vulnerability in Wolfram Research WebMathematica, allowing remote attackers to inject arbitrary web script or HTML via the URI to the MSP script. The documents identify the affected component as the WebMathematica MSP script handling URI input,...