CVE-2006-1903

CVE-2006-1903 concerns multiple XSS vulnerabilities in UserLand Manila (9.5 and earlier). The affected surface is Manila’s web interface edited with the editInBrowser module, allowing remote attackers to inject arbitrary script or HTML via (1) the referer parameter in sendMail, and (2) attributes...

CVE-2006-1903

Multiple cross-site scripting XSS vulnerabilities in UserLand Manila allow remote attackers to inject arbitrary web script or HTML 1 via the referer parameter in sendMail, and via attributes of 2 the A element and certain other HTML elements in web pages edited with the editInBrowser module. NOTE...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in UserLand Manila 9.5 and earlier allow remote attackers to inject arbitrary web script or HTML via 1 the mode parameter in msgReader$1 and 2 the end of the URI in viewDepartment$...

CVE-2006-1769

Multiple cross-site scripting XSS vulnerabilities in UserLand Manila 9.5 and earlier allow remote attackers to inject arbitrary web script or HTML via 1 the mode parameter in msgReader$1 and 2 the end of the URI in viewDepartment$...

CVE-2006-1769

Multiple cross-site scripting XSS vulnerabilities in UserLand Manila 9.5 and earlier allow remote attackers to inject arbitrary web script or HTML via 1 the mode parameter in msgReader$1 and 2 the end of the URI in viewDepartment$...

CVE-2006-1769

CVE-2006-1769 affects UserLand Manila 9.5 and earlier, with XSS vulnerabilities that let remote attackers inject arbitrary script via (1) the mode parameter in msgReader$1 and (2) the end of the URI in viewDepartment$. The connected records also indicate overlap with CVE-2006-1903, which describe...

Manila <= 9.5 - XSS Vulnerabilities

Manila = 9.5 - XSS Vulnerabilities -------------------------------------------------------- Software: Manila Version: = 9.5 Type: Cross Side Scripting Vulnerability Date: Die Apr 11 21:33:54 CEST 2006 Vendor: UserLand Software Page: http://manila.userland.com/ Risc: Middle credits:...

CVE-2006-0379

FreeBSD kernel 5.4-STABLE and 6.0 does not completely initialize a buffer before making it available to userland, which could allow local users to read portions of kernel memory...

CVE-2006-0379

FreeBSD kernel 5.4-STABLE and 6.0 does not completely initialize a buffer before making it available to userland, which could allow local users to read portions of kernel memory...

FreeBSD -- Local kernel memory disclosure

Problem description: A buffer allocated from the kernel stack may not be completely initialized before being copied to userland. CVE-2006-0379 A logic error in computing a buffer length may allow too much data to be copied into userland. CVE-2006-0380 Impact: Portions of kernel memory may be...

FreeBSD amd64 platform privilege escalation

Userland process can access phisical hardware...

[Full-Disclosure] [SECURITY] [DSA-403-1] userland can access Linux kernel memory

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------ Debian Security Advisory DSA-403-1 [email protected] http://www.debian.org/security/ Wichert Akkerman December 1, 2003 -...

[SECURITY] [DSA-403-1] userland can access Linux kernel memory

------------------------------------------------------------------------ Debian Security Advisory DSA-403-1 [email protected] http://www.debian.org/security/ Wichert Akkerman December 1, 2003 - ------------------------------------------------------------------------ Package :...

Symantec Norton AntiVirus 20022003 - Device Driver Memory Overwrite

Symantec Norton AntiVirus 20022003 - Device Driver Memory Overwrite source: https://www.securityfocus.com/bid/8329/info It has been reported that a memory corruption vulnerability affects the Symantec Norton AntiVirus Device Driver. According to the report, one of the device control operation...

NetBSD Security Advisory 2001-015: Insufficient checking of lengths passed to kernel

-----BEGIN PGP SIGNED MESSAGE----- NetBSD Security Advisory 2001-015 ================================= Topic: Insufficient checking of lengths passed from userland to kernel Version: NetBSD-current: source prior to August 5, 2001 NetBSD-1.5.1: affected NetBSD-1.5: affected NetBSD-1.4.: affected...

BSDI 3.03.1 - Local Kernel Denial of Service

BSDI 3.03.1 - Local Kernel Denial of Service / source: https://www.securityfocus.com/bid/3220/info It has been reported that there is a locally exploitable vulnerability in BSDI. It is allegedly possible for a userland process to cause the kernel to halt. This may be due to a bad system call. / /...

FreeBSD-SA-96:15.ppp

-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-96:15 Security Advisory FreeBSD, Inc. Topic: security compromise from ppp Category: core Module: ppp Announced: 1996-07-04 Affects: FreeBSD 2.0.5, 2.1, 2.1-stable, and...