5460 matches found
CVE-2005-4793
Technical details (affected products/versions, root cause, impact, and fixes) are not publicly provided in the provided documents. Monitor for updates.
Apple Mac OSX Safari Browser - 'Safe File' Remote Code Execution (Metasploit)
This file is part of the Metasploit Framework and may be redistributed according to the licenses defined in the Authors field below. In the case of an unknown or missing license, this file defaults to the same license as the core Framework dual GPLv2 and Artistic. The latest version of the...
Multiple bluetooth devices and applications DoS (Sony Ericsson, Nokia, etc)
Multiple vulnerabilities discovered with Bluetooth Stack Smasher utility...
Cross site scripting
Cross-site scripting XSS vulnerability in Virtual Hosting Control System VHCS 2.4.7.1 with v.1 patch and earlier allows remote attackers to inject arbitrary web script or HTML via the username, which is recorded in a log file but not properly handled when the administrator uses the admin log...
CVE-2006-0683
Cross-site scripting XSS vulnerability in Virtual Hosting Control System VHCS 2.4.7.1 with v.1 patch and earlier allows remote attackers to inject arbitrary web script or HTML via the username, which is recorded in a log file but not properly handled when the administrator uses the admin log...
CVE-2006-0683
Cross-site scripting XSS vulnerability in Virtual Hosting Control System VHCS 2.4.7.1 with v.1 patch and earlier allows remote attackers to inject arbitrary web script or HTML via the username, which is recorded in a log file but not properly handled when the administrator uses the admin log...
net-snmp SNMP package fixproc utility symbolic link problem
Symbolic links problem on temporary files creation...
CVE-2006-0408
rsh utility in Sun Grid Engine SGE before 6.0u71 allows local users to gain privileges and execute arbitrary code via unspecified vectors, possibly involving command line arguments...
CVE-2006-0172
The CVE-2006-0172 entry describes a Cross-site Scripting (XSS) vulnerability in the file manager utility of Hummingbird Collaboration (Hummingbird Enterprise Collaboration) 5.21 and earlier. The issue allows remote attackers to inject arbitrary web script or HTML into an uploaded page, which is p...
texindex -- temporary file privilege escalation
Problem description The "sortoffline" function used by texindex1 employs the "maketempname" function, which produces predictable file names and fails to validate that the paths do not exist. Impact These predictable temporary file names are problematic because they allow an attacker to take...
[ GLSA 200512-18 ] XnView: Privilege escalation
Gentoo Linux Security Advisory GLSA 200512-18 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - http://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity:...
Unalz 0.x - Archive Filename Buffer Overflow
Unalz 0.x - Archive Filename Buffer Overflow source: https://www.securityfocus.com/bid/15577/info The 'unalz' utility is prone to a buffer-overflow vulnerability. This issue is exposed when the application extracts an ALZ archive that contains a file with a long name. An attacker could exploit th...
VERITAS Cluster Server for UNIX buffer overflow
Buffer overflow in 'ha' suid utility on environment variables parsing...
bizdb1-search.cgi located
One of the BizDB scripts, bizdb-search.cgi, passes a variable SPDX-FileCopyrightText: 2000 Roelof Temmingh Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Sympa < 4.1.3 Privilege Escalation Vulnerability
The remote version of Sympa contains a vulnerability which can be exploited by malicious local user to gain escalated privileges. SPDX-FileCopyrightText: 2005 David Maciejak Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...
Symantec Norton AntiVirus and another Symantec security products for Macintosh privilege escalation
Norton Antivirus DiskMountNotify suid utility executes external applications by relative name. LiveUpdate contains suid wrapper for Java interpreter without proper command line check...
flexbackup backup utility symbolic links problem
Symbolic links problem during temporary files creation...
Slackware 10.1 / current : emacs movemail POP utility (SSA:2005-201-02)
New emacs packages are available for Slackware 10.1 and -current to a security issue with the movemail utility for retrieving mail from a POP mail server. If used to connect to a malicious POP server, it is possible for the server to cause the execution of arbitrary code as the user running emacs...
RHEL 4 : wget (RHSA-2005:771)
The remote Redhat Enterprise Linux 4 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2005:771 advisory. GNU Wget is a file retrieval utility that can use either the HTTP or FTP protocols. A bug was found in the way wget writes files to the local...