10463 matches found
CVE-2008-0475
ManageEngine Applications Manager 8.1 build 8100 allows remote attackers to obtain sensitive information Home-Summary via an invalid URI, as demonstrated by the "/-" URI. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...
bubbling library 1.32 - uri Remote File Disclosure
bubbling library 1.32 - uri Remote File Disclosure bubbling library v1.32 Remote File Disclosure Vulnerabilities Download script : http://sourceforge.net/project/showfiles.php?groupid=192730 Author : Stack-Terrorist v40 Email : [email protected] Home : http://www.v4-team.com exploit :...
Sql injection
SQL injection vulnerability in the WP-Forum 1.7.4 plugin for WordPress allows remote attackers to execute arbitrary SQL commands via the user parameter in a showprofile action to the default URI...
CVE-2008-0388
SQL injection vulnerability in the WP-Forum 1.7.4 plugin for WordPress allows remote attackers to execute arbitrary SQL commands via the user parameter in a showprofile action to the default URI...
firefoxchrome-escalate.txt
Gerry Eisenhaur came with a surprising post http://www.hiredhacker.com/2008/01/19/firefox-chrome-url-handling-directory-traversal/ . Gerry found a issue in Firefox that allows chrome privilege escalation. This is due to weak normalization between URI's that are handled and passed through Firefox...
Mozilla Firefox 2.0 - 'chrome://' URI JavaScript File Request Information Disclosure
source: https://www.securityfocus.com/bid/27406/info Mozilla Firefox is prone to an information-disclosure vulnerability because it fails to restrict access to local JavaScript, images and stylesheets files. Attackers can exploit this issue to gain access to potentially sensitive information that...
Debian Security Advisory DSA 1396-1 (icedove)
The remote host is missing an update to icedove announced via advisory DSA 1396-1. OpenVAS Vulnerability Test $Id: deb13961.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1396-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...
Debian Security Advisory DSA 566-1 (cupsys)
The remote host is missing an update to cupsys announced via advisory DSA 566-1. OpenVAS Vulnerability Test $Id: deb5661.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 566-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...
Debian Security Advisory DSA 518-1 (kdelibs)
The remote host is missing an update to kdelibs announced via advisory DSA 518-1. OpenVAS Vulnerability Test $Id: deb5181.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 518-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...
Debian Security Advisory DSA 518-1 (kdelibs)
The remote host is missing an update to kdelibs announced via advisory DSA 518-1. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later...
Debian Security Advisory DSA 1425-1 (xulrunner)
The remote host is missing an update to xulrunner announced via advisory DSA 1425-1. OpenVAS Vulnerability Test $Id: deb14251.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1425-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...
Debian Security Advisory DSA 1401-1 (iceape)
The remote host is missing an update to iceape announced via advisory DSA 1401-1. OpenVAS Vulnerability Test $Id: deb14011.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1401-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...
8E6 R3000 Internet Filter 2.0.5.33 - URI SecURIty Bypass
source: https://www.securityfocus.com/bid/27309/info 8e6 R3000 Internet Filter is prone to a vulnerability that allows attackers to bypass URI filters. Attackers can exploit this issue by sending specially crafted HTTP request packets for an arbitrary website. Successful exploits allow attackers ...
8E6 R3000 Internet Filter 2.0.5.33 - URI SecURIty Bypass
8E6 R3000 Internet Filter 2.0.5.33 - URI SecURIty Bypass source: https://www.securityfocus.com/bid/27309/info 8e6 R3000 Internet Filter is prone to a vulnerability that allows attackers to bypass URI filters. Attackers can exploit this issue by sending specially crafted HTTP request packets for a...
Sun Java运行时环境jpiexp32.dll对象名称空指针引用漏洞
BUGTRAQ ID: 27185 CVECAN ID: CVE-2007-0012 Solaris系统的Java运行时环境（JRE）为JAVA应用程序提供可靠的运行环境。 JRE处理畸形的Applet数据时存在漏洞，远程攻击者可能利用此漏洞导致相关的应用崩溃。 RFC2397标准允许在URI中编码java applet并嵌入到HTML文档中。如果applet被编码为带有未定义name属性对象标签的数据参数的话，并将其传送给Internet Explorer，则解码后将其传送给JVM就会在jpiexp32.dll中触发空指针引用，导致拒绝服务。 Sun JRE 5.0 Update 14...
[SECURITY] Fedora 7 Update: libxml2-2.6.31-1.fc7
This library allows to manipulate XML files. It includes support to read, modify and write XML and HTML files. There is DTDs support this includes parsing and validation even with complex DtDs, either at parse time or later once the document has been modified. The output can be a simple SAX strea...
[SECURITY] Fedora 8 Update: libxml2-2.6.31-1.fc8
This library allows to manipulate XML files. It includes support to read, modify and write XML and HTML files. There is DTDs support this includes parsing and validation even with complex DtDs, either at parse time or later once the document has been modified. The output can be a simple SAX strea...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in PRO-Search 0.17 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 prot, 2 host, 3 path, 4 name, 5 ext, 6 size, 7 searchdays, or 8 showpage parameter to the default URI...